Nov 1 00:18:22.007407 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Nov 1 00:18:22.007425 kernel: Linux version 5.15.192-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Oct 31 23:12:38 -00 2025 Nov 1 00:18:22.007433 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Nov 1 00:18:22.007441 kernel: printk: bootconsole [pl11] enabled Nov 1 00:18:22.007446 kernel: efi: EFI v2.70 by EDK II Nov 1 00:18:22.007451 kernel: efi: ACPI 2.0=0x3fd5f018 SMBIOS=0x3e580000 SMBIOS 3.0=0x3e560000 MEMATTR=0x3ead8b98 RNG=0x3fd5f998 MEMRESERVE=0x3761cf98 Nov 1 00:18:22.007457 kernel: random: crng init done Nov 1 00:18:22.007463 kernel: ACPI: Early table checksum verification disabled Nov 1 00:18:22.007469 kernel: ACPI: RSDP 0x000000003FD5F018 000024 (v02 VRTUAL) Nov 1 00:18:22.007474 kernel: ACPI: XSDT 0x000000003FD5FF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007479 kernel: ACPI: FACP 0x000000003FD5FC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007485 kernel: ACPI: DSDT 0x000000003FD41018 01DFCD (v02 MSFTVM DSDT01 00000001 INTL 20230628) Nov 1 00:18:22.007491 kernel: ACPI: DBG2 0x000000003FD5FB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007497 kernel: ACPI: GTDT 0x000000003FD5FD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007504 kernel: ACPI: OEM0 0x000000003FD5F098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007509 kernel: ACPI: SPCR 0x000000003FD5FA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007515 kernel: ACPI: APIC 0x000000003FD5F818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007522 kernel: ACPI: SRAT 0x000000003FD5F198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007528 kernel: ACPI: PPTT 0x000000003FD5F418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Nov 1 00:18:22.007533 kernel: ACPI: BGRT 0x000000003FD5FE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Nov 1 00:18:22.007539 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Nov 1 00:18:22.007545 kernel: NUMA: Failed to initialise from firmware Nov 1 00:18:22.007551 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Nov 1 00:18:22.007556 kernel: NUMA: NODE_DATA [mem 0x1bf7f1900-0x1bf7f6fff] Nov 1 00:18:22.007562 kernel: Zone ranges: Nov 1 00:18:22.007568 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Nov 1 00:18:22.007573 kernel: DMA32 empty Nov 1 00:18:22.007579 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Nov 1 00:18:22.007586 kernel: Movable zone start for each node Nov 1 00:18:22.007592 kernel: Early memory node ranges Nov 1 00:18:22.007597 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Nov 1 00:18:22.007603 kernel: node 0: [mem 0x0000000000824000-0x000000003e54ffff] Nov 1 00:18:22.007609 kernel: node 0: [mem 0x000000003e550000-0x000000003e87ffff] Nov 1 00:18:22.007614 kernel: node 0: [mem 0x000000003e880000-0x000000003fc7ffff] Nov 1 00:18:22.007620 kernel: node 0: [mem 0x000000003fc80000-0x000000003fcfffff] Nov 1 00:18:22.007626 kernel: node 0: [mem 0x000000003fd00000-0x000000003fffffff] Nov 1 00:18:22.007631 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Nov 1 00:18:22.007637 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Nov 1 00:18:22.007643 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Nov 1 00:18:22.007649 kernel: psci: probing for conduit method from ACPI. Nov 1 00:18:22.007658 kernel: psci: PSCIv1.1 detected in firmware. Nov 1 00:18:22.007664 kernel: psci: Using standard PSCI v0.2 function IDs Nov 1 00:18:22.007670 kernel: psci: MIGRATE_INFO_TYPE not supported. Nov 1 00:18:22.007676 kernel: psci: SMC Calling Convention v1.4 Nov 1 00:18:22.007682 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Nov 1 00:18:22.007689 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Nov 1 00:18:22.007695 kernel: percpu: Embedded 30 pages/cpu s83032 r8192 d31656 u122880 Nov 1 00:18:22.007702 kernel: pcpu-alloc: s83032 r8192 d31656 u122880 alloc=30*4096 Nov 1 00:18:22.007708 kernel: pcpu-alloc: [0] 0 [0] 1 Nov 1 00:18:22.007714 kernel: Detected PIPT I-cache on CPU0 Nov 1 00:18:22.007720 kernel: CPU features: detected: GIC system register CPU interface Nov 1 00:18:22.007726 kernel: CPU features: detected: Hardware dirty bit management Nov 1 00:18:22.007732 kernel: CPU features: detected: Spectre-BHB Nov 1 00:18:22.007738 kernel: CPU features: kernel page table isolation forced ON by KASLR Nov 1 00:18:22.007744 kernel: CPU features: detected: Kernel page table isolation (KPTI) Nov 1 00:18:22.007750 kernel: CPU features: detected: ARM erratum 1418040 Nov 1 00:18:22.007758 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Nov 1 00:18:22.007764 kernel: CPU features: detected: SSBS not fully self-synchronizing Nov 1 00:18:22.007770 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Nov 1 00:18:22.007776 kernel: Policy zone: Normal Nov 1 00:18:22.007783 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:18:22.007790 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Nov 1 00:18:22.007796 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Nov 1 00:18:22.007802 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Nov 1 00:18:22.007809 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Nov 1 00:18:22.007815 kernel: software IO TLB: mapped [mem 0x000000003a550000-0x000000003e550000] (64MB) Nov 1 00:18:22.007821 kernel: Memory: 3986872K/4194160K available (9792K kernel code, 2094K rwdata, 7592K rodata, 36416K init, 777K bss, 207288K reserved, 0K cma-reserved) Nov 1 00:18:22.007829 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Nov 1 00:18:22.007835 kernel: trace event string verifier disabled Nov 1 00:18:22.007841 kernel: rcu: Preemptible hierarchical RCU implementation. Nov 1 00:18:22.007865 kernel: rcu: RCU event tracing is enabled. Nov 1 00:18:22.007873 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Nov 1 00:18:22.007879 kernel: Trampoline variant of Tasks RCU enabled. Nov 1 00:18:22.007885 kernel: Tracing variant of Tasks RCU enabled. Nov 1 00:18:22.007892 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Nov 1 00:18:22.007898 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Nov 1 00:18:22.007904 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Nov 1 00:18:22.007910 kernel: GICv3: 960 SPIs implemented Nov 1 00:18:22.007918 kernel: GICv3: 0 Extended SPIs implemented Nov 1 00:18:22.007924 kernel: GICv3: Distributor has no Range Selector support Nov 1 00:18:22.007930 kernel: Root IRQ handler: gic_handle_irq Nov 1 00:18:22.007936 kernel: GICv3: 16 PPIs implemented Nov 1 00:18:22.007942 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Nov 1 00:18:22.007948 kernel: ITS: No ITS available, not enabling LPIs Nov 1 00:18:22.007954 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:18:22.007961 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Nov 1 00:18:22.007967 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Nov 1 00:18:22.007973 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Nov 1 00:18:22.007979 kernel: Console: colour dummy device 80x25 Nov 1 00:18:22.007987 kernel: printk: console [tty1] enabled Nov 1 00:18:22.007993 kernel: ACPI: Core revision 20210730 Nov 1 00:18:22.008000 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Nov 1 00:18:22.008006 kernel: pid_max: default: 32768 minimum: 301 Nov 1 00:18:22.008012 kernel: LSM: Security Framework initializing Nov 1 00:18:22.008018 kernel: SELinux: Initializing. Nov 1 00:18:22.008025 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:18:22.008031 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Nov 1 00:18:22.008038 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Nov 1 00:18:22.008045 kernel: Hyper-V: Host Build 10.0.22477.1619-1-0 Nov 1 00:18:22.008051 kernel: rcu: Hierarchical SRCU implementation. Nov 1 00:18:22.008058 kernel: Remapping and enabling EFI services. Nov 1 00:18:22.008064 kernel: smp: Bringing up secondary CPUs ... Nov 1 00:18:22.008070 kernel: Detected PIPT I-cache on CPU1 Nov 1 00:18:22.008076 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Nov 1 00:18:22.008083 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Nov 1 00:18:22.008089 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Nov 1 00:18:22.008095 kernel: smp: Brought up 1 node, 2 CPUs Nov 1 00:18:22.008101 kernel: SMP: Total of 2 processors activated. Nov 1 00:18:22.008109 kernel: CPU features: detected: 32-bit EL0 Support Nov 1 00:18:22.008115 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Nov 1 00:18:22.008122 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Nov 1 00:18:22.008128 kernel: CPU features: detected: CRC32 instructions Nov 1 00:18:22.008134 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Nov 1 00:18:22.008141 kernel: CPU features: detected: LSE atomic instructions Nov 1 00:18:22.008147 kernel: CPU features: detected: Privileged Access Never Nov 1 00:18:22.008153 kernel: CPU: All CPU(s) started at EL1 Nov 1 00:18:22.008159 kernel: alternatives: patching kernel code Nov 1 00:18:22.008166 kernel: devtmpfs: initialized Nov 1 00:18:22.008177 kernel: KASLR enabled Nov 1 00:18:22.008183 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Nov 1 00:18:22.008191 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Nov 1 00:18:22.008198 kernel: pinctrl core: initialized pinctrl subsystem Nov 1 00:18:22.008204 kernel: SMBIOS 3.1.0 present. Nov 1 00:18:22.008211 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 09/28/2024 Nov 1 00:18:22.008217 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Nov 1 00:18:22.008224 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Nov 1 00:18:22.008232 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Nov 1 00:18:22.008239 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Nov 1 00:18:22.008245 kernel: audit: initializing netlink subsys (disabled) Nov 1 00:18:22.008252 kernel: audit: type=2000 audit(0.088:1): state=initialized audit_enabled=0 res=1 Nov 1 00:18:22.008259 kernel: thermal_sys: Registered thermal governor 'step_wise' Nov 1 00:18:22.008265 kernel: cpuidle: using governor menu Nov 1 00:18:22.008272 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Nov 1 00:18:22.008279 kernel: ASID allocator initialised with 32768 entries Nov 1 00:18:22.008286 kernel: ACPI: bus type PCI registered Nov 1 00:18:22.008293 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Nov 1 00:18:22.008299 kernel: Serial: AMBA PL011 UART driver Nov 1 00:18:22.008306 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Nov 1 00:18:22.008312 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Nov 1 00:18:22.008319 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Nov 1 00:18:22.008325 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Nov 1 00:18:22.008332 kernel: cryptd: max_cpu_qlen set to 1000 Nov 1 00:18:22.008339 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Nov 1 00:18:22.008346 kernel: ACPI: Added _OSI(Module Device) Nov 1 00:18:22.008352 kernel: ACPI: Added _OSI(Processor Device) Nov 1 00:18:22.008359 kernel: ACPI: Added _OSI(Processor Aggregator Device) Nov 1 00:18:22.008366 kernel: ACPI: Added _OSI(Linux-Dell-Video) Nov 1 00:18:22.008372 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Nov 1 00:18:22.008379 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Nov 1 00:18:22.008386 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Nov 1 00:18:22.008392 kernel: ACPI: Interpreter enabled Nov 1 00:18:22.008400 kernel: ACPI: Using GIC for interrupt routing Nov 1 00:18:22.008406 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Nov 1 00:18:22.008413 kernel: printk: console [ttyAMA0] enabled Nov 1 00:18:22.008419 kernel: printk: bootconsole [pl11] disabled Nov 1 00:18:22.008426 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Nov 1 00:18:22.008433 kernel: iommu: Default domain type: Translated Nov 1 00:18:22.008439 kernel: iommu: DMA domain TLB invalidation policy: strict mode Nov 1 00:18:22.008446 kernel: vgaarb: loaded Nov 1 00:18:22.008452 kernel: pps_core: LinuxPPS API ver. 1 registered Nov 1 00:18:22.008459 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Nov 1 00:18:22.008467 kernel: PTP clock support registered Nov 1 00:18:22.008474 kernel: Registered efivars operations Nov 1 00:18:22.008480 kernel: No ACPI PMU IRQ for CPU0 Nov 1 00:18:22.008486 kernel: No ACPI PMU IRQ for CPU1 Nov 1 00:18:22.008493 kernel: clocksource: Switched to clocksource arch_sys_counter Nov 1 00:18:22.008499 kernel: VFS: Disk quotas dquot_6.6.0 Nov 1 00:18:22.008506 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Nov 1 00:18:22.008512 kernel: pnp: PnP ACPI init Nov 1 00:18:22.008519 kernel: pnp: PnP ACPI: found 0 devices Nov 1 00:18:22.008526 kernel: NET: Registered PF_INET protocol family Nov 1 00:18:22.008533 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Nov 1 00:18:22.008540 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Nov 1 00:18:22.008546 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Nov 1 00:18:22.008553 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Nov 1 00:18:22.008560 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Nov 1 00:18:22.008566 kernel: TCP: Hash tables configured (established 32768 bind 32768) Nov 1 00:18:22.008573 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:18:22.008580 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Nov 1 00:18:22.008587 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Nov 1 00:18:22.008594 kernel: PCI: CLS 0 bytes, default 64 Nov 1 00:18:22.008600 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Nov 1 00:18:22.008607 kernel: kvm [1]: HYP mode not available Nov 1 00:18:22.008613 kernel: Initialise system trusted keyrings Nov 1 00:18:22.008620 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Nov 1 00:18:22.008626 kernel: Key type asymmetric registered Nov 1 00:18:22.008633 kernel: Asymmetric key parser 'x509' registered Nov 1 00:18:22.008641 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Nov 1 00:18:22.008648 kernel: io scheduler mq-deadline registered Nov 1 00:18:22.008654 kernel: io scheduler kyber registered Nov 1 00:18:22.008661 kernel: io scheduler bfq registered Nov 1 00:18:22.008667 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Nov 1 00:18:22.008674 kernel: thunder_xcv, ver 1.0 Nov 1 00:18:22.008680 kernel: thunder_bgx, ver 1.0 Nov 1 00:18:22.008687 kernel: nicpf, ver 1.0 Nov 1 00:18:22.008693 kernel: nicvf, ver 1.0 Nov 1 00:18:22.008809 kernel: rtc-efi rtc-efi.0: registered as rtc0 Nov 1 00:18:22.008885 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-11-01T00:18:21 UTC (1761956301) Nov 1 00:18:22.008895 kernel: efifb: probing for efifb Nov 1 00:18:22.008902 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Nov 1 00:18:22.008909 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Nov 1 00:18:22.008915 kernel: efifb: scrolling: redraw Nov 1 00:18:22.008922 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Nov 1 00:18:22.008928 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:18:22.008937 kernel: fb0: EFI VGA frame buffer device Nov 1 00:18:22.008943 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Nov 1 00:18:22.008950 kernel: hid: raw HID events driver (C) Jiri Kosina Nov 1 00:18:22.008957 kernel: NET: Registered PF_INET6 protocol family Nov 1 00:18:22.008963 kernel: Segment Routing with IPv6 Nov 1 00:18:22.008970 kernel: In-situ OAM (IOAM) with IPv6 Nov 1 00:18:22.008977 kernel: NET: Registered PF_PACKET protocol family Nov 1 00:18:22.008983 kernel: Key type dns_resolver registered Nov 1 00:18:22.008989 kernel: registered taskstats version 1 Nov 1 00:18:22.008996 kernel: Loading compiled-in X.509 certificates Nov 1 00:18:22.009004 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.192-flatcar: 4aa5071b9a6f96878595e36d4bd5862a671c915d' Nov 1 00:18:22.009011 kernel: Key type .fscrypt registered Nov 1 00:18:22.009017 kernel: Key type fscrypt-provisioning registered Nov 1 00:18:22.009024 kernel: ima: No TPM chip found, activating TPM-bypass! Nov 1 00:18:22.009031 kernel: ima: Allocated hash algorithm: sha1 Nov 1 00:18:22.009037 kernel: ima: No architecture policies found Nov 1 00:18:22.009044 kernel: clk: Disabling unused clocks Nov 1 00:18:22.009051 kernel: Freeing unused kernel memory: 36416K Nov 1 00:18:22.009058 kernel: Run /init as init process Nov 1 00:18:22.009065 kernel: with arguments: Nov 1 00:18:22.009071 kernel: /init Nov 1 00:18:22.009078 kernel: with environment: Nov 1 00:18:22.009084 kernel: HOME=/ Nov 1 00:18:22.009091 kernel: TERM=linux Nov 1 00:18:22.009097 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Nov 1 00:18:22.009106 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:18:22.009116 systemd[1]: Detected virtualization microsoft. Nov 1 00:18:22.009123 systemd[1]: Detected architecture arm64. Nov 1 00:18:22.009130 systemd[1]: Running in initrd. Nov 1 00:18:22.009137 systemd[1]: No hostname configured, using default hostname. Nov 1 00:18:22.009144 systemd[1]: Hostname set to . Nov 1 00:18:22.009151 systemd[1]: Initializing machine ID from random generator. Nov 1 00:18:22.009159 systemd[1]: Queued start job for default target initrd.target. Nov 1 00:18:22.009166 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:18:22.009174 systemd[1]: Reached target cryptsetup.target. Nov 1 00:18:22.009181 systemd[1]: Reached target paths.target. Nov 1 00:18:22.009188 systemd[1]: Reached target slices.target. Nov 1 00:18:22.009194 systemd[1]: Reached target swap.target. Nov 1 00:18:22.009201 systemd[1]: Reached target timers.target. Nov 1 00:18:22.009209 systemd[1]: Listening on iscsid.socket. Nov 1 00:18:22.009216 systemd[1]: Listening on iscsiuio.socket. Nov 1 00:18:22.009223 systemd[1]: Listening on systemd-journald-audit.socket. Nov 1 00:18:22.009231 systemd[1]: Listening on systemd-journald-dev-log.socket. Nov 1 00:18:22.009239 systemd[1]: Listening on systemd-journald.socket. Nov 1 00:18:22.009246 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:18:22.009253 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:18:22.009260 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:18:22.009267 systemd[1]: Reached target sockets.target. Nov 1 00:18:22.009274 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:18:22.009281 systemd[1]: Finished network-cleanup.service. Nov 1 00:18:22.009289 systemd[1]: Starting systemd-fsck-usr.service... Nov 1 00:18:22.009297 systemd[1]: Starting systemd-journald.service... Nov 1 00:18:22.009304 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:18:22.009311 systemd[1]: Starting systemd-resolved.service... Nov 1 00:18:22.009318 systemd[1]: Starting systemd-vconsole-setup.service... Nov 1 00:18:22.009330 systemd-journald[276]: Journal started Nov 1 00:18:22.009369 systemd-journald[276]: Runtime Journal (/run/log/journal/7c7b975ba6f142e89364ae94d4188c37) is 8.0M, max 78.5M, 70.5M free. Nov 1 00:18:21.992233 systemd-modules-load[277]: Inserted module 'overlay' Nov 1 00:18:22.032402 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Nov 1 00:18:22.041899 systemd-resolved[278]: Positive Trust Anchors: Nov 1 00:18:22.068890 systemd[1]: Started systemd-journald.service. Nov 1 00:18:22.068913 kernel: audit: type=1130 audit(1761956302.045:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.068926 kernel: Bridge firewalling registered Nov 1 00:18:22.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.045536 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:18:22.117273 kernel: audit: type=1130 audit(1761956302.075:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.117301 kernel: SCSI subsystem initialized Nov 1 00:18:22.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.045569 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:18:22.213859 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Nov 1 00:18:22.213885 kernel: audit: type=1130 audit(1761956302.087:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.213903 kernel: device-mapper: uevent: version 1.0.3 Nov 1 00:18:22.213911 kernel: audit: type=1130 audit(1761956302.111:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.213920 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Nov 1 00:18:22.213930 kernel: audit: type=1130 audit(1761956302.145:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.062153 systemd-resolved[278]: Defaulting to hostname 'linux'. Nov 1 00:18:22.065318 systemd-modules-load[277]: Inserted module 'br_netfilter' Nov 1 00:18:22.068954 systemd[1]: Started systemd-resolved.service. Nov 1 00:18:22.076424 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:18:22.088210 systemd[1]: Finished systemd-fsck-usr.service. Nov 1 00:18:22.275013 kernel: audit: type=1130 audit(1761956302.253:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.112229 systemd[1]: Finished systemd-vconsole-setup.service. Nov 1 00:18:22.146084 systemd[1]: Reached target nss-lookup.target. Nov 1 00:18:22.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.213889 systemd-modules-load[277]: Inserted module 'dm_multipath' Nov 1 00:18:22.227594 systemd[1]: Starting dracut-cmdline-ask.service... Nov 1 00:18:22.343429 kernel: audit: type=1130 audit(1761956302.284:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.343457 kernel: audit: type=1130 audit(1761956302.318:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.232787 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:18:22.240311 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:18:22.254752 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:18:22.308456 systemd[1]: Finished dracut-cmdline-ask.service. Nov 1 00:18:22.343736 systemd[1]: Starting dracut-cmdline.service... Nov 1 00:18:22.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.405861 dracut-cmdline[296]: dracut-dracut-053 Nov 1 00:18:22.405861 dracut-cmdline[296]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=284392058f112e827cd7c521dcce1be27e1367d0030df494642d12e41e342e29 Nov 1 00:18:22.446279 kernel: audit: type=1130 audit(1761956302.389:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.351188 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:18:22.373988 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:18:22.482875 kernel: Loading iSCSI transport class v2.0-870. Nov 1 00:18:22.497875 kernel: iscsi: registered transport (tcp) Nov 1 00:18:22.518895 kernel: iscsi: registered transport (qla4xxx) Nov 1 00:18:22.518932 kernel: QLogic iSCSI HBA Driver Nov 1 00:18:22.548313 systemd[1]: Finished dracut-cmdline.service. Nov 1 00:18:22.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:22.553782 systemd[1]: Starting dracut-pre-udev.service... Nov 1 00:18:22.611865 kernel: raid6: neonx8 gen() 13713 MB/s Nov 1 00:18:22.629860 kernel: raid6: neonx8 xor() 10818 MB/s Nov 1 00:18:22.650862 kernel: raid6: neonx4 gen() 13519 MB/s Nov 1 00:18:22.671861 kernel: raid6: neonx4 xor() 10962 MB/s Nov 1 00:18:22.691859 kernel: raid6: neonx2 gen() 12938 MB/s Nov 1 00:18:22.711859 kernel: raid6: neonx2 xor() 10245 MB/s Nov 1 00:18:22.733863 kernel: raid6: neonx1 gen() 10511 MB/s Nov 1 00:18:22.754858 kernel: raid6: neonx1 xor() 8777 MB/s Nov 1 00:18:22.791854 kernel: raid6: int64x8 gen() 6268 MB/s Nov 1 00:18:22.801875 kernel: raid6: int64x8 xor() 3544 MB/s Nov 1 00:18:22.817862 kernel: raid6: int64x4 gen() 7246 MB/s Nov 1 00:18:22.837861 kernel: raid6: int64x4 xor() 3856 MB/s Nov 1 00:18:22.859861 kernel: raid6: int64x2 gen() 6153 MB/s Nov 1 00:18:22.879860 kernel: raid6: int64x2 xor() 3320 MB/s Nov 1 00:18:22.899861 kernel: raid6: int64x1 gen() 5050 MB/s Nov 1 00:18:22.924841 kernel: raid6: int64x1 xor() 2646 MB/s Nov 1 00:18:22.924877 kernel: raid6: using algorithm neonx8 gen() 13713 MB/s Nov 1 00:18:22.924886 kernel: raid6: .... xor() 10818 MB/s, rmw enabled Nov 1 00:18:22.928842 kernel: raid6: using neon recovery algorithm Nov 1 00:18:22.949062 kernel: xor: measuring software checksum speed Nov 1 00:18:22.949075 kernel: 8regs : 17213 MB/sec Nov 1 00:18:22.952863 kernel: 32regs : 20712 MB/sec Nov 1 00:18:22.956475 kernel: arm64_neon : 27823 MB/sec Nov 1 00:18:22.956484 kernel: xor: using function: arm64_neon (27823 MB/sec) Nov 1 00:18:23.017870 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Nov 1 00:18:23.028722 systemd[1]: Finished dracut-pre-udev.service. Nov 1 00:18:23.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:23.037000 audit: BPF prog-id=7 op=LOAD Nov 1 00:18:23.037000 audit: BPF prog-id=8 op=LOAD Nov 1 00:18:23.038438 systemd[1]: Starting systemd-udevd.service... Nov 1 00:18:23.056934 systemd-udevd[475]: Using default interface naming scheme 'v252'. Nov 1 00:18:23.064730 systemd[1]: Started systemd-udevd.service. Nov 1 00:18:23.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:23.075205 systemd[1]: Starting dracut-pre-trigger.service... Nov 1 00:18:23.090902 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Nov 1 00:18:23.125192 systemd[1]: Finished dracut-pre-trigger.service. Nov 1 00:18:23.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:23.130503 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:18:23.172387 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:18:23.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:23.217878 kernel: hv_vmbus: Vmbus version:5.3 Nov 1 00:18:23.234876 kernel: hv_vmbus: registering driver hid_hyperv Nov 1 00:18:23.234930 kernel: hv_vmbus: registering driver hyperv_keyboard Nov 1 00:18:23.250447 kernel: hv_vmbus: registering driver hv_storvsc Nov 1 00:18:23.250503 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Nov 1 00:18:23.250514 kernel: hv_vmbus: registering driver hv_netvsc Nov 1 00:18:23.265832 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Nov 1 00:18:23.265896 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Nov 1 00:18:23.289246 kernel: scsi host1: storvsc_host_t Nov 1 00:18:23.289446 kernel: scsi host0: storvsc_host_t Nov 1 00:18:23.289548 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Nov 1 00:18:23.296865 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Nov 1 00:18:23.322528 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Nov 1 00:18:23.323219 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Nov 1 00:18:23.323232 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Nov 1 00:18:23.339778 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Nov 1 00:18:23.372939 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Nov 1 00:18:23.373053 kernel: sd 0:0:0:0: [sda] Write Protect is off Nov 1 00:18:23.373129 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Nov 1 00:18:23.373206 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Nov 1 00:18:23.373283 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:18:23.373300 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Nov 1 00:18:23.373376 kernel: hv_netvsc 000d3a06-f885-000d-3a06-f885000d3a06 eth0: VF slot 1 added Nov 1 00:18:23.386884 kernel: hv_vmbus: registering driver hv_pci Nov 1 00:18:23.393890 kernel: hv_pci 8ab51c37-bd7d-4564-a600-98f87cf74c7c: PCI VMBus probing: Using version 0x10004 Nov 1 00:18:23.468476 kernel: hv_pci 8ab51c37-bd7d-4564-a600-98f87cf74c7c: PCI host bridge to bus bd7d:00 Nov 1 00:18:23.468642 kernel: pci_bus bd7d:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Nov 1 00:18:23.468739 kernel: pci_bus bd7d:00: No busn resource found for root bus, will use [bus 00-ff] Nov 1 00:18:23.468810 kernel: pci bd7d:00:02.0: [15b3:1018] type 00 class 0x020000 Nov 1 00:18:23.468937 kernel: pci bd7d:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Nov 1 00:18:23.469040 kernel: pci bd7d:00:02.0: enabling Extended Tags Nov 1 00:18:23.469118 kernel: pci bd7d:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at bd7d:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Nov 1 00:18:23.469199 kernel: pci_bus bd7d:00: busn_res: [bus 00-ff] end is updated to 00 Nov 1 00:18:23.469273 kernel: pci bd7d:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Nov 1 00:18:23.507089 kernel: mlx5_core bd7d:00:02.0: enabling device (0000 -> 0002) Nov 1 00:18:23.768960 kernel: mlx5_core bd7d:00:02.0: firmware version: 16.30.1284 Nov 1 00:18:23.769080 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (528) Nov 1 00:18:23.769091 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:18:23.769100 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:18:23.769108 kernel: mlx5_core bd7d:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Nov 1 00:18:23.769198 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:18:23.769207 kernel: hv_netvsc 000d3a06-f885-000d-3a06-f885000d3a06 eth0: VF registering: eth1 Nov 1 00:18:23.769328 kernel: mlx5_core bd7d:00:02.0 eth1: joined to eth0 Nov 1 00:18:23.549797 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Nov 1 00:18:23.572735 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:18:23.608141 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Nov 1 00:18:23.621777 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Nov 1 00:18:23.627889 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Nov 1 00:18:23.808422 kernel: mlx5_core bd7d:00:02.0 enP48509s1: renamed from eth1 Nov 1 00:18:23.634355 systemd[1]: Starting disk-uuid.service... Nov 1 00:18:24.679174 disk-uuid[597]: The operation has completed successfully. Nov 1 00:18:24.688608 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Nov 1 00:18:24.752689 systemd[1]: disk-uuid.service: Deactivated successfully. Nov 1 00:18:24.752793 systemd[1]: Finished disk-uuid.service. Nov 1 00:18:24.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:24.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:24.762015 systemd[1]: Starting verity-setup.service... Nov 1 00:18:24.791915 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Nov 1 00:18:24.902297 systemd[1]: Found device dev-mapper-usr.device. Nov 1 00:18:24.907456 systemd[1]: Finished verity-setup.service. Nov 1 00:18:24.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:24.916471 systemd[1]: Mounting sysusr-usr.mount... Nov 1 00:18:24.982871 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Nov 1 00:18:24.983189 systemd[1]: Mounted sysusr-usr.mount. Nov 1 00:18:24.987186 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Nov 1 00:18:24.987976 systemd[1]: Starting ignition-setup.service... Nov 1 00:18:24.996631 systemd[1]: Starting parse-ip-for-networkd.service... Nov 1 00:18:25.049077 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:18:25.049157 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:18:25.053557 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:18:25.092277 systemd[1]: Finished parse-ip-for-networkd.service. Nov 1 00:18:25.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:25.101000 audit: BPF prog-id=9 op=LOAD Nov 1 00:18:25.101724 systemd[1]: Starting systemd-networkd.service... Nov 1 00:18:25.112413 systemd[1]: mnt-oem.mount: Deactivated successfully. Nov 1 00:18:25.129019 systemd-networkd[873]: lo: Link UP Nov 1 00:18:25.129027 systemd-networkd[873]: lo: Gained carrier Nov 1 00:18:25.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:25.129473 systemd-networkd[873]: Enumeration completed Nov 1 00:18:25.130015 systemd[1]: Started systemd-networkd.service. Nov 1 00:18:25.137871 systemd[1]: Reached target network.target. Nov 1 00:18:25.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:25.138068 systemd-networkd[873]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:18:25.143418 systemd[1]: Starting iscsiuio.service... Nov 1 00:18:25.180200 iscsid[881]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:18:25.180200 iscsid[881]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Nov 1 00:18:25.180200 iscsid[881]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Nov 1 00:18:25.180200 iscsid[881]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Nov 1 00:18:25.180200 iscsid[881]: If using hardware iscsi like qla4xxx this message can be ignored. Nov 1 00:18:25.180200 iscsid[881]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Nov 1 00:18:25.180200 iscsid[881]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Nov 1 00:18:25.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:25.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:25.154063 systemd[1]: Started iscsiuio.service. Nov 1 00:18:25.162115 systemd[1]: Starting iscsid.service... Nov 1 00:18:25.183073 systemd[1]: Started iscsid.service. Nov 1 00:18:25.192620 systemd[1]: Starting dracut-initqueue.service... Nov 1 00:18:25.237261 systemd[1]: Finished dracut-initqueue.service. Nov 1 00:18:25.244882 systemd[1]: Reached target remote-fs-pre.target. Nov 1 00:18:25.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:25.264702 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:18:25.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:25.274491 systemd[1]: Reached target remote-fs.target. Nov 1 00:18:25.287337 systemd[1]: Starting dracut-pre-mount.service... Nov 1 00:18:25.303793 systemd[1]: Finished ignition-setup.service. Nov 1 00:18:25.311778 systemd[1]: Finished dracut-pre-mount.service. Nov 1 00:18:25.361202 kernel: mlx5_core bd7d:00:02.0 enP48509s1: Link up Nov 1 00:18:25.361375 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:18:25.324499 systemd[1]: Starting ignition-fetch-offline.service... Nov 1 00:18:25.411946 kernel: hv_netvsc 000d3a06-f885-000d-3a06-f885000d3a06 eth0: Data path switched to VF: enP48509s1 Nov 1 00:18:25.412181 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:18:25.412606 systemd-networkd[873]: enP48509s1: Link UP Nov 1 00:18:25.412697 systemd-networkd[873]: eth0: Link UP Nov 1 00:18:25.412824 systemd-networkd[873]: eth0: Gained carrier Nov 1 00:18:25.424293 systemd-networkd[873]: enP48509s1: Gained carrier Nov 1 00:18:25.433953 systemd-networkd[873]: eth0: DHCPv4 address 10.200.20.24/24, gateway 10.200.20.1 acquired from 168.63.129.16 Nov 1 00:18:26.101595 ignition[896]: Ignition 2.14.0 Nov 1 00:18:26.103304 ignition[896]: Stage: fetch-offline Nov 1 00:18:26.103412 ignition[896]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:26.103449 ignition[896]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:26.134599 ignition[896]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:26.134751 ignition[896]: parsed url from cmdline: "" Nov 1 00:18:26.134755 ignition[896]: no config URL provided Nov 1 00:18:26.134759 ignition[896]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:18:26.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.141209 systemd[1]: Finished ignition-fetch-offline.service. Nov 1 00:18:26.179766 kernel: kauditd_printk_skb: 18 callbacks suppressed Nov 1 00:18:26.179790 kernel: audit: type=1130 audit(1761956306.149:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.134768 ignition[896]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:18:26.159844 systemd[1]: Starting ignition-fetch.service... Nov 1 00:18:26.134773 ignition[896]: failed to fetch config: resource requires networking Nov 1 00:18:26.135028 ignition[896]: Ignition finished successfully Nov 1 00:18:26.166985 ignition[902]: Ignition 2.14.0 Nov 1 00:18:26.166992 ignition[902]: Stage: fetch Nov 1 00:18:26.167104 ignition[902]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:26.167122 ignition[902]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:26.169705 ignition[902]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:26.169822 ignition[902]: parsed url from cmdline: "" Nov 1 00:18:26.169825 ignition[902]: no config URL provided Nov 1 00:18:26.169830 ignition[902]: reading system config file "/usr/lib/ignition/user.ign" Nov 1 00:18:26.169837 ignition[902]: no config at "/usr/lib/ignition/user.ign" Nov 1 00:18:26.169898 ignition[902]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Nov 1 00:18:26.301495 ignition[902]: GET result: OK Nov 1 00:18:26.301581 ignition[902]: config has been read from IMDS userdata Nov 1 00:18:26.305112 unknown[902]: fetched base config from "system" Nov 1 00:18:26.301634 ignition[902]: parsing config with SHA512: d62527f07b412ad076881c46e5ef564dada1842af7590e2c5f4848bc8f5413a05de05c61c15705e841c8f9417fbaaa450aba9d8941e340bf9d6f936bb6427bf0 Nov 1 00:18:26.305120 unknown[902]: fetched base config from "system" Nov 1 00:18:26.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.305643 ignition[902]: fetch: fetch complete Nov 1 00:18:26.350934 kernel: audit: type=1130 audit(1761956306.318:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.305125 unknown[902]: fetched user config from "azure" Nov 1 00:18:26.305649 ignition[902]: fetch: fetch passed Nov 1 00:18:26.310634 systemd[1]: Finished ignition-fetch.service. Nov 1 00:18:26.305692 ignition[902]: Ignition finished successfully Nov 1 00:18:26.340826 systemd[1]: Starting ignition-kargs.service... Nov 1 00:18:26.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.354364 ignition[908]: Ignition 2.14.0 Nov 1 00:18:26.399111 kernel: audit: type=1130 audit(1761956306.374:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.370473 systemd[1]: Finished ignition-kargs.service. Nov 1 00:18:26.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.354370 ignition[908]: Stage: kargs Nov 1 00:18:26.375772 systemd[1]: Starting ignition-disks.service... Nov 1 00:18:26.441257 kernel: audit: type=1130 audit(1761956306.402:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.354478 ignition[908]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:26.397151 systemd[1]: Finished ignition-disks.service. Nov 1 00:18:26.354499 ignition[908]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:26.403199 systemd[1]: Reached target initrd-root-device.target. Nov 1 00:18:26.364599 ignition[908]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:26.428924 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:18:26.365666 ignition[908]: kargs: kargs passed Nov 1 00:18:26.436963 systemd[1]: Reached target local-fs.target. Nov 1 00:18:26.365715 ignition[908]: Ignition finished successfully Nov 1 00:18:26.446102 systemd[1]: Reached target sysinit.target. Nov 1 00:18:26.385686 ignition[914]: Ignition 2.14.0 Nov 1 00:18:26.456756 systemd[1]: Reached target basic.target. Nov 1 00:18:26.385692 ignition[914]: Stage: disks Nov 1 00:18:26.470374 systemd[1]: Starting systemd-fsck-root.service... Nov 1 00:18:26.516531 systemd-fsck[922]: ROOT: clean, 637/7326000 files, 481087/7359488 blocks Nov 1 00:18:26.385799 ignition[914]: reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:26.385819 ignition[914]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:26.527455 systemd[1]: Finished systemd-fsck-root.service. Nov 1 00:18:26.389374 ignition[914]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:26.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.391094 ignition[914]: disks: disks passed Nov 1 00:18:26.571790 kernel: audit: type=1130 audit(1761956306.540:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.542195 systemd[1]: Mounting sysroot.mount... Nov 1 00:18:26.391150 ignition[914]: Ignition finished successfully Nov 1 00:18:26.601876 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Nov 1 00:18:26.602220 systemd[1]: Mounted sysroot.mount. Nov 1 00:18:26.606767 systemd[1]: Reached target initrd-root-fs.target. Nov 1 00:18:26.625917 systemd[1]: Mounting sysroot-usr.mount... Nov 1 00:18:26.631067 systemd[1]: Starting flatcar-metadata-hostname.service... Nov 1 00:18:26.639667 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Nov 1 00:18:26.639704 systemd[1]: Reached target ignition-diskful.target. Nov 1 00:18:26.645880 systemd[1]: Mounted sysroot-usr.mount. Nov 1 00:18:26.675178 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:18:26.682725 systemd[1]: Starting initrd-setup-root.service... Nov 1 00:18:26.700436 initrd-setup-root[937]: cut: /sysroot/etc/passwd: No such file or directory Nov 1 00:18:26.719875 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (932) Nov 1 00:18:26.721148 initrd-setup-root[945]: cut: /sysroot/etc/group: No such file or directory Nov 1 00:18:26.740129 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:18:26.740182 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:18:26.740192 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:18:26.746026 initrd-setup-root[957]: cut: /sysroot/etc/shadow: No such file or directory Nov 1 00:18:26.757748 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:18:26.767420 initrd-setup-root[979]: cut: /sysroot/etc/gshadow: No such file or directory Nov 1 00:18:26.827970 systemd-networkd[873]: eth0: Gained IPv6LL Nov 1 00:18:26.949193 systemd[1]: Finished initrd-setup-root.service. Nov 1 00:18:26.974450 kernel: audit: type=1130 audit(1761956306.953:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:26.954558 systemd[1]: Starting ignition-mount.service... Nov 1 00:18:26.977748 systemd[1]: Starting sysroot-boot.service... Nov 1 00:18:26.989969 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Nov 1 00:18:26.990137 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Nov 1 00:18:27.021150 ignition[1000]: INFO : Ignition 2.14.0 Nov 1 00:18:27.026053 ignition[1000]: INFO : Stage: mount Nov 1 00:18:27.026053 ignition[1000]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:27.026053 ignition[1000]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:27.073932 kernel: audit: type=1130 audit(1761956307.041:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:27.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:27.034446 systemd[1]: Finished ignition-mount.service. Nov 1 00:18:27.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:27.092460 ignition[1000]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:27.092460 ignition[1000]: INFO : mount: mount passed Nov 1 00:18:27.092460 ignition[1000]: INFO : Ignition finished successfully Nov 1 00:18:27.110467 kernel: audit: type=1130 audit(1761956307.073:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:27.043289 systemd[1]: Finished sysroot-boot.service. Nov 1 00:18:27.143465 coreos-metadata[931]: Nov 01 00:18:27.143 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Nov 1 00:18:27.153200 coreos-metadata[931]: Nov 01 00:18:27.153 INFO Fetch successful Nov 1 00:18:27.187941 coreos-metadata[931]: Nov 01 00:18:27.187 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Nov 1 00:18:27.200193 coreos-metadata[931]: Nov 01 00:18:27.200 INFO Fetch successful Nov 1 00:18:27.205780 coreos-metadata[931]: Nov 01 00:18:27.205 INFO wrote hostname ci-3510.3.8-n-2788c77bd2 to /sysroot/etc/hostname Nov 1 00:18:27.214581 systemd[1]: Finished flatcar-metadata-hostname.service. Nov 1 00:18:27.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:27.241907 systemd[1]: Starting ignition-files.service... Nov 1 00:18:27.249811 kernel: audit: type=1130 audit(1761956307.219:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:27.252783 systemd[1]: Mounting sysroot-usr-share-oem.mount... Nov 1 00:18:27.275866 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (1010) Nov 1 00:18:27.287613 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Nov 1 00:18:27.287659 kernel: BTRFS info (device sda6): using free space tree Nov 1 00:18:27.292083 kernel: BTRFS info (device sda6): has skinny extents Nov 1 00:18:27.299908 systemd[1]: Mounted sysroot-usr-share-oem.mount. Nov 1 00:18:27.313443 ignition[1029]: INFO : Ignition 2.14.0 Nov 1 00:18:27.313443 ignition[1029]: INFO : Stage: files Nov 1 00:18:27.322522 ignition[1029]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:27.322522 ignition[1029]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:27.322522 ignition[1029]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:27.322522 ignition[1029]: DEBUG : files: compiled without relabeling support, skipping Nov 1 00:18:27.355589 ignition[1029]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Nov 1 00:18:27.355589 ignition[1029]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Nov 1 00:18:27.377076 ignition[1029]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Nov 1 00:18:27.384509 ignition[1029]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Nov 1 00:18:27.391730 ignition[1029]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Nov 1 00:18:27.391630 unknown[1029]: wrote ssh authorized keys file for user: core Nov 1 00:18:27.403835 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Nov 1 00:18:27.403835 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Nov 1 00:18:27.498718 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Nov 1 00:18:27.608629 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:18:27.619259 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1095047802" Nov 1 00:18:27.767823 ignition[1029]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1095047802": device or resource busy Nov 1 00:18:27.767823 ignition[1029]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1095047802", trying btrfs: device or resource busy Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1095047802" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1095047802" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem1095047802" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem1095047802" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): oem config not found in "/usr/share/oem", looking on oem partition Nov 1 00:18:27.767823 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(f): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4278553099" Nov 1 00:18:27.767823 ignition[1029]: CRITICAL : files: createFilesystemsFiles: createFiles: op(e): op(f): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4278553099": device or resource busy Nov 1 00:18:27.669004 systemd[1]: mnt-oem1095047802.mount: Deactivated successfully. Nov 1 00:18:27.943162 ignition[1029]: ERROR : files: createFilesystemsFiles: createFiles: op(e): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4278553099", trying btrfs: device or resource busy Nov 1 00:18:27.943162 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4278553099" Nov 1 00:18:27.943162 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(10): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4278553099" Nov 1 00:18:27.943162 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [started] unmounting "/mnt/oem4278553099" Nov 1 00:18:27.943162 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): op(11): [finished] unmounting "/mnt/oem4278553099" Nov 1 00:18:27.943162 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Nov 1 00:18:27.943162 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:18:27.943162 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Nov 1 00:18:28.274496 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): GET result: OK Nov 1 00:18:28.545262 ignition[1029]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(13): [started] processing unit "waagent.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(13): [finished] processing unit "waagent.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(14): [started] processing unit "nvidia.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(14): [finished] processing unit "nvidia.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(17): [started] setting preset to enabled for "waagent.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(17): [finished] setting preset to enabled for "waagent.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: createResultFile: createFiles: op(1a): [started] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: createResultFile: createFiles: op(1a): [finished] writing file "/sysroot/etc/.ignition-result.json" Nov 1 00:18:28.558163 ignition[1029]: INFO : files: files passed Nov 1 00:18:28.558163 ignition[1029]: INFO : Ignition finished successfully Nov 1 00:18:28.755811 kernel: audit: type=1130 audit(1761956308.568:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.691000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.559141 systemd[1]: Finished ignition-files.service. Nov 1 00:18:28.572546 systemd[1]: Starting initrd-setup-root-after-ignition.service... Nov 1 00:18:28.594424 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Nov 1 00:18:28.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.785800 initrd-setup-root-after-ignition[1054]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Nov 1 00:18:28.595393 systemd[1]: Starting ignition-quench.service... Nov 1 00:18:28.613058 systemd[1]: ignition-quench.service: Deactivated successfully. Nov 1 00:18:28.613168 systemd[1]: Finished ignition-quench.service. Nov 1 00:18:28.634186 systemd[1]: Finished initrd-setup-root-after-ignition.service. Nov 1 00:18:28.649763 systemd[1]: Reached target ignition-complete.target. Nov 1 00:18:28.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.662259 systemd[1]: Starting initrd-parse-etc.service... Nov 1 00:18:28.684361 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Nov 1 00:18:28.684479 systemd[1]: Finished initrd-parse-etc.service. Nov 1 00:18:28.692222 systemd[1]: Reached target initrd-fs.target. Nov 1 00:18:28.703084 systemd[1]: Reached target initrd.target. Nov 1 00:18:28.714143 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Nov 1 00:18:28.715072 systemd[1]: Starting dracut-pre-pivot.service... Nov 1 00:18:28.760644 systemd[1]: Finished dracut-pre-pivot.service. Nov 1 00:18:28.771440 systemd[1]: Starting initrd-cleanup.service... Nov 1 00:18:28.796781 systemd[1]: Stopped target nss-lookup.target. Nov 1 00:18:28.803040 systemd[1]: Stopped target remote-cryptsetup.target. Nov 1 00:18:28.812735 systemd[1]: Stopped target timers.target. Nov 1 00:18:28.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.820576 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Nov 1 00:18:28.820679 systemd[1]: Stopped dracut-pre-pivot.service. Nov 1 00:18:28.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.829894 systemd[1]: Stopped target initrd.target. Nov 1 00:18:28.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.837690 systemd[1]: Stopped target basic.target. Nov 1 00:18:28.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.845329 systemd[1]: Stopped target ignition-complete.target. Nov 1 00:18:28.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.854389 systemd[1]: Stopped target ignition-diskful.target. Nov 1 00:18:28.863330 systemd[1]: Stopped target initrd-root-device.target. Nov 1 00:18:29.004050 iscsid[881]: iscsid shutting down. Nov 1 00:18:29.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.871805 systemd[1]: Stopped target remote-fs.target. Nov 1 00:18:29.036383 ignition[1067]: INFO : Ignition 2.14.0 Nov 1 00:18:29.036383 ignition[1067]: INFO : Stage: umount Nov 1 00:18:29.036383 ignition[1067]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Nov 1 00:18:29.036383 ignition[1067]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Nov 1 00:18:29.036383 ignition[1067]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Nov 1 00:18:29.036383 ignition[1067]: INFO : umount: umount passed Nov 1 00:18:29.036383 ignition[1067]: INFO : Ignition finished successfully Nov 1 00:18:29.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.077000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.879274 systemd[1]: Stopped target remote-fs-pre.target. Nov 1 00:18:28.890043 systemd[1]: Stopped target sysinit.target. Nov 1 00:18:28.897841 systemd[1]: Stopped target local-fs.target. Nov 1 00:18:28.906032 systemd[1]: Stopped target local-fs-pre.target. Nov 1 00:18:28.914074 systemd[1]: Stopped target swap.target. Nov 1 00:18:28.921887 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Nov 1 00:18:29.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.922044 systemd[1]: Stopped dracut-pre-mount.service. Nov 1 00:18:28.930809 systemd[1]: Stopped target cryptsetup.target. Nov 1 00:18:28.939698 systemd[1]: dracut-initqueue.service: Deactivated successfully. Nov 1 00:18:29.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.939873 systemd[1]: Stopped dracut-initqueue.service. Nov 1 00:18:29.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.949011 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Nov 1 00:18:28.949156 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Nov 1 00:18:28.958180 systemd[1]: ignition-files.service: Deactivated successfully. Nov 1 00:18:28.958312 systemd[1]: Stopped ignition-files.service. Nov 1 00:18:28.966072 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Nov 1 00:18:29.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.966211 systemd[1]: Stopped flatcar-metadata-hostname.service. Nov 1 00:18:28.975613 systemd[1]: Stopping ignition-mount.service... Nov 1 00:18:28.985224 systemd[1]: Stopping iscsid.service... Nov 1 00:18:29.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.993549 systemd[1]: Stopping sysroot-boot.service... Nov 1 00:18:29.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.997474 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Nov 1 00:18:29.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:28.997752 systemd[1]: Stopped systemd-udev-trigger.service. Nov 1 00:18:29.010325 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Nov 1 00:18:29.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.293000 audit: BPF prog-id=6 op=UNLOAD Nov 1 00:18:29.010441 systemd[1]: Stopped dracut-pre-trigger.service. Nov 1 00:18:29.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.016816 systemd[1]: iscsid.service: Deactivated successfully. Nov 1 00:18:29.016943 systemd[1]: Stopped iscsid.service. Nov 1 00:18:29.021808 systemd[1]: ignition-mount.service: Deactivated successfully. Nov 1 00:18:29.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.021913 systemd[1]: Stopped ignition-mount.service. Nov 1 00:18:29.356972 kernel: hv_netvsc 000d3a06-f885-000d-3a06-f885000d3a06 eth0: Data path switched from VF: enP48509s1 Nov 1 00:18:29.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.031131 systemd[1]: sysroot-boot.mount: Deactivated successfully. Nov 1 00:18:29.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.031779 systemd[1]: ignition-disks.service: Deactivated successfully. Nov 1 00:18:29.031918 systemd[1]: Stopped ignition-disks.service. Nov 1 00:18:29.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.045000 systemd[1]: ignition-kargs.service: Deactivated successfully. Nov 1 00:18:29.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.045106 systemd[1]: Stopped ignition-kargs.service. Nov 1 00:18:29.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.060186 systemd[1]: ignition-fetch.service: Deactivated successfully. Nov 1 00:18:29.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.060280 systemd[1]: Stopped ignition-fetch.service. Nov 1 00:18:29.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.077648 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Nov 1 00:18:29.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.077756 systemd[1]: Stopped ignition-fetch-offline.service. Nov 1 00:18:29.088779 systemd[1]: Stopped target paths.target. Nov 1 00:18:29.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:29.092958 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Nov 1 00:18:29.096917 systemd[1]: Stopped systemd-ask-password-console.path. Nov 1 00:18:29.106939 systemd[1]: Stopped target slices.target. Nov 1 00:18:29.115259 systemd[1]: Stopped target sockets.target. Nov 1 00:18:29.128691 systemd[1]: iscsid.socket: Deactivated successfully. Nov 1 00:18:29.128790 systemd[1]: Closed iscsid.socket. Nov 1 00:18:29.136754 systemd[1]: ignition-setup.service: Deactivated successfully. Nov 1 00:18:29.136869 systemd[1]: Stopped ignition-setup.service. Nov 1 00:18:29.144584 systemd[1]: Stopping iscsiuio.service... Nov 1 00:18:29.160565 systemd[1]: iscsiuio.service: Deactivated successfully. Nov 1 00:18:29.160683 systemd[1]: Stopped iscsiuio.service. Nov 1 00:18:29.168894 systemd[1]: initrd-cleanup.service: Deactivated successfully. Nov 1 00:18:29.168982 systemd[1]: Finished initrd-cleanup.service. Nov 1 00:18:29.179070 systemd[1]: Stopped target network.target. Nov 1 00:18:29.186414 systemd[1]: iscsiuio.socket: Deactivated successfully. Nov 1 00:18:29.186456 systemd[1]: Closed iscsiuio.socket. Nov 1 00:18:29.196922 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:18:29.206455 systemd[1]: Stopping systemd-resolved.service... Nov 1 00:18:29.215312 systemd-networkd[873]: eth0: DHCPv6 lease lost Nov 1 00:18:29.517000 audit: BPF prog-id=9 op=UNLOAD Nov 1 00:18:29.222006 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:18:29.222107 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:18:29.226948 systemd[1]: systemd-networkd.socket: Deactivated successfully. Nov 1 00:18:29.226977 systemd[1]: Closed systemd-networkd.socket. Nov 1 00:18:29.231970 systemd[1]: Stopping network-cleanup.service... Nov 1 00:18:29.246357 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Nov 1 00:18:29.246452 systemd[1]: Stopped parse-ip-for-networkd.service. Nov 1 00:18:29.255434 systemd[1]: systemd-sysctl.service: Deactivated successfully. Nov 1 00:18:29.255493 systemd[1]: Stopped systemd-sysctl.service. Nov 1 00:18:29.267602 systemd[1]: systemd-modules-load.service: Deactivated successfully. Nov 1 00:18:29.267653 systemd[1]: Stopped systemd-modules-load.service. Nov 1 00:18:29.277236 systemd[1]: Stopping systemd-udevd.service... Nov 1 00:18:29.285339 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Nov 1 00:18:29.285868 systemd[1]: systemd-resolved.service: Deactivated successfully. Nov 1 00:18:29.285968 systemd[1]: Stopped systemd-resolved.service. Nov 1 00:18:29.296178 systemd[1]: systemd-udevd.service: Deactivated successfully. Nov 1 00:18:29.296314 systemd[1]: Stopped systemd-udevd.service. Nov 1 00:18:29.303650 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Nov 1 00:18:29.303696 systemd[1]: Closed systemd-udevd-control.socket. Nov 1 00:18:29.311843 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Nov 1 00:18:29.311889 systemd[1]: Closed systemd-udevd-kernel.socket. Nov 1 00:18:29.321313 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Nov 1 00:18:29.321364 systemd[1]: Stopped dracut-pre-udev.service. Nov 1 00:18:29.329404 systemd[1]: dracut-cmdline.service: Deactivated successfully. Nov 1 00:18:29.329452 systemd[1]: Stopped dracut-cmdline.service. Nov 1 00:18:29.352210 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Nov 1 00:18:29.352267 systemd[1]: Stopped dracut-cmdline-ask.service. Nov 1 00:18:29.362367 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Nov 1 00:18:29.518879 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Nov 1 00:18:29.374100 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Nov 1 00:18:29.374183 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Nov 1 00:18:29.389885 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Nov 1 00:18:29.389950 systemd[1]: Stopped kmod-static-nodes.service. Nov 1 00:18:29.396453 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Nov 1 00:18:29.396520 systemd[1]: Stopped systemd-vconsole-setup.service. Nov 1 00:18:29.408985 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Nov 1 00:18:29.409574 systemd[1]: sysroot-boot.service: Deactivated successfully. Nov 1 00:18:29.409692 systemd[1]: Stopped sysroot-boot.service. Nov 1 00:18:29.416337 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Nov 1 00:18:29.416432 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Nov 1 00:18:29.426533 systemd[1]: initrd-setup-root.service: Deactivated successfully. Nov 1 00:18:29.426587 systemd[1]: Stopped initrd-setup-root.service. Nov 1 00:18:29.440260 systemd[1]: network-cleanup.service: Deactivated successfully. Nov 1 00:18:29.440350 systemd[1]: Stopped network-cleanup.service. Nov 1 00:18:29.449017 systemd[1]: Reached target initrd-switch-root.target. Nov 1 00:18:29.458522 systemd[1]: Starting initrd-switch-root.service... Nov 1 00:18:29.477319 systemd[1]: Switching root. Nov 1 00:18:29.519326 systemd-journald[276]: Journal stopped Nov 1 00:18:34.484564 kernel: SELinux: Class mctp_socket not defined in policy. Nov 1 00:18:34.484584 kernel: SELinux: Class anon_inode not defined in policy. Nov 1 00:18:34.484594 kernel: SELinux: the above unknown classes and permissions will be allowed Nov 1 00:18:34.484604 kernel: SELinux: policy capability network_peer_controls=1 Nov 1 00:18:34.484612 kernel: SELinux: policy capability open_perms=1 Nov 1 00:18:34.484620 kernel: SELinux: policy capability extended_socket_class=1 Nov 1 00:18:34.484628 kernel: SELinux: policy capability always_check_network=0 Nov 1 00:18:34.484637 kernel: SELinux: policy capability cgroup_seclabel=1 Nov 1 00:18:34.484645 kernel: SELinux: policy capability nnp_nosuid_transition=1 Nov 1 00:18:34.484653 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Nov 1 00:18:34.484660 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Nov 1 00:18:34.484671 systemd[1]: Successfully loaded SELinux policy in 135.392ms. Nov 1 00:18:34.484681 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 12.412ms. Nov 1 00:18:34.484691 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Nov 1 00:18:34.484701 systemd[1]: Detected virtualization microsoft. Nov 1 00:18:34.484712 systemd[1]: Detected architecture arm64. Nov 1 00:18:34.484720 systemd[1]: Detected first boot. Nov 1 00:18:34.484730 systemd[1]: Hostname set to . Nov 1 00:18:34.484738 systemd[1]: Initializing machine ID from random generator. Nov 1 00:18:34.484748 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Nov 1 00:18:34.484757 systemd[1]: Populated /etc with preset unit settings. Nov 1 00:18:34.484766 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:18:34.484777 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:18:34.484787 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:18:34.484796 kernel: kauditd_printk_skb: 59 callbacks suppressed Nov 1 00:18:34.484809 kernel: audit: type=1334 audit(1761956313.804:91): prog-id=12 op=LOAD Nov 1 00:18:34.484817 kernel: audit: type=1334 audit(1761956313.804:92): prog-id=3 op=UNLOAD Nov 1 00:18:34.484826 kernel: audit: type=1334 audit(1761956313.804:93): prog-id=13 op=LOAD Nov 1 00:18:34.484834 kernel: audit: type=1334 audit(1761956313.804:94): prog-id=14 op=LOAD Nov 1 00:18:34.484843 kernel: audit: type=1334 audit(1761956313.804:95): prog-id=4 op=UNLOAD Nov 1 00:18:34.484863 systemd[1]: initrd-switch-root.service: Deactivated successfully. Nov 1 00:18:34.484872 kernel: audit: type=1334 audit(1761956313.804:96): prog-id=5 op=UNLOAD Nov 1 00:18:34.484881 systemd[1]: Stopped initrd-switch-root.service. Nov 1 00:18:34.484890 kernel: audit: type=1334 audit(1761956313.810:97): prog-id=15 op=LOAD Nov 1 00:18:34.484899 kernel: audit: type=1334 audit(1761956313.810:98): prog-id=12 op=UNLOAD Nov 1 00:18:34.484907 kernel: audit: type=1334 audit(1761956313.815:99): prog-id=16 op=LOAD Nov 1 00:18:34.484917 kernel: audit: type=1334 audit(1761956313.815:100): prog-id=17 op=LOAD Nov 1 00:18:34.484925 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Nov 1 00:18:34.484935 systemd[1]: Created slice system-addon\x2dconfig.slice. Nov 1 00:18:34.484944 systemd[1]: Created slice system-addon\x2drun.slice. Nov 1 00:18:34.484955 systemd[1]: Created slice system-getty.slice. Nov 1 00:18:34.484964 systemd[1]: Created slice system-modprobe.slice. Nov 1 00:18:34.484973 systemd[1]: Created slice system-serial\x2dgetty.slice. Nov 1 00:18:34.484982 systemd[1]: Created slice system-system\x2dcloudinit.slice. Nov 1 00:18:34.484992 systemd[1]: Created slice system-systemd\x2dfsck.slice. Nov 1 00:18:34.485001 systemd[1]: Created slice user.slice. Nov 1 00:18:34.485012 systemd[1]: Started systemd-ask-password-console.path. Nov 1 00:18:34.485021 systemd[1]: Started systemd-ask-password-wall.path. Nov 1 00:18:34.485030 systemd[1]: Set up automount boot.automount. Nov 1 00:18:34.485039 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Nov 1 00:18:34.485048 systemd[1]: Stopped target initrd-switch-root.target. Nov 1 00:18:34.485057 systemd[1]: Stopped target initrd-fs.target. Nov 1 00:18:34.485067 systemd[1]: Stopped target initrd-root-fs.target. Nov 1 00:18:34.485076 systemd[1]: Reached target integritysetup.target. Nov 1 00:18:34.485087 systemd[1]: Reached target remote-cryptsetup.target. Nov 1 00:18:34.485096 systemd[1]: Reached target remote-fs.target. Nov 1 00:18:34.485105 systemd[1]: Reached target slices.target. Nov 1 00:18:34.485114 systemd[1]: Reached target swap.target. Nov 1 00:18:34.485123 systemd[1]: Reached target torcx.target. Nov 1 00:18:34.485132 systemd[1]: Reached target veritysetup.target. Nov 1 00:18:34.485142 systemd[1]: Listening on systemd-coredump.socket. Nov 1 00:18:34.485151 systemd[1]: Listening on systemd-initctl.socket. Nov 1 00:18:34.485161 systemd[1]: Listening on systemd-networkd.socket. Nov 1 00:18:34.485171 systemd[1]: Listening on systemd-udevd-control.socket. Nov 1 00:18:34.485180 systemd[1]: Listening on systemd-udevd-kernel.socket. Nov 1 00:18:34.485189 systemd[1]: Listening on systemd-userdbd.socket. Nov 1 00:18:34.485198 systemd[1]: Mounting dev-hugepages.mount... Nov 1 00:18:34.485210 systemd[1]: Mounting dev-mqueue.mount... Nov 1 00:18:34.485219 systemd[1]: Mounting media.mount... Nov 1 00:18:34.485228 systemd[1]: Mounting sys-kernel-debug.mount... Nov 1 00:18:34.485238 systemd[1]: Mounting sys-kernel-tracing.mount... Nov 1 00:18:34.485247 systemd[1]: Mounting tmp.mount... Nov 1 00:18:34.485256 systemd[1]: Starting flatcar-tmpfiles.service... Nov 1 00:18:34.485265 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:34.485275 systemd[1]: Starting kmod-static-nodes.service... Nov 1 00:18:34.485284 systemd[1]: Starting modprobe@configfs.service... Nov 1 00:18:34.485294 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:34.485304 systemd[1]: Starting modprobe@drm.service... Nov 1 00:18:34.485313 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:34.485322 systemd[1]: Starting modprobe@fuse.service... Nov 1 00:18:34.485331 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:34.485341 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Nov 1 00:18:34.485350 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Nov 1 00:18:34.485359 systemd[1]: Stopped systemd-fsck-root.service. Nov 1 00:18:34.485369 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Nov 1 00:18:34.485379 kernel: fuse: init (API version 7.34) Nov 1 00:18:34.485388 systemd[1]: Stopped systemd-fsck-usr.service. Nov 1 00:18:34.485397 systemd[1]: Stopped systemd-journald.service. Nov 1 00:18:34.485408 systemd[1]: systemd-journald.service: Consumed 2.757s CPU time. Nov 1 00:18:34.485417 kernel: loop: module loaded Nov 1 00:18:34.485426 systemd[1]: Starting systemd-journald.service... Nov 1 00:18:34.485435 systemd[1]: Starting systemd-modules-load.service... Nov 1 00:18:34.485444 systemd[1]: Starting systemd-network-generator.service... Nov 1 00:18:34.485454 systemd[1]: Starting systemd-remount-fs.service... Nov 1 00:18:34.485465 systemd[1]: Starting systemd-udev-trigger.service... Nov 1 00:18:34.485474 systemd[1]: verity-setup.service: Deactivated successfully. Nov 1 00:18:34.485483 systemd[1]: Stopped verity-setup.service. Nov 1 00:18:34.485496 systemd-journald[1207]: Journal started Nov 1 00:18:34.485532 systemd-journald[1207]: Runtime Journal (/run/log/journal/5ba6501f762c4944ac6d0a21b13e9ce8) is 8.0M, max 78.5M, 70.5M free. Nov 1 00:18:30.152000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Nov 1 00:18:30.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:18:30.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Nov 1 00:18:30.449000 audit: BPF prog-id=10 op=LOAD Nov 1 00:18:30.449000 audit: BPF prog-id=10 op=UNLOAD Nov 1 00:18:30.449000 audit: BPF prog-id=11 op=LOAD Nov 1 00:18:30.449000 audit: BPF prog-id=11 op=UNLOAD Nov 1 00:18:30.848000 audit[1100]: AVC avc: denied { associate } for pid=1100 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Nov 1 00:18:30.848000 audit[1100]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40000227fc a1=4000028ae0 a2=4000026d00 a3=32 items=0 ppid=1083 pid=1100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:30.848000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:18:30.858000 audit[1100]: AVC avc: denied { associate } for pid=1100 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Nov 1 00:18:30.858000 audit[1100]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001450b8 a2=1ed a3=0 items=2 ppid=1083 pid=1100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:30.858000 audit: CWD cwd="/" Nov 1 00:18:30.858000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:30.858000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:30.858000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Nov 1 00:18:33.804000 audit: BPF prog-id=12 op=LOAD Nov 1 00:18:33.804000 audit: BPF prog-id=3 op=UNLOAD Nov 1 00:18:33.804000 audit: BPF prog-id=13 op=LOAD Nov 1 00:18:33.804000 audit: BPF prog-id=14 op=LOAD Nov 1 00:18:33.804000 audit: BPF prog-id=4 op=UNLOAD Nov 1 00:18:33.804000 audit: BPF prog-id=5 op=UNLOAD Nov 1 00:18:33.810000 audit: BPF prog-id=15 op=LOAD Nov 1 00:18:33.810000 audit: BPF prog-id=12 op=UNLOAD Nov 1 00:18:33.815000 audit: BPF prog-id=16 op=LOAD Nov 1 00:18:33.815000 audit: BPF prog-id=17 op=LOAD Nov 1 00:18:33.815000 audit: BPF prog-id=13 op=UNLOAD Nov 1 00:18:33.815000 audit: BPF prog-id=14 op=UNLOAD Nov 1 00:18:33.821000 audit: BPF prog-id=18 op=LOAD Nov 1 00:18:33.821000 audit: BPF prog-id=15 op=UNLOAD Nov 1 00:18:33.827000 audit: BPF prog-id=19 op=LOAD Nov 1 00:18:33.833000 audit: BPF prog-id=20 op=LOAD Nov 1 00:18:33.833000 audit: BPF prog-id=16 op=UNLOAD Nov 1 00:18:33.833000 audit: BPF prog-id=17 op=UNLOAD Nov 1 00:18:33.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:33.857000 audit: BPF prog-id=18 op=UNLOAD Nov 1 00:18:33.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:33.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.414000 audit: BPF prog-id=21 op=LOAD Nov 1 00:18:34.414000 audit: BPF prog-id=22 op=LOAD Nov 1 00:18:34.414000 audit: BPF prog-id=23 op=LOAD Nov 1 00:18:34.414000 audit: BPF prog-id=19 op=UNLOAD Nov 1 00:18:34.414000 audit: BPF prog-id=20 op=UNLOAD Nov 1 00:18:34.482000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Nov 1 00:18:34.482000 audit[1207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffc84f7960 a2=4000 a3=1 items=0 ppid=1 pid=1207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:34.482000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Nov 1 00:18:30.830749 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:18:33.804279 systemd[1]: Queued start job for default target multi-user.target. Nov 1 00:18:30.837622 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:18:33.804293 systemd[1]: Unnecessary job was removed for dev-sda6.device. Nov 1 00:18:30.837643 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:18:33.834366 systemd[1]: systemd-journald.service: Deactivated successfully. Nov 1 00:18:30.837680 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Nov 1 00:18:33.834741 systemd[1]: systemd-journald.service: Consumed 2.757s CPU time. Nov 1 00:18:30.837690 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="skipped missing lower profile" missing profile=oem Nov 1 00:18:30.837728 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Nov 1 00:18:30.837741 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Nov 1 00:18:30.837965 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Nov 1 00:18:30.837997 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Nov 1 00:18:30.838010 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Nov 1 00:18:30.845586 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Nov 1 00:18:30.845624 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Nov 1 00:18:30.845643 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.8: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.8 Nov 1 00:18:30.845658 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Nov 1 00:18:30.845676 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.8: no such file or directory" path=/var/lib/torcx/store/3510.3.8 Nov 1 00:18:30.845690 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:30Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Nov 1 00:18:32.796071 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:32Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:32.796336 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:32Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:32.796436 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:32Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:32.796595 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:32Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Nov 1 00:18:32.796646 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:32Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Nov 1 00:18:32.796703 /usr/lib/systemd/system-generators/torcx-generator[1100]: time="2025-11-01T00:18:32Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Nov 1 00:18:34.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.502272 systemd[1]: Started systemd-journald.service. Nov 1 00:18:34.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.502455 systemd[1]: Mounted dev-hugepages.mount. Nov 1 00:18:34.507095 systemd[1]: Mounted dev-mqueue.mount. Nov 1 00:18:34.511049 systemd[1]: Mounted media.mount. Nov 1 00:18:34.514819 systemd[1]: Mounted sys-kernel-debug.mount. Nov 1 00:18:34.519406 systemd[1]: Mounted sys-kernel-tracing.mount. Nov 1 00:18:34.524074 systemd[1]: Mounted tmp.mount. Nov 1 00:18:34.528239 systemd[1]: Finished flatcar-tmpfiles.service. Nov 1 00:18:34.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.533168 systemd[1]: Finished kmod-static-nodes.service. Nov 1 00:18:34.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.538086 systemd[1]: modprobe@configfs.service: Deactivated successfully. Nov 1 00:18:34.538221 systemd[1]: Finished modprobe@configfs.service. Nov 1 00:18:34.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.542000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.543066 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:34.543185 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:34.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.548686 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:18:34.548940 systemd[1]: Finished modprobe@drm.service. Nov 1 00:18:34.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.553420 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:34.553549 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:34.558447 systemd[1]: modprobe@fuse.service: Deactivated successfully. Nov 1 00:18:34.558571 systemd[1]: Finished modprobe@fuse.service. Nov 1 00:18:34.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.563604 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:34.563819 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:34.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.568696 systemd[1]: Finished systemd-modules-load.service. Nov 1 00:18:34.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.573791 systemd[1]: Finished systemd-network-generator.service. Nov 1 00:18:34.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.579416 systemd[1]: Finished systemd-remount-fs.service. Nov 1 00:18:34.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.584320 systemd[1]: Finished systemd-udev-trigger.service. Nov 1 00:18:34.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.589894 systemd[1]: Reached target network-pre.target. Nov 1 00:18:34.595937 systemd[1]: Mounting sys-fs-fuse-connections.mount... Nov 1 00:18:34.601762 systemd[1]: Mounting sys-kernel-config.mount... Nov 1 00:18:34.605931 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Nov 1 00:18:34.613967 systemd[1]: Starting systemd-hwdb-update.service... Nov 1 00:18:34.622747 systemd[1]: Starting systemd-journal-flush.service... Nov 1 00:18:34.627588 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:18:34.628947 systemd[1]: Starting systemd-random-seed.service... Nov 1 00:18:34.633522 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:18:34.634759 systemd[1]: Starting systemd-sysctl.service... Nov 1 00:18:34.640027 systemd[1]: Starting systemd-sysusers.service... Nov 1 00:18:34.647495 systemd[1]: Starting systemd-udev-settle.service... Nov 1 00:18:34.655221 systemd[1]: Mounted sys-fs-fuse-connections.mount. Nov 1 00:18:34.658567 systemd-journald[1207]: Time spent on flushing to /var/log/journal/5ba6501f762c4944ac6d0a21b13e9ce8 is 14.796ms for 1088 entries. Nov 1 00:18:34.658567 systemd-journald[1207]: System Journal (/var/log/journal/5ba6501f762c4944ac6d0a21b13e9ce8) is 8.0M, max 2.6G, 2.6G free. Nov 1 00:18:34.713641 systemd-journald[1207]: Received client request to flush runtime journal. Nov 1 00:18:34.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.666770 systemd[1]: Mounted sys-kernel-config.mount. Nov 1 00:18:34.719972 udevadm[1221]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Nov 1 00:18:34.681739 systemd[1]: Finished systemd-random-seed.service. Nov 1 00:18:34.687655 systemd[1]: Reached target first-boot-complete.target. Nov 1 00:18:34.714637 systemd[1]: Finished systemd-journal-flush.service. Nov 1 00:18:34.728986 systemd[1]: Finished systemd-sysctl.service. Nov 1 00:18:34.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.875245 systemd[1]: Finished systemd-sysusers.service. Nov 1 00:18:34.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:34.888226 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Nov 1 00:18:35.089407 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Nov 1 00:18:35.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.244563 systemd[1]: Finished systemd-hwdb-update.service. Nov 1 00:18:35.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.249000 audit: BPF prog-id=24 op=LOAD Nov 1 00:18:35.249000 audit: BPF prog-id=25 op=LOAD Nov 1 00:18:35.249000 audit: BPF prog-id=7 op=UNLOAD Nov 1 00:18:35.249000 audit: BPF prog-id=8 op=UNLOAD Nov 1 00:18:35.251157 systemd[1]: Starting systemd-udevd.service... Nov 1 00:18:35.269643 systemd-udevd[1226]: Using default interface naming scheme 'v252'. Nov 1 00:18:35.516477 systemd[1]: Started systemd-udevd.service. Nov 1 00:18:35.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.526000 audit: BPF prog-id=26 op=LOAD Nov 1 00:18:35.528518 systemd[1]: Starting systemd-networkd.service... Nov 1 00:18:35.553000 audit: BPF prog-id=27 op=LOAD Nov 1 00:18:35.554000 audit: BPF prog-id=28 op=LOAD Nov 1 00:18:35.554000 audit: BPF prog-id=29 op=LOAD Nov 1 00:18:35.555709 systemd[1]: Starting systemd-userdbd.service... Nov 1 00:18:35.601100 systemd[1]: Started systemd-userdbd.service. Nov 1 00:18:35.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.608107 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Nov 1 00:18:35.630910 kernel: mousedev: PS/2 mouse device common for all mice Nov 1 00:18:35.652000 audit[1230]: AVC avc: denied { confidentiality } for pid=1230 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Nov 1 00:18:35.668889 kernel: hv_vmbus: registering driver hv_balloon Nov 1 00:18:35.678945 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Nov 1 00:18:35.679018 kernel: hv_balloon: Memory hot add disabled on ARM64 Nov 1 00:18:35.652000 audit[1230]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaae4bb7c80 a1=aa2c a2=ffffa71524b0 a3=aaaae4912010 items=12 ppid=1226 pid=1230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:35.652000 audit: CWD cwd="/" Nov 1 00:18:35.652000 audit: PATH item=0 name=(null) inode=6831 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=1 name=(null) inode=11207 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=2 name=(null) inode=11207 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=3 name=(null) inode=11208 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=4 name=(null) inode=11207 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=5 name=(null) inode=11209 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=6 name=(null) inode=11207 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=7 name=(null) inode=11210 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=8 name=(null) inode=11207 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=9 name=(null) inode=11211 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=10 name=(null) inode=11207 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PATH item=11 name=(null) inode=11212 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:18:35.652000 audit: PROCTITLE proctitle="(udev-worker)" Nov 1 00:18:35.696870 kernel: hv_vmbus: registering driver hyperv_fb Nov 1 00:18:35.709124 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Nov 1 00:18:35.709210 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Nov 1 00:18:35.721369 kernel: Console: switching to colour dummy device 80x25 Nov 1 00:18:35.721454 kernel: hv_utils: Registering HyperV Utility Driver Nov 1 00:18:35.723878 kernel: Console: switching to colour frame buffer device 128x48 Nov 1 00:18:35.731974 kernel: hv_vmbus: registering driver hv_utils Nov 1 00:18:35.733912 kernel: hv_utils: Heartbeat IC version 3.0 Nov 1 00:18:35.740816 kernel: hv_utils: Shutdown IC version 3.2 Nov 1 00:18:35.740922 kernel: hv_utils: TimeSync IC version 4.0 Nov 1 00:18:35.562090 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Nov 1 00:18:35.606848 systemd-journald[1207]: Time jumped backwards, rotating. Nov 1 00:18:35.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.582400 systemd[1]: Finished systemd-udev-settle.service. Nov 1 00:18:35.589125 systemd-networkd[1247]: lo: Link UP Nov 1 00:18:35.589129 systemd-networkd[1247]: lo: Gained carrier Nov 1 00:18:35.589598 systemd-networkd[1247]: Enumeration completed Nov 1 00:18:35.589950 systemd[1]: Started systemd-networkd.service. Nov 1 00:18:35.596130 systemd[1]: Starting lvm2-activation-early.service... Nov 1 00:18:35.600528 systemd-networkd[1247]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:18:35.602444 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:18:35.659960 kernel: mlx5_core bd7d:00:02.0 enP48509s1: Link up Nov 1 00:18:35.660294 kernel: buffer_size[0]=0 is not enough for lossless buffer Nov 1 00:18:35.672747 lvm[1303]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:18:35.687975 kernel: hv_netvsc 000d3a06-f885-000d-3a06-f885000d3a06 eth0: Data path switched to VF: enP48509s1 Nov 1 00:18:35.688299 systemd-networkd[1247]: enP48509s1: Link UP Nov 1 00:18:35.688483 systemd-networkd[1247]: eth0: Link UP Nov 1 00:18:35.688536 systemd-networkd[1247]: eth0: Gained carrier Nov 1 00:18:35.693381 systemd-networkd[1247]: enP48509s1: Gained carrier Nov 1 00:18:35.701037 systemd-networkd[1247]: eth0: DHCPv4 address 10.200.20.24/24, gateway 10.200.20.1 acquired from 168.63.129.16 Nov 1 00:18:35.702285 systemd[1]: Finished lvm2-activation-early.service. Nov 1 00:18:35.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.707273 systemd[1]: Reached target cryptsetup.target. Nov 1 00:18:35.713011 systemd[1]: Starting lvm2-activation.service... Nov 1 00:18:35.717033 lvm[1305]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Nov 1 00:18:35.739776 systemd[1]: Finished lvm2-activation.service. Nov 1 00:18:35.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:35.744584 systemd[1]: Reached target local-fs-pre.target. Nov 1 00:18:35.749175 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Nov 1 00:18:35.749201 systemd[1]: Reached target local-fs.target. Nov 1 00:18:35.753645 systemd[1]: Reached target machines.target. Nov 1 00:18:35.760194 systemd[1]: Starting ldconfig.service... Nov 1 00:18:35.772235 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:35.772300 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:35.773507 systemd[1]: Starting systemd-boot-update.service... Nov 1 00:18:35.779475 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Nov 1 00:18:35.786533 systemd[1]: Starting systemd-machine-id-commit.service... Nov 1 00:18:35.794022 systemd[1]: Starting systemd-sysext.service... Nov 1 00:18:35.799110 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1307 (bootctl) Nov 1 00:18:35.800422 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Nov 1 00:18:36.005527 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Nov 1 00:18:36.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.050819 systemd[1]: Unmounting usr-share-oem.mount... Nov 1 00:18:36.099735 systemd[1]: usr-share-oem.mount: Deactivated successfully. Nov 1 00:18:36.099950 systemd[1]: Unmounted usr-share-oem.mount. Nov 1 00:18:36.130937 kernel: loop0: detected capacity change from 0 to 207008 Nov 1 00:18:36.163937 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Nov 1 00:18:36.164540 systemd[1]: Finished systemd-machine-id-commit.service. Nov 1 00:18:36.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.172083 systemd-fsck[1314]: fsck.fat 4.2 (2021-01-31) Nov 1 00:18:36.172083 systemd-fsck[1314]: /dev/sda1: 236 files, 117310/258078 clusters Nov 1 00:18:36.173650 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Nov 1 00:18:36.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.183999 systemd[1]: Mounting boot.mount... Nov 1 00:18:36.194909 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Nov 1 00:18:36.208064 systemd[1]: Mounted boot.mount. Nov 1 00:18:36.218108 kernel: loop1: detected capacity change from 0 to 207008 Nov 1 00:18:36.226568 systemd[1]: Finished systemd-boot-update.service. Nov 1 00:18:36.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.236467 (sd-sysext)[1323]: Using extensions 'kubernetes'. Nov 1 00:18:36.237140 (sd-sysext)[1323]: Merged extensions into '/usr'. Nov 1 00:18:36.255410 systemd[1]: Mounting usr-share-oem.mount... Nov 1 00:18:36.259551 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.260972 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:36.266574 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:36.271993 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:36.275963 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.276106 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:36.278612 systemd[1]: Mounted usr-share-oem.mount. Nov 1 00:18:36.283411 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:36.283553 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:36.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.288589 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:36.288716 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:36.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.294849 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:36.294992 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:36.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.300397 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:18:36.300503 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.301507 systemd[1]: Finished systemd-sysext.service. Nov 1 00:18:36.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.307539 systemd[1]: Starting ensure-sysext.service... Nov 1 00:18:36.313027 systemd[1]: Starting systemd-tmpfiles-setup.service... Nov 1 00:18:36.322013 systemd[1]: Reloading. Nov 1 00:18:36.330536 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Nov 1 00:18:36.339264 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Nov 1 00:18:36.343735 systemd-tmpfiles[1330]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Nov 1 00:18:36.384020 /usr/lib/systemd/system-generators/torcx-generator[1350]: time="2025-11-01T00:18:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:18:36.384563 /usr/lib/systemd/system-generators/torcx-generator[1350]: time="2025-11-01T00:18:36Z" level=info msg="torcx already run" Nov 1 00:18:36.467849 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:18:36.467869 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:18:36.483909 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:18:36.551000 audit: BPF prog-id=30 op=LOAD Nov 1 00:18:36.551000 audit: BPF prog-id=21 op=UNLOAD Nov 1 00:18:36.551000 audit: BPF prog-id=31 op=LOAD Nov 1 00:18:36.552000 audit: BPF prog-id=32 op=LOAD Nov 1 00:18:36.552000 audit: BPF prog-id=22 op=UNLOAD Nov 1 00:18:36.552000 audit: BPF prog-id=23 op=UNLOAD Nov 1 00:18:36.554000 audit: BPF prog-id=33 op=LOAD Nov 1 00:18:36.554000 audit: BPF prog-id=26 op=UNLOAD Nov 1 00:18:36.554000 audit: BPF prog-id=34 op=LOAD Nov 1 00:18:36.554000 audit: BPF prog-id=35 op=LOAD Nov 1 00:18:36.554000 audit: BPF prog-id=24 op=UNLOAD Nov 1 00:18:36.554000 audit: BPF prog-id=25 op=UNLOAD Nov 1 00:18:36.555000 audit: BPF prog-id=36 op=LOAD Nov 1 00:18:36.555000 audit: BPF prog-id=27 op=UNLOAD Nov 1 00:18:36.555000 audit: BPF prog-id=37 op=LOAD Nov 1 00:18:36.555000 audit: BPF prog-id=38 op=LOAD Nov 1 00:18:36.555000 audit: BPF prog-id=28 op=UNLOAD Nov 1 00:18:36.555000 audit: BPF prog-id=29 op=UNLOAD Nov 1 00:18:36.571312 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.573233 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:36.579059 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:36.584865 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:36.589214 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.589365 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:36.590245 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:36.590407 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:36.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.595956 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:36.596092 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:36.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.601764 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:36.601974 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:36.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.607856 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.609401 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:36.615053 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:36.620989 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:36.625393 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.625541 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:36.626364 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:36.626513 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:36.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.631911 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:36.632042 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:36.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.637325 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:36.637454 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:36.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.644875 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.646527 systemd[1]: Starting modprobe@dm_mod.service... Nov 1 00:18:36.652328 systemd[1]: Starting modprobe@drm.service... Nov 1 00:18:36.658114 systemd[1]: Starting modprobe@efi_pstore.service... Nov 1 00:18:36.663479 systemd[1]: Starting modprobe@loop.service... Nov 1 00:18:36.667540 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.667686 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:36.668663 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Nov 1 00:18:36.668803 systemd[1]: Finished modprobe@dm_mod.service. Nov 1 00:18:36.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.673819 systemd[1]: modprobe@drm.service: Deactivated successfully. Nov 1 00:18:36.673964 systemd[1]: Finished modprobe@drm.service. Nov 1 00:18:36.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.679056 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Nov 1 00:18:36.679186 systemd[1]: Finished modprobe@efi_pstore.service. Nov 1 00:18:36.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.684571 systemd[1]: modprobe@loop.service: Deactivated successfully. Nov 1 00:18:36.684691 systemd[1]: Finished modprobe@loop.service. Nov 1 00:18:36.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.689651 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Nov 1 00:18:36.689719 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Nov 1 00:18:36.690744 systemd[1]: Finished ensure-sysext.service. Nov 1 00:18:36.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:36.804058 systemd-networkd[1247]: eth0: Gained IPv6LL Nov 1 00:18:36.808774 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:18:36.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.111837 systemd[1]: Finished systemd-tmpfiles-setup.service. Nov 1 00:18:37.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.118665 systemd[1]: Starting audit-rules.service... Nov 1 00:18:37.124583 systemd[1]: Starting clean-ca-certificates.service... Nov 1 00:18:37.131973 systemd[1]: Starting systemd-journal-catalog-update.service... Nov 1 00:18:37.137000 audit: BPF prog-id=39 op=LOAD Nov 1 00:18:37.139691 systemd[1]: Starting systemd-resolved.service... Nov 1 00:18:37.145000 audit: BPF prog-id=40 op=LOAD Nov 1 00:18:37.147491 systemd[1]: Starting systemd-timesyncd.service... Nov 1 00:18:37.154427 systemd[1]: Starting systemd-update-utmp.service... Nov 1 00:18:37.160550 systemd[1]: Finished clean-ca-certificates.service. Nov 1 00:18:37.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.168674 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Nov 1 00:18:37.173000 audit[1431]: SYSTEM_BOOT pid=1431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.177397 systemd[1]: Finished systemd-update-utmp.service. Nov 1 00:18:37.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.234793 systemd[1]: Started systemd-timesyncd.service. Nov 1 00:18:37.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.240402 systemd[1]: Reached target time-set.target. Nov 1 00:18:37.254582 systemd[1]: Finished systemd-journal-catalog-update.service. Nov 1 00:18:37.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.264380 systemd-resolved[1424]: Positive Trust Anchors: Nov 1 00:18:37.264389 systemd-resolved[1424]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Nov 1 00:18:37.264417 systemd-resolved[1424]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Nov 1 00:18:37.284111 systemd-resolved[1424]: Using system hostname 'ci-3510.3.8-n-2788c77bd2'. Nov 1 00:18:37.285916 systemd[1]: Started systemd-resolved.service. Nov 1 00:18:37.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:18:37.290855 systemd[1]: Reached target network.target. Nov 1 00:18:37.295215 systemd[1]: Reached target network-online.target. Nov 1 00:18:37.299933 systemd[1]: Reached target nss-lookup.target. Nov 1 00:18:37.311000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Nov 1 00:18:37.311000 audit[1441]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcc404ca0 a2=420 a3=0 items=0 ppid=1420 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:18:37.311000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Nov 1 00:18:37.313020 augenrules[1441]: No rules Nov 1 00:18:37.313710 systemd[1]: Finished audit-rules.service. Nov 1 00:18:37.503689 systemd-timesyncd[1428]: Contacted time server 72.14.183.39:123 (0.flatcar.pool.ntp.org). Nov 1 00:18:37.504097 systemd-timesyncd[1428]: Initial clock synchronization to Sat 2025-11-01 00:18:37.505701 UTC. Nov 1 00:18:39.079626 ldconfig[1306]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Nov 1 00:18:39.092552 systemd[1]: Finished ldconfig.service. Nov 1 00:18:39.097929 systemd[1]: Starting systemd-update-done.service... Nov 1 00:18:39.116151 systemd[1]: Finished systemd-update-done.service. Nov 1 00:18:39.121368 systemd[1]: Reached target sysinit.target. Nov 1 00:18:39.125929 systemd[1]: Started motdgen.path. Nov 1 00:18:39.129951 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Nov 1 00:18:39.136594 systemd[1]: Started logrotate.timer. Nov 1 00:18:39.140331 systemd[1]: Started mdadm.timer. Nov 1 00:18:39.144205 systemd[1]: Started systemd-tmpfiles-clean.timer. Nov 1 00:18:39.148641 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Nov 1 00:18:39.148674 systemd[1]: Reached target paths.target. Nov 1 00:18:39.152681 systemd[1]: Reached target timers.target. Nov 1 00:18:39.157123 systemd[1]: Listening on dbus.socket. Nov 1 00:18:39.162349 systemd[1]: Starting docker.socket... Nov 1 00:18:39.183837 systemd[1]: Listening on sshd.socket. Nov 1 00:18:39.187907 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:39.188430 systemd[1]: Listening on docker.socket. Nov 1 00:18:39.192762 systemd[1]: Reached target sockets.target. Nov 1 00:18:39.196896 systemd[1]: Reached target basic.target. Nov 1 00:18:39.201281 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:18:39.201400 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Nov 1 00:18:39.202656 systemd[1]: Starting containerd.service... Nov 1 00:18:39.207668 systemd[1]: Starting dbus.service... Nov 1 00:18:39.212257 systemd[1]: Starting enable-oem-cloudinit.service... Nov 1 00:18:39.217999 systemd[1]: Starting extend-filesystems.service... Nov 1 00:18:39.222096 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Nov 1 00:18:39.227401 systemd[1]: Starting kubelet.service... Nov 1 00:18:39.232165 systemd[1]: Starting motdgen.service... Nov 1 00:18:39.236734 systemd[1]: Started nvidia.service. Nov 1 00:18:39.245175 jq[1451]: false Nov 1 00:18:39.246651 systemd[1]: Starting prepare-helm.service... Nov 1 00:18:39.252130 systemd[1]: Starting ssh-key-proc-cmdline.service... Nov 1 00:18:39.259164 systemd[1]: Starting sshd-keygen.service... Nov 1 00:18:39.265649 systemd[1]: Starting systemd-logind.service... Nov 1 00:18:39.273601 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Nov 1 00:18:39.273675 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Nov 1 00:18:39.274191 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Nov 1 00:18:39.275955 systemd[1]: Starting update-engine.service... Nov 1 00:18:39.283272 systemd[1]: Starting update-ssh-keys-after-ignition.service... Nov 1 00:18:39.286000 extend-filesystems[1452]: Found loop1 Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda1 Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda2 Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda3 Nov 1 00:18:39.295466 extend-filesystems[1452]: Found usr Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda4 Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda6 Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda7 Nov 1 00:18:39.295466 extend-filesystems[1452]: Found sda9 Nov 1 00:18:39.295466 extend-filesystems[1452]: Checking size of /dev/sda9 Nov 1 00:18:39.292142 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Nov 1 00:18:39.473109 extend-filesystems[1452]: Old size kept for /dev/sda9 Nov 1 00:18:39.473109 extend-filesystems[1452]: Found sr0 Nov 1 00:18:39.534807 jq[1473]: true Nov 1 00:18:39.292340 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Nov 1 00:18:39.482763 dbus-daemon[1450]: [system] SELinux support is enabled Nov 1 00:18:39.535323 tar[1477]: linux-arm64/LICENSE Nov 1 00:18:39.535323 tar[1477]: linux-arm64/helm Nov 1 00:18:39.294369 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Nov 1 00:18:39.517478 dbus-daemon[1450]: [system] Successfully activated service 'org.freedesktop.systemd1' Nov 1 00:18:39.294534 systemd[1]: Finished ssh-key-proc-cmdline.service. Nov 1 00:18:39.312139 systemd[1]: motdgen.service: Deactivated successfully. Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.415757716Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.505068174Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.505265998Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.507449431Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.1 Nov 1 00:18:39.535780 env[1484]: 92-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.507490116Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.507729426Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter Nov 1 00:18:39.535780 env[1484]: : skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.507746348Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.507759829Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.507768830Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.507847160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:39.535780 env[1484]: time="2025-11-01T00:18:39.508166200Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Nov 1 00:18:39.312297 systemd[1]: Finished motdgen.service. Nov 1 00:18:39.536255 env[1484]: time="2025-11-01T00:18:39.508322740Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Nov 1 00:18:39.536255 env[1484]: time="2025-11-01T00:18:39.508340382Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Nov 1 00:18:39.536255 env[1484]: time="2025-11-01T00:18:39.508399629Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Nov 1 00:18:39.536255 env[1484]: time="2025-11-01T00:18:39.508412271Z" level=info msg="metadata content store policy set" policy=shared Nov 1 00:18:39.536333 jq[1483]: true Nov 1 00:18:39.381579 systemd[1]: extend-filesystems.service: Deactivated successfully. Nov 1 00:18:39.381776 systemd[1]: Finished extend-filesystems.service. Nov 1 00:18:39.536571 bash[1506]: Updated "/home/core/.ssh/authorized_keys" Nov 1 00:18:39.414232 systemd-logind[1464]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 1 00:18:39.424637 systemd-logind[1464]: New seat seat0. Nov 1 00:18:39.471765 systemd[1]: Finished update-ssh-keys-after-ignition.service. Nov 1 00:18:39.497459 systemd[1]: Started dbus.service. Nov 1 00:18:39.516470 systemd[1]: nvidia.service: Deactivated successfully. Nov 1 00:18:39.516877 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Nov 1 00:18:39.516968 systemd[1]: Reached target system-config.target. Nov 1 00:18:39.521955 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Nov 1 00:18:39.521974 systemd[1]: Reached target user-config.target. Nov 1 00:18:39.529833 systemd[1]: Started systemd-logind.service. Nov 1 00:18:39.540639 env[1484]: time="2025-11-01T00:18:39.540222478Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Nov 1 00:18:39.540639 env[1484]: time="2025-11-01T00:18:39.540266363Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Nov 1 00:18:39.540639 env[1484]: time="2025-11-01T00:18:39.540279805Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Nov 1 00:18:39.540639 env[1484]: time="2025-11-01T00:18:39.540313889Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.540639 env[1484]: time="2025-11-01T00:18:39.540346653Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.540639 env[1484]: time="2025-11-01T00:18:39.540360935Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.540639 env[1484]: time="2025-11-01T00:18:39.540374177Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.540793629Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.540813431Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.540826473Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.540839715Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.540852756Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.540999775Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541073064Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541286770Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541441630Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541458112Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541504958Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541517399Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541530441Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.541710 env[1484]: time="2025-11-01T00:18:39.541541002Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.541552123Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.541565005Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.541576166Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.541589568Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.541603530Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.541971736Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.541993379Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.542008020Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.542020422Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.542051546Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.542064507Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.542084350Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Nov 1 00:18:39.548417 env[1484]: time="2025-11-01T00:18:39.542117314Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Nov 1 00:18:39.543339 systemd[1]: Started containerd.service. Nov 1 00:18:39.548817 env[1484]: time="2025-11-01T00:18:39.542308538Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Nov 1 00:18:39.548817 env[1484]: time="2025-11-01T00:18:39.542359784Z" level=info msg="Connect containerd service" Nov 1 00:18:39.548817 env[1484]: time="2025-11-01T00:18:39.542389948Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Nov 1 00:18:39.548817 env[1484]: time="2025-11-01T00:18:39.542924295Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:18:39.548817 env[1484]: time="2025-11-01T00:18:39.543176006Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Nov 1 00:18:39.548817 env[1484]: time="2025-11-01T00:18:39.543213891Z" level=info msg=serving... address=/run/containerd/containerd.sock Nov 1 00:18:39.548817 env[1484]: time="2025-11-01T00:18:39.543256256Z" level=info msg="containerd successfully booted in 0.130606s" Nov 1 00:18:39.561522 env[1484]: time="2025-11-01T00:18:39.549199557Z" level=info msg="Start subscribing containerd event" Nov 1 00:18:39.561522 env[1484]: time="2025-11-01T00:18:39.549280087Z" level=info msg="Start recovering state" Nov 1 00:18:39.561522 env[1484]: time="2025-11-01T00:18:39.549366098Z" level=info msg="Start event monitor" Nov 1 00:18:39.561522 env[1484]: time="2025-11-01T00:18:39.549387781Z" level=info msg="Start snapshots syncer" Nov 1 00:18:39.561522 env[1484]: time="2025-11-01T00:18:39.549410663Z" level=info msg="Start cni network conf syncer for default" Nov 1 00:18:39.561522 env[1484]: time="2025-11-01T00:18:39.549419065Z" level=info msg="Start streaming server" Nov 1 00:18:39.561641 update_engine[1468]: I1101 00:18:39.551561 1468 main.cc:92] Flatcar Update Engine starting Nov 1 00:18:39.579470 systemd[1]: Started update-engine.service. Nov 1 00:18:39.589845 update_engine[1468]: I1101 00:18:39.579496 1468 update_check_scheduler.cc:74] Next update check in 8m40s Nov 1 00:18:39.585713 systemd[1]: Started locksmithd.service. Nov 1 00:18:40.043257 tar[1477]: linux-arm64/README.md Nov 1 00:18:40.047925 systemd[1]: Finished prepare-helm.service. Nov 1 00:18:40.411649 systemd[1]: Started kubelet.service. Nov 1 00:18:40.460140 locksmithd[1526]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Nov 1 00:18:40.857961 sshd_keygen[1481]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Nov 1 00:18:40.881485 systemd[1]: Finished sshd-keygen.service. Nov 1 00:18:40.887349 systemd[1]: Starting issuegen.service... Nov 1 00:18:40.892971 systemd[1]: Started waagent.service. Nov 1 00:18:40.897744 systemd[1]: issuegen.service: Deactivated successfully. Nov 1 00:18:40.897954 systemd[1]: Finished issuegen.service. Nov 1 00:18:40.903943 systemd[1]: Starting systemd-user-sessions.service... Nov 1 00:18:40.928653 systemd[1]: Finished systemd-user-sessions.service. Nov 1 00:18:40.942744 systemd[1]: Started getty@tty1.service. Nov 1 00:18:40.948678 systemd[1]: Started serial-getty@ttyAMA0.service. Nov 1 00:18:40.953802 systemd[1]: Reached target getty.target. Nov 1 00:18:40.959485 systemd[1]: Reached target multi-user.target. Nov 1 00:18:40.965346 systemd[1]: Starting systemd-update-utmp-runlevel.service... Nov 1 00:18:40.977416 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Nov 1 00:18:40.977587 systemd[1]: Finished systemd-update-utmp-runlevel.service. Nov 1 00:18:40.983689 systemd[1]: Startup finished in 727ms (kernel) + 8.329s (initrd) + 11.281s (userspace) = 20.338s. Nov 1 00:18:40.993239 kubelet[1558]: E1101 00:18:40.993194 1558 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:18:40.996851 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:18:40.996987 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:18:41.223058 login[1581]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Nov 1 00:18:41.237098 login[1580]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:18:41.289719 systemd[1]: Created slice user-500.slice. Nov 1 00:18:41.290846 systemd[1]: Starting user-runtime-dir@500.service... Nov 1 00:18:41.293573 systemd-logind[1464]: New session 1 of user core. Nov 1 00:18:41.310157 systemd[1]: Finished user-runtime-dir@500.service. Nov 1 00:18:41.311634 systemd[1]: Starting user@500.service... Nov 1 00:18:41.328736 (systemd)[1584]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:18:41.499466 systemd[1584]: Queued start job for default target default.target. Nov 1 00:18:41.500638 systemd[1584]: Reached target paths.target. Nov 1 00:18:41.500766 systemd[1584]: Reached target sockets.target. Nov 1 00:18:41.500836 systemd[1584]: Reached target timers.target. Nov 1 00:18:41.500918 systemd[1584]: Reached target basic.target. Nov 1 00:18:41.501039 systemd[1584]: Reached target default.target. Nov 1 00:18:41.501104 systemd[1]: Started user@500.service. Nov 1 00:18:41.501832 systemd[1584]: Startup finished in 166ms. Nov 1 00:18:41.501980 systemd[1]: Started session-1.scope. Nov 1 00:18:42.224508 login[1581]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Nov 1 00:18:42.229104 systemd[1]: Started session-2.scope. Nov 1 00:18:42.230395 systemd-logind[1464]: New session 2 of user core. Nov 1 00:18:43.638895 waagent[1575]: 2025-11-01T00:18:43.638773Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Nov 1 00:18:43.648850 waagent[1575]: 2025-11-01T00:18:43.648752Z INFO Daemon Daemon OS: flatcar 3510.3.8 Nov 1 00:18:43.653476 waagent[1575]: 2025-11-01T00:18:43.653398Z INFO Daemon Daemon Python: 3.9.16 Nov 1 00:18:43.658041 waagent[1575]: 2025-11-01T00:18:43.657956Z INFO Daemon Daemon Run daemon Nov 1 00:18:43.662294 waagent[1575]: 2025-11-01T00:18:43.662219Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.8' Nov 1 00:18:43.683399 waagent[1575]: 2025-11-01T00:18:43.683251Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:18:43.698677 waagent[1575]: 2025-11-01T00:18:43.698536Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:18:43.708665 waagent[1575]: 2025-11-01T00:18:43.708576Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:18:43.714023 waagent[1575]: 2025-11-01T00:18:43.713941Z INFO Daemon Daemon Using waagent for provisioning Nov 1 00:18:43.720237 waagent[1575]: 2025-11-01T00:18:43.720165Z INFO Daemon Daemon Activate resource disk Nov 1 00:18:43.725289 waagent[1575]: 2025-11-01T00:18:43.725213Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Nov 1 00:18:43.739973 waagent[1575]: 2025-11-01T00:18:43.739876Z INFO Daemon Daemon Found device: None Nov 1 00:18:43.744974 waagent[1575]: 2025-11-01T00:18:43.744892Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Nov 1 00:18:43.753475 waagent[1575]: 2025-11-01T00:18:43.753395Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Nov 1 00:18:43.766708 waagent[1575]: 2025-11-01T00:18:43.766638Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:18:43.773638 waagent[1575]: 2025-11-01T00:18:43.773559Z INFO Daemon Daemon Running default provisioning handler Nov 1 00:18:43.787539 waagent[1575]: 2025-11-01T00:18:43.787388Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Nov 1 00:18:43.802941 waagent[1575]: 2025-11-01T00:18:43.802750Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Nov 1 00:18:43.814245 waagent[1575]: 2025-11-01T00:18:43.814159Z INFO Daemon Daemon cloud-init is enabled: False Nov 1 00:18:43.819472 waagent[1575]: 2025-11-01T00:18:43.819380Z INFO Daemon Daemon Copying ovf-env.xml Nov 1 00:18:43.878075 waagent[1575]: 2025-11-01T00:18:43.877930Z INFO Daemon Daemon Successfully mounted dvd Nov 1 00:18:43.916960 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Nov 1 00:18:43.930374 waagent[1575]: 2025-11-01T00:18:43.930217Z INFO Daemon Daemon Detect protocol endpoint Nov 1 00:18:43.935676 waagent[1575]: 2025-11-01T00:18:43.935584Z INFO Daemon Daemon Clean protocol and wireserver endpoint Nov 1 00:18:43.941886 waagent[1575]: 2025-11-01T00:18:43.941796Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Nov 1 00:18:43.950200 waagent[1575]: 2025-11-01T00:18:43.950118Z INFO Daemon Daemon Test for route to 168.63.129.16 Nov 1 00:18:43.955605 waagent[1575]: 2025-11-01T00:18:43.955528Z INFO Daemon Daemon Route to 168.63.129.16 exists Nov 1 00:18:43.960887 waagent[1575]: 2025-11-01T00:18:43.960809Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Nov 1 00:18:44.010650 waagent[1575]: 2025-11-01T00:18:44.010578Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Nov 1 00:18:44.017709 waagent[1575]: 2025-11-01T00:18:44.017661Z INFO Daemon Daemon Wire protocol version:2012-11-30 Nov 1 00:18:44.023075 waagent[1575]: 2025-11-01T00:18:44.023003Z INFO Daemon Daemon Server preferred version:2015-04-05 Nov 1 00:18:44.756351 waagent[1575]: 2025-11-01T00:18:44.756189Z INFO Daemon Daemon Initializing goal state during protocol detection Nov 1 00:18:44.771583 waagent[1575]: 2025-11-01T00:18:44.771499Z INFO Daemon Daemon Forcing an update of the goal state.. Nov 1 00:18:44.777159 waagent[1575]: 2025-11-01T00:18:44.777081Z INFO Daemon Daemon Fetching goal state [incarnation 1] Nov 1 00:18:45.501037 waagent[1575]: 2025-11-01T00:18:45.500867Z INFO Daemon Daemon Found private key matching thumbprint 8DA8A3CD2C51BBF55D5D9BDFA3B7216689B553E3 Nov 1 00:18:45.510367 waagent[1575]: 2025-11-01T00:18:45.510271Z INFO Daemon Daemon Fetch goal state completed Nov 1 00:18:45.536468 waagent[1575]: 2025-11-01T00:18:45.536408Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 1b7459c6-8281-41b0-9eb7-43552f62b77e New eTag: 140638732840560620] Nov 1 00:18:45.546911 waagent[1575]: 2025-11-01T00:18:45.546811Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:18:45.563089 waagent[1575]: 2025-11-01T00:18:45.563006Z INFO Daemon Daemon Starting provisioning Nov 1 00:18:45.567907 waagent[1575]: 2025-11-01T00:18:45.567810Z INFO Daemon Daemon Handle ovf-env.xml. Nov 1 00:18:45.573052 waagent[1575]: 2025-11-01T00:18:45.572976Z INFO Daemon Daemon Set hostname [ci-3510.3.8-n-2788c77bd2] Nov 1 00:18:45.592381 waagent[1575]: 2025-11-01T00:18:45.592238Z INFO Daemon Daemon Publish hostname [ci-3510.3.8-n-2788c77bd2] Nov 1 00:18:45.599317 waagent[1575]: 2025-11-01T00:18:45.599230Z INFO Daemon Daemon Examine /proc/net/route for primary interface Nov 1 00:18:45.606118 waagent[1575]: 2025-11-01T00:18:45.606046Z INFO Daemon Daemon Primary interface is [eth0] Nov 1 00:18:45.622533 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Nov 1 00:18:45.622692 systemd[1]: Stopped systemd-networkd-wait-online.service. Nov 1 00:18:45.622745 systemd[1]: Stopping systemd-networkd-wait-online.service... Nov 1 00:18:45.622990 systemd[1]: Stopping systemd-networkd.service... Nov 1 00:18:45.631932 systemd-networkd[1247]: eth0: DHCPv6 lease lost Nov 1 00:18:45.633328 systemd[1]: systemd-networkd.service: Deactivated successfully. Nov 1 00:18:45.633504 systemd[1]: Stopped systemd-networkd.service. Nov 1 00:18:45.635510 systemd[1]: Starting systemd-networkd.service... Nov 1 00:18:45.664584 systemd-networkd[1625]: enP48509s1: Link UP Nov 1 00:18:45.664595 systemd-networkd[1625]: enP48509s1: Gained carrier Nov 1 00:18:45.665623 systemd-networkd[1625]: eth0: Link UP Nov 1 00:18:45.665634 systemd-networkd[1625]: eth0: Gained carrier Nov 1 00:18:45.666127 systemd-networkd[1625]: lo: Link UP Nov 1 00:18:45.666135 systemd-networkd[1625]: lo: Gained carrier Nov 1 00:18:45.666385 systemd-networkd[1625]: eth0: Gained IPv6LL Nov 1 00:18:45.667542 systemd-networkd[1625]: Enumeration completed Nov 1 00:18:45.667672 systemd[1]: Started systemd-networkd.service. Nov 1 00:18:45.669479 systemd[1]: Starting systemd-networkd-wait-online.service... Nov 1 00:18:45.673277 waagent[1575]: 2025-11-01T00:18:45.672824Z INFO Daemon Daemon Create user account if not exists Nov 1 00:18:45.673471 systemd-networkd[1625]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Nov 1 00:18:45.681916 waagent[1575]: 2025-11-01T00:18:45.681784Z INFO Daemon Daemon User core already exists, skip useradd Nov 1 00:18:45.688458 waagent[1575]: 2025-11-01T00:18:45.688354Z INFO Daemon Daemon Configure sudoer Nov 1 00:18:45.699030 waagent[1575]: 2025-11-01T00:18:45.698934Z INFO Daemon Daemon Configure sshd Nov 1 00:18:45.702987 systemd-networkd[1625]: eth0: DHCPv4 address 10.200.20.24/24, gateway 10.200.20.1 acquired from 168.63.129.16 Nov 1 00:18:45.703692 waagent[1575]: 2025-11-01T00:18:45.703596Z INFO Daemon Daemon Deploy ssh public key. Nov 1 00:18:45.709358 systemd[1]: Finished systemd-networkd-wait-online.service. Nov 1 00:18:46.800102 waagent[1575]: 2025-11-01T00:18:46.800008Z INFO Daemon Daemon Provisioning complete Nov 1 00:18:46.820479 waagent[1575]: 2025-11-01T00:18:46.820415Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Nov 1 00:18:46.826478 waagent[1575]: 2025-11-01T00:18:46.826395Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Nov 1 00:18:46.836596 waagent[1575]: 2025-11-01T00:18:46.836512Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Nov 1 00:18:47.143607 waagent[1632]: 2025-11-01T00:18:47.143511Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Nov 1 00:18:47.144699 waagent[1632]: 2025-11-01T00:18:47.144643Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:47.144959 waagent[1632]: 2025-11-01T00:18:47.144909Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:47.157825 waagent[1632]: 2025-11-01T00:18:47.157736Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Nov 1 00:18:47.158185 waagent[1632]: 2025-11-01T00:18:47.158135Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Nov 1 00:18:47.218234 waagent[1632]: 2025-11-01T00:18:47.218096Z INFO ExtHandler ExtHandler Found private key matching thumbprint 8DA8A3CD2C51BBF55D5D9BDFA3B7216689B553E3 Nov 1 00:18:47.218700 waagent[1632]: 2025-11-01T00:18:47.218647Z INFO ExtHandler ExtHandler Fetch goal state completed Nov 1 00:18:47.233384 waagent[1632]: 2025-11-01T00:18:47.233322Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: ff53d790-1f72-480a-8019-dd0ef656b818 New eTag: 140638732840560620] Nov 1 00:18:47.234138 waagent[1632]: 2025-11-01T00:18:47.234082Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Nov 1 00:18:47.283440 waagent[1632]: 2025-11-01T00:18:47.283303Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:18:47.296643 waagent[1632]: 2025-11-01T00:18:47.296553Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1632 Nov 1 00:18:47.300441 waagent[1632]: 2025-11-01T00:18:47.300367Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:18:47.301737 waagent[1632]: 2025-11-01T00:18:47.301677Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Nov 1 00:18:47.347426 waagent[1632]: 2025-11-01T00:18:47.347357Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Nov 1 00:18:47.347830 waagent[1632]: 2025-11-01T00:18:47.347773Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:18:47.355594 waagent[1632]: 2025-11-01T00:18:47.355524Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:18:47.356178 waagent[1632]: 2025-11-01T00:18:47.356117Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:18:47.357355 waagent[1632]: 2025-11-01T00:18:47.357291Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Nov 1 00:18:47.358925 waagent[1632]: 2025-11-01T00:18:47.358813Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:18:47.359722 waagent[1632]: 2025-11-01T00:18:47.359663Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:47.360004 waagent[1632]: 2025-11-01T00:18:47.359951Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:47.360680 waagent[1632]: 2025-11-01T00:18:47.360624Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:18:47.361331 waagent[1632]: 2025-11-01T00:18:47.361256Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:18:47.361983 waagent[1632]: 2025-11-01T00:18:47.361929Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:18:47.361983 waagent[1632]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:18:47.361983 waagent[1632]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:18:47.361983 waagent[1632]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:18:47.361983 waagent[1632]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:47.361983 waagent[1632]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:47.361983 waagent[1632]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:47.362167 waagent[1632]: 2025-11-01T00:18:47.362050Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:47.362210 waagent[1632]: 2025-11-01T00:18:47.361833Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:18:47.362274 waagent[1632]: 2025-11-01T00:18:47.362218Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:47.362440 waagent[1632]: 2025-11-01T00:18:47.362382Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:18:47.363097 waagent[1632]: 2025-11-01T00:18:47.363025Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:18:47.365695 waagent[1632]: 2025-11-01T00:18:47.365481Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:18:47.365829 waagent[1632]: 2025-11-01T00:18:47.365763Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:18:47.366478 waagent[1632]: 2025-11-01T00:18:47.366384Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:18:47.366796 waagent[1632]: 2025-11-01T00:18:47.366735Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:18:47.367058 waagent[1632]: 2025-11-01T00:18:47.366998Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:18:47.378178 waagent[1632]: 2025-11-01T00:18:47.378101Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Nov 1 00:18:47.379773 waagent[1632]: 2025-11-01T00:18:47.379710Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:18:47.384638 waagent[1632]: 2025-11-01T00:18:47.384549Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Nov 1 00:18:47.402367 waagent[1632]: 2025-11-01T00:18:47.402137Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1625' Nov 1 00:18:47.415374 waagent[1632]: 2025-11-01T00:18:47.415287Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Nov 1 00:18:47.427304 waagent[1632]: 2025-11-01T00:18:47.427177Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:18:47.427304 waagent[1632]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:18:47.427304 waagent[1632]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:18:47.427304 waagent[1632]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:f8:85 brd ff:ff:ff:ff:ff:ff Nov 1 00:18:47.427304 waagent[1632]: 3: enP48509s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:f8:85 brd ff:ff:ff:ff:ff:ff\ altname enP48509p0s2 Nov 1 00:18:47.427304 waagent[1632]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:18:47.427304 waagent[1632]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:18:47.427304 waagent[1632]: 2: eth0 inet 10.200.20.24/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:18:47.427304 waagent[1632]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:18:47.427304 waagent[1632]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:18:47.427304 waagent[1632]: 2: eth0 inet6 fe80::20d:3aff:fe06:f885/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:18:47.599046 waagent[1632]: 2025-11-01T00:18:47.598906Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Nov 1 00:18:47.606470 waagent[1632]: 2025-11-01T00:18:47.606396Z INFO EnvHandler ExtHandler Firewall rules: Nov 1 00:18:47.606470 waagent[1632]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:47.606470 waagent[1632]: pkts bytes target prot opt in out source destination Nov 1 00:18:47.606470 waagent[1632]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:47.606470 waagent[1632]: pkts bytes target prot opt in out source destination Nov 1 00:18:47.606470 waagent[1632]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:47.606470 waagent[1632]: pkts bytes target prot opt in out source destination Nov 1 00:18:47.606470 waagent[1632]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:18:47.606470 waagent[1632]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:18:47.608064 waagent[1632]: 2025-11-01T00:18:47.608012Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Nov 1 00:18:47.733044 waagent[1632]: 2025-11-01T00:18:47.732928Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.15.0.1 -- exiting Nov 1 00:18:47.840072 waagent[1575]: 2025-11-01T00:18:47.839932Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Nov 1 00:18:47.846680 waagent[1575]: 2025-11-01T00:18:47.846598Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.15.0.1 to be the latest agent Nov 1 00:18:49.136840 waagent[1670]: 2025-11-01T00:18:49.136745Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.15.0.1) Nov 1 00:18:49.137908 waagent[1670]: 2025-11-01T00:18:49.137836Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.8 Nov 1 00:18:49.138167 waagent[1670]: 2025-11-01T00:18:49.138119Z INFO ExtHandler ExtHandler Python: 3.9.16 Nov 1 00:18:49.138402 waagent[1670]: 2025-11-01T00:18:49.138357Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Nov 1 00:18:49.153112 waagent[1670]: 2025-11-01T00:18:49.152994Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.8; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; Arch: aarch64; systemd: True; systemd_version: systemd 252 (252); LISDrivers: Absent; logrotate: logrotate 3.20.1; Nov 1 00:18:49.153695 waagent[1670]: 2025-11-01T00:18:49.153643Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:49.153968 waagent[1670]: 2025-11-01T00:18:49.153918Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:49.154284 waagent[1670]: 2025-11-01T00:18:49.154235Z INFO ExtHandler ExtHandler Initializing the goal state... Nov 1 00:18:49.168652 waagent[1670]: 2025-11-01T00:18:49.168549Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Nov 1 00:18:49.178491 waagent[1670]: 2025-11-01T00:18:49.178430Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.177 Nov 1 00:18:49.179795 waagent[1670]: 2025-11-01T00:18:49.179738Z INFO ExtHandler Nov 1 00:18:49.180087 waagent[1670]: 2025-11-01T00:18:49.180037Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: df438157-b904-4dcc-9957-5cc9f17d9011 eTag: 140638732840560620 source: Fabric] Nov 1 00:18:49.180992 waagent[1670]: 2025-11-01T00:18:49.180938Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Nov 1 00:18:49.182351 waagent[1670]: 2025-11-01T00:18:49.182296Z INFO ExtHandler Nov 1 00:18:49.182596 waagent[1670]: 2025-11-01T00:18:49.182549Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Nov 1 00:18:49.192477 waagent[1670]: 2025-11-01T00:18:49.192420Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Nov 1 00:18:49.193263 waagent[1670]: 2025-11-01T00:18:49.193217Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Nov 1 00:18:49.214143 waagent[1670]: 2025-11-01T00:18:49.214080Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Nov 1 00:18:49.279359 waagent[1670]: 2025-11-01T00:18:49.279228Z INFO ExtHandler Downloaded certificate {'thumbprint': '8DA8A3CD2C51BBF55D5D9BDFA3B7216689B553E3', 'hasPrivateKey': True} Nov 1 00:18:49.281029 waagent[1670]: 2025-11-01T00:18:49.280967Z INFO ExtHandler Fetch goal state from WireServer completed Nov 1 00:18:49.282091 waagent[1670]: 2025-11-01T00:18:49.282036Z INFO ExtHandler ExtHandler Goal state initialization completed. Nov 1 00:18:49.303509 waagent[1670]: 2025-11-01T00:18:49.303390Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) Nov 1 00:18:49.312143 waagent[1670]: 2025-11-01T00:18:49.312035Z INFO ExtHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:18:49.316179 waagent[1670]: 2025-11-01T00:18:49.316073Z INFO ExtHandler ExtHandler Did not find a legacy firewall rule: ['iptables', '-w', '-t', 'security', '-C', 'OUTPUT', '-d', '168.63.129.16', '-p', 'tcp', '-m', 'conntrack', '--ctstate', 'INVALID,NEW', '-j', 'ACCEPT'] Nov 1 00:18:49.316561 waagent[1670]: 2025-11-01T00:18:49.316510Z INFO ExtHandler ExtHandler Checking state of the firewall Nov 1 00:18:49.341809 waagent[1670]: 2025-11-01T00:18:49.341688Z WARNING ExtHandler ExtHandler The firewall rules for Azure Fabric are not setup correctly (the environment thread will fix it): The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Current state: Nov 1 00:18:49.341809 waagent[1670]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.341809 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.341809 waagent[1670]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.341809 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.341809 waagent[1670]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.341809 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.341809 waagent[1670]: 111 12183 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:18:49.341809 waagent[1670]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:18:49.343376 waagent[1670]: 2025-11-01T00:18:49.343315Z INFO ExtHandler ExtHandler Setting up persistent firewall rules Nov 1 00:18:49.346511 waagent[1670]: 2025-11-01T00:18:49.346405Z INFO ExtHandler ExtHandler The firewalld service is not present on the system Nov 1 00:18:49.347123 waagent[1670]: 2025-11-01T00:18:49.347067Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up /lib/systemd/system/waagent-network-setup.service Nov 1 00:18:49.347620 waagent[1670]: 2025-11-01T00:18:49.347567Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Nov 1 00:18:49.355835 waagent[1670]: 2025-11-01T00:18:49.355778Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Nov 1 00:18:49.356592 waagent[1670]: 2025-11-01T00:18:49.356535Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Nov 1 00:18:49.365408 waagent[1670]: 2025-11-01T00:18:49.365326Z INFO ExtHandler ExtHandler WALinuxAgent-2.15.0.1 running as process 1670 Nov 1 00:18:49.369054 waagent[1670]: 2025-11-01T00:18:49.368973Z INFO ExtHandler ExtHandler [CGI] Cgroups is not currently supported on ['flatcar', '3510.3.8', '', 'Flatcar Container Linux by Kinvolk'] Nov 1 00:18:49.370122 waagent[1670]: 2025-11-01T00:18:49.370064Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case cgroup usage went from enabled to disabled Nov 1 00:18:49.371184 waagent[1670]: 2025-11-01T00:18:49.371130Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Nov 1 00:18:49.374163 waagent[1670]: 2025-11-01T00:18:49.374107Z INFO ExtHandler ExtHandler Signing certificate written to /var/lib/waagent/microsoft_root_certificate.pem Nov 1 00:18:49.374601 waagent[1670]: 2025-11-01T00:18:49.374549Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Nov 1 00:18:49.376520 waagent[1670]: 2025-11-01T00:18:49.376454Z INFO ExtHandler ExtHandler Starting env monitor service. Nov 1 00:18:49.376805 waagent[1670]: 2025-11-01T00:18:49.376740Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:49.377460 waagent[1670]: 2025-11-01T00:18:49.377390Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:49.378082 waagent[1670]: 2025-11-01T00:18:49.378018Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Nov 1 00:18:49.378582 waagent[1670]: 2025-11-01T00:18:49.378516Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Nov 1 00:18:49.379430 waagent[1670]: 2025-11-01T00:18:49.379272Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Nov 1 00:18:49.379650 waagent[1670]: 2025-11-01T00:18:49.379594Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Nov 1 00:18:49.380086 waagent[1670]: 2025-11-01T00:18:49.380019Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Nov 1 00:18:49.380086 waagent[1670]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Nov 1 00:18:49.380086 waagent[1670]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Nov 1 00:18:49.380086 waagent[1670]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Nov 1 00:18:49.380086 waagent[1670]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:49.380086 waagent[1670]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:49.380086 waagent[1670]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Nov 1 00:18:49.380421 waagent[1670]: 2025-11-01T00:18:49.380364Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Nov 1 00:18:49.381418 waagent[1670]: 2025-11-01T00:18:49.381341Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Nov 1 00:18:49.383609 waagent[1670]: 2025-11-01T00:18:49.383503Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Nov 1 00:18:49.384064 waagent[1670]: 2025-11-01T00:18:49.383988Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Nov 1 00:18:49.384430 waagent[1670]: 2025-11-01T00:18:49.384362Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Nov 1 00:18:49.386921 waagent[1670]: 2025-11-01T00:18:49.386796Z INFO EnvHandler ExtHandler Configure routes Nov 1 00:18:49.387676 waagent[1670]: 2025-11-01T00:18:49.387548Z INFO EnvHandler ExtHandler Gateway:None Nov 1 00:18:49.393430 waagent[1670]: 2025-11-01T00:18:49.393357Z INFO EnvHandler ExtHandler Routes:None Nov 1 00:18:49.396178 waagent[1670]: 2025-11-01T00:18:49.396112Z INFO MonitorHandler ExtHandler Network interfaces: Nov 1 00:18:49.396178 waagent[1670]: Executing ['ip', '-a', '-o', 'link']: Nov 1 00:18:49.396178 waagent[1670]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Nov 1 00:18:49.396178 waagent[1670]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:f8:85 brd ff:ff:ff:ff:ff:ff Nov 1 00:18:49.396178 waagent[1670]: 3: enP48509s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:06:f8:85 brd ff:ff:ff:ff:ff:ff\ altname enP48509p0s2 Nov 1 00:18:49.396178 waagent[1670]: Executing ['ip', '-4', '-a', '-o', 'address']: Nov 1 00:18:49.396178 waagent[1670]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Nov 1 00:18:49.396178 waagent[1670]: 2: eth0 inet 10.200.20.24/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Nov 1 00:18:49.396178 waagent[1670]: Executing ['ip', '-6', '-a', '-o', 'address']: Nov 1 00:18:49.396178 waagent[1670]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Nov 1 00:18:49.396178 waagent[1670]: 2: eth0 inet6 fe80::20d:3aff:fe06:f885/64 scope link \ valid_lft forever preferred_lft forever Nov 1 00:18:49.404426 waagent[1670]: 2025-11-01T00:18:49.404343Z INFO ExtHandler ExtHandler Downloading agent manifest Nov 1 00:18:49.428645 waagent[1670]: 2025-11-01T00:18:49.428469Z INFO ExtHandler ExtHandler Nov 1 00:18:49.431250 waagent[1670]: 2025-11-01T00:18:49.431161Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 8eb0474e-f900-4709-9295-52b197bc61c3 correlation 6a157a2f-499c-4f8c-a1f5-5e7fac9fc369 created: 2025-11-01T00:17:59.505150Z] Nov 1 00:18:49.434232 waagent[1670]: 2025-11-01T00:18:49.434150Z INFO EnvHandler ExtHandler Using iptables [version 1.8.8] to manage firewall rules Nov 1 00:18:49.436081 waagent[1670]: 2025-11-01T00:18:49.436002Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Nov 1 00:18:49.441636 waagent[1670]: 2025-11-01T00:18:49.441543Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 13 ms] Nov 1 00:18:49.467810 waagent[1670]: 2025-11-01T00:18:49.467726Z WARNING EnvHandler ExtHandler The firewall is not configured correctly. The following rules are missing: ['ACCEPT DNS'] due to: ['iptables: Bad rule (does a matching rule exist in that chain?).\n']. Will reset it. Current state: Nov 1 00:18:49.467810 waagent[1670]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.467810 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.467810 waagent[1670]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.467810 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.467810 waagent[1670]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.467810 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.467810 waagent[1670]: 138 15207 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:18:49.467810 waagent[1670]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:18:49.499598 waagent[1670]: 2025-11-01T00:18:49.499522Z INFO ExtHandler ExtHandler Looking for existing remote access users. Nov 1 00:18:49.504975 waagent[1670]: 2025-11-01T00:18:49.504849Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.15.0.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: FD69E591-30B2-424A-B0FA-8863E976CBD1;UpdateGSErrors: 0;AutoUpdate: 1;UpdateMode: SelfUpdate;] Nov 1 00:18:49.544674 waagent[1670]: 2025-11-01T00:18:49.544553Z INFO EnvHandler ExtHandler The firewall was setup successfully: Nov 1 00:18:49.544674 waagent[1670]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.544674 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.544674 waagent[1670]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.544674 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.544674 waagent[1670]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Nov 1 00:18:49.544674 waagent[1670]: pkts bytes target prot opt in out source destination Nov 1 00:18:49.544674 waagent[1670]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Nov 1 00:18:49.544674 waagent[1670]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Nov 1 00:18:49.544674 waagent[1670]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Nov 1 00:18:51.076869 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Nov 1 00:18:51.077065 systemd[1]: Stopped kubelet.service. Nov 1 00:18:51.078438 systemd[1]: Starting kubelet.service... Nov 1 00:18:51.173168 systemd[1]: Started kubelet.service. Nov 1 00:18:51.270112 kubelet[1720]: E1101 00:18:51.270054 1720 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:18:51.272898 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:18:51.273018 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:01.327022 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Nov 1 00:19:01.327189 systemd[1]: Stopped kubelet.service. Nov 1 00:19:01.328525 systemd[1]: Starting kubelet.service... Nov 1 00:19:01.421922 systemd[1]: Started kubelet.service. Nov 1 00:19:01.514809 kubelet[1729]: E1101 00:19:01.514768 1729 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:01.517007 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:01.517128 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:11.577004 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Nov 1 00:19:11.577171 systemd[1]: Stopped kubelet.service. Nov 1 00:19:11.578580 systemd[1]: Starting kubelet.service... Nov 1 00:19:11.669673 systemd[1]: Started kubelet.service. Nov 1 00:19:11.704958 kubelet[1738]: E1101 00:19:11.704918 1738 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:11.707070 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:11.707189 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:15.529412 systemd[1]: Created slice system-sshd.slice. Nov 1 00:19:15.530930 systemd[1]: Started sshd@0-10.200.20.24:22-10.200.16.10:45138.service. Nov 1 00:19:16.004119 sshd[1745]: Accepted publickey for core from 10.200.16.10 port 45138 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:19:16.013035 sshd[1745]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:19:16.016792 systemd-logind[1464]: New session 3 of user core. Nov 1 00:19:16.017230 systemd[1]: Started session-3.scope. Nov 1 00:19:16.375293 systemd[1]: Started sshd@1-10.200.20.24:22-10.200.16.10:45140.service. Nov 1 00:19:16.784965 sshd[1750]: Accepted publickey for core from 10.200.16.10 port 45140 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:19:16.786089 sshd[1750]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:19:16.789797 systemd-logind[1464]: New session 4 of user core. Nov 1 00:19:16.790270 systemd[1]: Started session-4.scope. Nov 1 00:19:17.092726 sshd[1750]: pam_unix(sshd:session): session closed for user core Nov 1 00:19:17.095185 systemd[1]: sshd@1-10.200.20.24:22-10.200.16.10:45140.service: Deactivated successfully. Nov 1 00:19:17.095863 systemd[1]: session-4.scope: Deactivated successfully. Nov 1 00:19:17.096418 systemd-logind[1464]: Session 4 logged out. Waiting for processes to exit. Nov 1 00:19:17.097363 systemd-logind[1464]: Removed session 4. Nov 1 00:19:17.163478 systemd[1]: Started sshd@2-10.200.20.24:22-10.200.16.10:45148.service. Nov 1 00:19:17.574818 sshd[1756]: Accepted publickey for core from 10.200.16.10 port 45148 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:19:17.576471 sshd[1756]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:19:17.580530 systemd[1]: Started session-5.scope. Nov 1 00:19:17.581079 systemd-logind[1464]: New session 5 of user core. Nov 1 00:19:17.881105 sshd[1756]: pam_unix(sshd:session): session closed for user core Nov 1 00:19:17.883785 systemd[1]: sshd@2-10.200.20.24:22-10.200.16.10:45148.service: Deactivated successfully. Nov 1 00:19:17.884470 systemd[1]: session-5.scope: Deactivated successfully. Nov 1 00:19:17.884987 systemd-logind[1464]: Session 5 logged out. Waiting for processes to exit. Nov 1 00:19:17.885779 systemd-logind[1464]: Removed session 5. Nov 1 00:19:17.950116 systemd[1]: Started sshd@3-10.200.20.24:22-10.200.16.10:45162.service. Nov 1 00:19:18.362131 sshd[1762]: Accepted publickey for core from 10.200.16.10 port 45162 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:19:18.363421 sshd[1762]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:19:18.367590 systemd[1]: Started session-6.scope. Nov 1 00:19:18.367921 systemd-logind[1464]: New session 6 of user core. Nov 1 00:19:18.673323 sshd[1762]: pam_unix(sshd:session): session closed for user core Nov 1 00:19:18.676074 systemd[1]: sshd@3-10.200.20.24:22-10.200.16.10:45162.service: Deactivated successfully. Nov 1 00:19:18.676732 systemd[1]: session-6.scope: Deactivated successfully. Nov 1 00:19:18.677264 systemd-logind[1464]: Session 6 logged out. Waiting for processes to exit. Nov 1 00:19:18.678116 systemd-logind[1464]: Removed session 6. Nov 1 00:19:18.741680 systemd[1]: Started sshd@4-10.200.20.24:22-10.200.16.10:45176.service. Nov 1 00:19:19.150917 sshd[1768]: Accepted publickey for core from 10.200.16.10 port 45176 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:19:19.152183 sshd[1768]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:19:19.156021 systemd-logind[1464]: New session 7 of user core. Nov 1 00:19:19.156438 systemd[1]: Started session-7.scope. Nov 1 00:19:19.479574 sudo[1771]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Nov 1 00:19:19.479791 sudo[1771]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:19:19.502010 dbus-daemon[1450]: avc: received setenforce notice (enforcing=1) Nov 1 00:19:19.502931 sudo[1771]: pam_unix(sudo:session): session closed for user root Nov 1 00:19:19.585082 sshd[1768]: pam_unix(sshd:session): session closed for user core Nov 1 00:19:19.588102 systemd[1]: sshd@4-10.200.20.24:22-10.200.16.10:45176.service: Deactivated successfully. Nov 1 00:19:19.588863 systemd[1]: session-7.scope: Deactivated successfully. Nov 1 00:19:19.589451 systemd-logind[1464]: Session 7 logged out. Waiting for processes to exit. Nov 1 00:19:19.590490 systemd-logind[1464]: Removed session 7. Nov 1 00:19:19.652966 systemd[1]: Started sshd@5-10.200.20.24:22-10.200.16.10:45186.service. Nov 1 00:19:20.062230 sshd[1775]: Accepted publickey for core from 10.200.16.10 port 45186 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:19:20.063629 sshd[1775]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:19:20.067479 systemd-logind[1464]: New session 8 of user core. Nov 1 00:19:20.067969 systemd[1]: Started session-8.scope. Nov 1 00:19:20.298994 sudo[1779]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Nov 1 00:19:20.299208 sudo[1779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:19:20.301729 sudo[1779]: pam_unix(sudo:session): session closed for user root Nov 1 00:19:20.306207 sudo[1778]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Nov 1 00:19:20.306408 sudo[1778]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:19:20.315052 systemd[1]: Stopping audit-rules.service... Nov 1 00:19:20.315000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:19:20.320275 kernel: kauditd_printk_skb: 143 callbacks suppressed Nov 1 00:19:20.320363 kernel: audit: type=1305 audit(1761956360.315:225): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Nov 1 00:19:20.315000 audit[1782]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcce6c0a0 a2=420 a3=0 items=0 ppid=1 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:20.354932 kernel: audit: type=1300 audit(1761956360.315:225): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcce6c0a0 a2=420 a3=0 items=0 ppid=1 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:20.355059 auditctl[1782]: No rules Nov 1 00:19:20.331573 systemd[1]: audit-rules.service: Deactivated successfully. Nov 1 00:19:20.331743 systemd[1]: Stopped audit-rules.service. Nov 1 00:19:20.354850 systemd[1]: Starting audit-rules.service... Nov 1 00:19:20.315000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:19:20.363735 kernel: audit: type=1327 audit(1761956360.315:225): proctitle=2F7362696E2F617564697463746C002D44 Nov 1 00:19:20.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.381672 augenrules[1799]: No rules Nov 1 00:19:20.377387 sudo[1778]: pam_unix(sudo:session): session closed for user root Nov 1 00:19:20.376304 systemd[1]: Finished audit-rules.service. Nov 1 00:19:20.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.399194 kernel: audit: type=1131 audit(1761956360.330:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.399268 kernel: audit: type=1130 audit(1761956360.373:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.399293 kernel: audit: type=1106 audit(1761956360.373:228): pid=1778 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.373000 audit[1778]: USER_END pid=1778 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.373000 audit[1778]: CRED_DISP pid=1778 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.434267 kernel: audit: type=1104 audit(1761956360.373:229): pid=1778 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.469946 sshd[1775]: pam_unix(sshd:session): session closed for user core Nov 1 00:19:20.470000 audit[1775]: USER_END pid=1775 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:20.472948 systemd[1]: session-8.scope: Deactivated successfully. Nov 1 00:19:20.473952 systemd[1]: sshd@5-10.200.20.24:22-10.200.16.10:45186.service: Deactivated successfully. Nov 1 00:19:20.476947 systemd-logind[1464]: Session 8 logged out. Waiting for processes to exit. Nov 1 00:19:20.479237 systemd-logind[1464]: Removed session 8. Nov 1 00:19:20.470000 audit[1775]: CRED_DISP pid=1775 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:20.511985 kernel: audit: type=1106 audit(1761956360.470:230): pid=1775 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:20.512043 kernel: audit: type=1104 audit(1761956360.470:231): pid=1775 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:20.512065 kernel: audit: type=1131 audit(1761956360.470:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.24:22-10.200.16.10:45186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.24:22-10.200.16.10:45186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.539113 systemd[1]: Started sshd@6-10.200.20.24:22-10.200.16.10:60428.service. Nov 1 00:19:20.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.24:22-10.200.16.10:60428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:20.947000 audit[1805]: USER_ACCT pid=1805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:20.948306 sshd[1805]: Accepted publickey for core from 10.200.16.10 port 60428 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:19:20.948000 audit[1805]: CRED_ACQ pid=1805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:20.948000 audit[1805]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3629cd0 a2=3 a3=1 items=0 ppid=1 pid=1805 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:20.948000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:19:20.950502 sshd[1805]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:19:20.954756 systemd[1]: Started session-9.scope. Nov 1 00:19:20.955100 systemd-logind[1464]: New session 9 of user core. Nov 1 00:19:20.958000 audit[1805]: USER_START pid=1805 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:20.959000 audit[1807]: CRED_ACQ pid=1807 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:19:21.183000 audit[1808]: USER_ACCT pid=1808 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:21.184829 sudo[1808]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Nov 1 00:19:21.184000 audit[1808]: CRED_REFR pid=1808 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:21.185084 sudo[1808]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Nov 1 00:19:21.185000 audit[1808]: USER_START pid=1808 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:19:21.211701 systemd[1]: Starting docker.service... Nov 1 00:19:21.251189 env[1819]: time="2025-11-01T00:19:21.251140496Z" level=info msg="Starting up" Nov 1 00:19:21.263761 env[1819]: time="2025-11-01T00:19:21.263726120Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:19:21.263920 env[1819]: time="2025-11-01T00:19:21.263904082Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:19:21.264000 env[1819]: time="2025-11-01T00:19:21.263984602Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:19:21.264052 env[1819]: time="2025-11-01T00:19:21.264040763Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:19:21.266113 env[1819]: time="2025-11-01T00:19:21.266084260Z" level=info msg="parsed scheme: \"unix\"" module=grpc Nov 1 00:19:21.266113 env[1819]: time="2025-11-01T00:19:21.266105980Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Nov 1 00:19:21.266220 env[1819]: time="2025-11-01T00:19:21.266123460Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Nov 1 00:19:21.266220 env[1819]: time="2025-11-01T00:19:21.266134220Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Nov 1 00:19:21.351666 env[1819]: time="2025-11-01T00:19:21.351628409Z" level=info msg="Loading containers: start." Nov 1 00:19:21.392000 audit[1846]: NETFILTER_CFG table=nat:9 family=2 entries=2 op=nft_register_chain pid=1846 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.392000 audit[1846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd50e50c0 a2=0 a3=1 items=0 ppid=1819 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.392000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Nov 1 00:19:21.394000 audit[1848]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1848 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.394000 audit[1848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffdbd9bbd0 a2=0 a3=1 items=0 ppid=1819 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.394000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Nov 1 00:19:21.396000 audit[1850]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1850 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.396000 audit[1850]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffb2089b0 a2=0 a3=1 items=0 ppid=1819 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.396000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:19:21.399000 audit[1852]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1852 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.399000 audit[1852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc7a1ce90 a2=0 a3=1 items=0 ppid=1819 pid=1852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.399000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:19:21.401000 audit[1854]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1854 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.401000 audit[1854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc8095e00 a2=0 a3=1 items=0 ppid=1819 pid=1854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.401000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Nov 1 00:19:21.403000 audit[1856]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=1856 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.403000 audit[1856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdb334ae0 a2=0 a3=1 items=0 ppid=1819 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.403000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Nov 1 00:19:21.429000 audit[1858]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_chain pid=1858 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.429000 audit[1858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe0d6b4d0 a2=0 a3=1 items=0 ppid=1819 pid=1858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.429000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Nov 1 00:19:21.431000 audit[1860]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1860 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.431000 audit[1860]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffec7fbba0 a2=0 a3=1 items=0 ppid=1819 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.431000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Nov 1 00:19:21.433000 audit[1862]: NETFILTER_CFG table=filter:17 family=2 entries=2 op=nft_register_chain pid=1862 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.433000 audit[1862]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffdb808d30 a2=0 a3=1 items=0 ppid=1819 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.433000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:19:21.452000 audit[1866]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_unregister_rule pid=1866 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.452000 audit[1866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd5f16490 a2=0 a3=1 items=0 ppid=1819 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.452000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:19:21.459000 audit[1867]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1867 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.459000 audit[1867]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc753d140 a2=0 a3=1 items=0 ppid=1819 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.459000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:19:21.489907 kernel: Initializing XFRM netlink socket Nov 1 00:19:21.506128 env[1819]: time="2025-11-01T00:19:21.506082970Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Nov 1 00:19:21.551000 audit[1875]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.551000 audit[1875]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffde4126f0 a2=0 a3=1 items=0 ppid=1819 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.551000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Nov 1 00:19:21.570000 audit[1878]: NETFILTER_CFG table=nat:21 family=2 entries=1 op=nft_register_rule pid=1878 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.570000 audit[1878]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffffa737be0 a2=0 a3=1 items=0 ppid=1819 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.570000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Nov 1 00:19:21.573000 audit[1881]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.573000 audit[1881]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdaa9c5d0 a2=0 a3=1 items=0 ppid=1819 pid=1881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.573000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Nov 1 00:19:21.575000 audit[1883]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1883 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.575000 audit[1883]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd083c890 a2=0 a3=1 items=0 ppid=1819 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.575000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Nov 1 00:19:21.577000 audit[1885]: NETFILTER_CFG table=nat:24 family=2 entries=2 op=nft_register_chain pid=1885 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.577000 audit[1885]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcc576940 a2=0 a3=1 items=0 ppid=1819 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.577000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Nov 1 00:19:21.579000 audit[1887]: NETFILTER_CFG table=nat:25 family=2 entries=2 op=nft_register_chain pid=1887 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.579000 audit[1887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc9bb4e40 a2=0 a3=1 items=0 ppid=1819 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.579000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Nov 1 00:19:21.581000 audit[1889]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.581000 audit[1889]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff1c0bf90 a2=0 a3=1 items=0 ppid=1819 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.581000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Nov 1 00:19:21.583000 audit[1891]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.583000 audit[1891]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe0e5f640 a2=0 a3=1 items=0 ppid=1819 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.583000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Nov 1 00:19:21.585000 audit[1893]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.585000 audit[1893]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffbe2d5b0 a2=0 a3=1 items=0 ppid=1819 pid=1893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.585000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Nov 1 00:19:21.587000 audit[1895]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1895 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.587000 audit[1895]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffffd402e20 a2=0 a3=1 items=0 ppid=1819 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.587000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Nov 1 00:19:21.589000 audit[1897]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.589000 audit[1897]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc0f119e0 a2=0 a3=1 items=0 ppid=1819 pid=1897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.589000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Nov 1 00:19:21.591058 systemd-networkd[1625]: docker0: Link UP Nov 1 00:19:21.611000 audit[1901]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_unregister_rule pid=1901 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.611000 audit[1901]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce92c8a0 a2=0 a3=1 items=0 ppid=1819 pid=1901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.611000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:19:21.618000 audit[1902]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=1902 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:21.618000 audit[1902]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdb037120 a2=0 a3=1 items=0 ppid=1819 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:21.618000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Nov 1 00:19:21.620298 env[1819]: time="2025-11-01T00:19:21.620268197Z" level=info msg="Loading containers: done." Nov 1 00:19:21.656638 env[1819]: time="2025-11-01T00:19:21.656587578Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Nov 1 00:19:21.656813 env[1819]: time="2025-11-01T00:19:21.656776420Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Nov 1 00:19:21.656926 env[1819]: time="2025-11-01T00:19:21.656906101Z" level=info msg="Daemon has completed initialization" Nov 1 00:19:21.692985 systemd[1]: Started docker.service. Nov 1 00:19:21.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:21.696388 env[1819]: time="2025-11-01T00:19:21.696336148Z" level=info msg="API listen on /run/docker.sock" Nov 1 00:19:21.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:21.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:21.826857 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Nov 1 00:19:21.827024 systemd[1]: Stopped kubelet.service. Nov 1 00:19:21.828402 systemd[1]: Starting kubelet.service... Nov 1 00:19:21.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:21.922193 systemd[1]: Started kubelet.service. Nov 1 00:19:21.956243 kubelet[1939]: E1101 00:19:21.956195 1939 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:21.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:21.958185 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:21.958313 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:23.333426 env[1484]: time="2025-11-01T00:19:23.333380836Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\"" Nov 1 00:19:23.570852 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Nov 1 00:19:24.166055 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4218413648.mount: Deactivated successfully. Nov 1 00:19:24.648909 update_engine[1468]: I1101 00:19:24.648586 1468 update_attempter.cc:509] Updating boot flags... Nov 1 00:19:25.808324 env[1484]: time="2025-11-01T00:19:25.808271949Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:25.814625 env[1484]: time="2025-11-01T00:19:25.814575190Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:25.818637 env[1484]: time="2025-11-01T00:19:25.818598175Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:25.823045 env[1484]: time="2025-11-01T00:19:25.823002003Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6df11cc2ad9679b1117be34d3a0230add88bc0a08fd7a3ebc26b680575e8de97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:25.823937 env[1484]: time="2025-11-01T00:19:25.823907009Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.9\" returns image reference \"sha256:02ea53851f07db91ed471dab1ab11541f5c294802371cd8f0cfd423cd5c71002\"" Nov 1 00:19:25.824506 env[1484]: time="2025-11-01T00:19:25.824481813Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\"" Nov 1 00:19:27.342336 env[1484]: time="2025-11-01T00:19:27.342271831Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:27.348121 env[1484]: time="2025-11-01T00:19:27.348074784Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:27.352166 env[1484]: time="2025-11-01T00:19:27.352112127Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:27.357839 env[1484]: time="2025-11-01T00:19:27.357788959Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:243c4b8e3bce271fcb1b78008ab996ab6976b1a20096deac08338fcd17979922,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:27.358532 env[1484]: time="2025-11-01T00:19:27.358503163Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.9\" returns image reference \"sha256:f0bcbad5082c944520b370596a2384affda710b9d7daf84e8a48352699af8e4b\"" Nov 1 00:19:27.359088 env[1484]: time="2025-11-01T00:19:27.359065126Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\"" Nov 1 00:19:28.670180 env[1484]: time="2025-11-01T00:19:28.670109594Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:28.676767 env[1484]: time="2025-11-01T00:19:28.676726909Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:28.680631 env[1484]: time="2025-11-01T00:19:28.680585650Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:28.684441 env[1484]: time="2025-11-01T00:19:28.684397550Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:50c49520dbd0e8b4076b6a5c77d8014df09ea3d59a73e8bafd2678d51ebb92d5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:28.685275 env[1484]: time="2025-11-01T00:19:28.685248954Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.9\" returns image reference \"sha256:1d625baf81b59592006d97a6741bc947698ed222b612ac10efa57b7aa96d2a27\"" Nov 1 00:19:28.685821 env[1484]: time="2025-11-01T00:19:28.685792317Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\"" Nov 1 00:19:30.316398 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1497953757.mount: Deactivated successfully. Nov 1 00:19:30.809915 env[1484]: time="2025-11-01T00:19:30.809850083Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:30.816876 env[1484]: time="2025-11-01T00:19:30.816825115Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:30.821373 env[1484]: time="2025-11-01T00:19:30.821323776Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:30.829040 env[1484]: time="2025-11-01T00:19:30.829004531Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:886af02535dc34886e4618b902f8c140d89af57233a245621d29642224516064,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:30.829422 env[1484]: time="2025-11-01T00:19:30.829394013Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.9\" returns image reference \"sha256:72b57ec14d31e8422925ef4c3eff44822cdc04a11fd30d13824f1897d83a16d4\"" Nov 1 00:19:30.829918 env[1484]: time="2025-11-01T00:19:30.829872575Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Nov 1 00:19:31.479727 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1760310550.mount: Deactivated successfully. Nov 1 00:19:32.076876 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 5. Nov 1 00:19:32.077068 systemd[1]: Stopped kubelet.service. Nov 1 00:19:32.099275 kernel: kauditd_printk_skb: 88 callbacks suppressed Nov 1 00:19:32.099332 kernel: audit: type=1130 audit(1761956372.076:271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:32.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:32.078833 systemd[1]: Starting kubelet.service... Nov 1 00:19:32.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:32.116908 kernel: audit: type=1131 audit(1761956372.076:272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:32.180280 systemd[1]: Started kubelet.service. Nov 1 00:19:32.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:32.199917 kernel: audit: type=1130 audit(1761956372.179:273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:32.493814 kernel: audit: type=1131 audit(1761956372.265:274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:32.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:32.266155 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:32.494684 kubelet[1988]: E1101 00:19:32.264666 1988 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:32.266272 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:33.121101 env[1484]: time="2025-11-01T00:19:33.121042136Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.128812 env[1484]: time="2025-11-01T00:19:33.128766886Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.135805 env[1484]: time="2025-11-01T00:19:33.135761753Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.141682 env[1484]: time="2025-11-01T00:19:33.141643735Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.142774 env[1484]: time="2025-11-01T00:19:33.142733299Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Nov 1 00:19:33.144490 env[1484]: time="2025-11-01T00:19:33.144450266Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Nov 1 00:19:33.709821 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1293014431.mount: Deactivated successfully. Nov 1 00:19:33.735661 env[1484]: time="2025-11-01T00:19:33.735601246Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.743849 env[1484]: time="2025-11-01T00:19:33.743809837Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.747597 env[1484]: time="2025-11-01T00:19:33.747562132Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.751532 env[1484]: time="2025-11-01T00:19:33.751496987Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:33.751928 env[1484]: time="2025-11-01T00:19:33.751898588Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Nov 1 00:19:33.752406 env[1484]: time="2025-11-01T00:19:33.752374310Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Nov 1 00:19:35.213325 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1890604674.mount: Deactivated successfully. Nov 1 00:19:37.705459 env[1484]: time="2025-11-01T00:19:37.705293836Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:37.715016 env[1484]: time="2025-11-01T00:19:37.714974384Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:37.720354 env[1484]: time="2025-11-01T00:19:37.720316840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:37.724283 env[1484]: time="2025-11-01T00:19:37.724242811Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:37.725021 env[1484]: time="2025-11-01T00:19:37.724986574Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Nov 1 00:19:42.326867 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 6. Nov 1 00:19:42.327062 systemd[1]: Stopped kubelet.service. Nov 1 00:19:42.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:42.328500 systemd[1]: Starting kubelet.service... Nov 1 00:19:42.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:42.363393 kernel: audit: type=1130 audit(1761956382.326:275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:42.363489 kernel: audit: type=1131 audit(1761956382.326:276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:42.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:42.619982 systemd[1]: Started kubelet.service. Nov 1 00:19:42.644914 kernel: audit: type=1130 audit(1761956382.619:277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:42.690334 kubelet[2018]: E1101 00:19:42.688831 2018 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Nov 1 00:19:42.691793 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Nov 1 00:19:42.691938 systemd[1]: kubelet.service: Failed with result 'exit-code'. Nov 1 00:19:42.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:42.711903 kernel: audit: type=1131 audit(1761956382.691:278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Nov 1 00:19:44.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:44.060554 systemd[1]: Stopped kubelet.service. Nov 1 00:19:44.064749 systemd[1]: Starting kubelet.service... Nov 1 00:19:44.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:44.111608 kernel: audit: type=1130 audit(1761956384.059:279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:44.111725 kernel: audit: type=1131 audit(1761956384.059:280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:44.128924 systemd[1]: Reloading. Nov 1 00:19:44.219260 /usr/lib/systemd/system-generators/torcx-generator[2049]: time="2025-11-01T00:19:44Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:19:44.219292 /usr/lib/systemd/system-generators/torcx-generator[2049]: time="2025-11-01T00:19:44Z" level=info msg="torcx already run" Nov 1 00:19:44.304074 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:19:44.304238 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:19:44.320027 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.427255 kernel: audit: type=1400 audit(1761956384.392:281): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.427363 kernel: audit: type=1400 audit(1761956384.392:282): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444449 kernel: audit: type=1400 audit(1761956384.392:283): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462895 kernel: audit: type=1400 audit(1761956384.392:284): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit: BPF prog-id=47 op=LOAD Nov 1 00:19:44.410000 audit: BPF prog-id=41 op=UNLOAD Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit: BPF prog-id=48 op=LOAD Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit: BPF prog-id=49 op=LOAD Nov 1 00:19:44.426000 audit: BPF prog-id=42 op=UNLOAD Nov 1 00:19:44.426000 audit: BPF prog-id=43 op=UNLOAD Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit: BPF prog-id=50 op=LOAD Nov 1 00:19:44.444000 audit: BPF prog-id=30 op=UNLOAD Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit: BPF prog-id=51 op=LOAD Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit: BPF prog-id=52 op=LOAD Nov 1 00:19:44.462000 audit: BPF prog-id=31 op=UNLOAD Nov 1 00:19:44.462000 audit: BPF prog-id=32 op=UNLOAD Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.462000 audit: BPF prog-id=53 op=LOAD Nov 1 00:19:44.462000 audit: BPF prog-id=44 op=UNLOAD Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.463000 audit: BPF prog-id=54 op=LOAD Nov 1 00:19:44.463000 audit: BPF prog-id=40 op=UNLOAD Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.466000 audit: BPF prog-id=55 op=LOAD Nov 1 00:19:44.466000 audit: BPF prog-id=46 op=UNLOAD Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit: BPF prog-id=56 op=LOAD Nov 1 00:19:44.467000 audit: BPF prog-id=39 op=UNLOAD Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit: BPF prog-id=57 op=LOAD Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.467000 audit: BPF prog-id=58 op=LOAD Nov 1 00:19:44.467000 audit: BPF prog-id=34 op=UNLOAD Nov 1 00:19:44.467000 audit: BPF prog-id=35 op=UNLOAD Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit: BPF prog-id=59 op=LOAD Nov 1 00:19:44.468000 audit: BPF prog-id=36 op=UNLOAD Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit: BPF prog-id=60 op=LOAD Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:44.468000 audit: BPF prog-id=61 op=LOAD Nov 1 00:19:44.468000 audit: BPF prog-id=37 op=UNLOAD Nov 1 00:19:44.468000 audit: BPF prog-id=38 op=UNLOAD Nov 1 00:19:44.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:44.483265 systemd[1]: Started kubelet.service. Nov 1 00:19:44.487702 systemd[1]: Stopping kubelet.service... Nov 1 00:19:44.488370 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:19:44.488571 systemd[1]: Stopped kubelet.service. Nov 1 00:19:44.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:44.490331 systemd[1]: Starting kubelet.service... Nov 1 00:19:44.610656 systemd[1]: Started kubelet.service. Nov 1 00:19:44.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:44.792645 kubelet[2119]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:44.792645 kubelet[2119]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:19:44.792645 kubelet[2119]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:44.793035 kubelet[2119]: I1101 00:19:44.792698 2119 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:19:45.848814 kubelet[2119]: I1101 00:19:45.848751 2119 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:19:45.849784 kubelet[2119]: I1101 00:19:45.849751 2119 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:19:45.850295 kubelet[2119]: I1101 00:19:45.850271 2119 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:19:46.080302 kubelet[2119]: E1101 00:19:46.080266 2119 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.20.24:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:46.082099 kubelet[2119]: I1101 00:19:46.082069 2119 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:19:46.090102 kubelet[2119]: E1101 00:19:46.090056 2119 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:19:46.090102 kubelet[2119]: I1101 00:19:46.090103 2119 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:19:46.093140 kubelet[2119]: I1101 00:19:46.093114 2119 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:19:46.094256 kubelet[2119]: I1101 00:19:46.094216 2119 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:19:46.094436 kubelet[2119]: I1101 00:19:46.094257 2119 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-2788c77bd2","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:19:46.094522 kubelet[2119]: I1101 00:19:46.094444 2119 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:19:46.094522 kubelet[2119]: I1101 00:19:46.094453 2119 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:19:46.094605 kubelet[2119]: I1101 00:19:46.094586 2119 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:46.097930 kubelet[2119]: I1101 00:19:46.097902 2119 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:19:46.097993 kubelet[2119]: I1101 00:19:46.097937 2119 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:19:46.097993 kubelet[2119]: I1101 00:19:46.097957 2119 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:19:46.097993 kubelet[2119]: I1101 00:19:46.097970 2119 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:19:46.108055 kubelet[2119]: W1101 00:19:46.107257 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-2788c77bd2&limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:46.108262 kubelet[2119]: E1101 00:19:46.108233 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-2788c77bd2&limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:46.108435 kubelet[2119]: I1101 00:19:46.108421 2119 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:19:46.109003 kubelet[2119]: I1101 00:19:46.108986 2119 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:19:46.109128 kubelet[2119]: W1101 00:19:46.109117 2119 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Nov 1 00:19:46.110303 kubelet[2119]: I1101 00:19:46.110280 2119 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:19:46.110478 kubelet[2119]: I1101 00:19:46.110467 2119 server.go:1287] "Started kubelet" Nov 1 00:19:46.122709 kubelet[2119]: E1101 00:19:46.122558 2119 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.24:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.24:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-2788c77bd2.1873b9ff77d77a87 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-2788c77bd2,UID:ci-3510.3.8-n-2788c77bd2,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-2788c77bd2,},FirstTimestamp:2025-11-01 00:19:46.110405255 +0000 UTC m=+1.494157597,LastTimestamp:2025-11-01 00:19:46.110405255 +0000 UTC m=+1.494157597,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-2788c77bd2,}" Nov 1 00:19:46.122905 kubelet[2119]: W1101 00:19:46.122853 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:46.122943 kubelet[2119]: E1101 00:19:46.122921 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:46.122988 kubelet[2119]: I1101 00:19:46.122959 2119 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:19:46.125727 kubelet[2119]: I1101 00:19:46.125643 2119 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:19:46.126230 kubelet[2119]: I1101 00:19:46.126210 2119 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:19:46.127102 kubelet[2119]: I1101 00:19:46.127083 2119 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:19:46.127000 audit[2119]: AVC avc: denied { mac_admin } for pid=2119 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:46.127000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:46.127000 audit[2119]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c2d920 a1=4000cea1c8 a2=4000c2d8f0 a3=25 items=0 ppid=1 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.127000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:46.129169 kubelet[2119]: I1101 00:19:46.128964 2119 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:19:46.128000 audit[2119]: AVC avc: denied { mac_admin } for pid=2119 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:46.128000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:46.128000 audit[2119]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bda020 a1=4000cea1e0 a2=4000bf2060 a3=25 items=0 ppid=1 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.128000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:46.129459 kubelet[2119]: I1101 00:19:46.129439 2119 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:19:46.129613 kubelet[2119]: I1101 00:19:46.129599 2119 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:19:46.131419 kubelet[2119]: E1101 00:19:46.131383 2119 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:19:46.131627 kubelet[2119]: I1101 00:19:46.131601 2119 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:19:46.131000 audit[2132]: NETFILTER_CFG table=mangle:33 family=2 entries=2 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.131000 audit[2132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe0402220 a2=0 a3=1 items=0 ppid=2119 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.131000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:19:46.132000 audit[2133]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.132000 audit[2133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffcbf2040 a2=0 a3=1 items=0 ppid=2119 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.132000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:19:46.134221 kubelet[2119]: E1101 00:19:46.134174 2119 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:46.134286 kubelet[2119]: I1101 00:19:46.134247 2119 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:19:46.134468 kubelet[2119]: I1101 00:19:46.134443 2119 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:19:46.134515 kubelet[2119]: I1101 00:19:46.134500 2119 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:19:46.135111 kubelet[2119]: W1101 00:19:46.135063 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:46.135191 kubelet[2119]: E1101 00:19:46.135114 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:46.135282 kubelet[2119]: I1101 00:19:46.135261 2119 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:19:46.135364 kubelet[2119]: I1101 00:19:46.135342 2119 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:19:46.136454 kubelet[2119]: E1101 00:19:46.136412 2119 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-2788c77bd2?timeout=10s\": dial tcp 10.200.20.24:6443: connect: connection refused" interval="200ms" Nov 1 00:19:46.136541 kubelet[2119]: I1101 00:19:46.136521 2119 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:19:46.136000 audit[2135]: NETFILTER_CFG table=filter:35 family=2 entries=2 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.136000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe8b2fc80 a2=0 a3=1 items=0 ppid=2119 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.136000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:19:46.138000 audit[2137]: NETFILTER_CFG table=filter:36 family=2 entries=2 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.138000 audit[2137]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff2dbd6f0 a2=0 a3=1 items=0 ppid=2119 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:19:46.234978 kubelet[2119]: E1101 00:19:46.234942 2119 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:46.275293 kubelet[2119]: I1101 00:19:46.275264 2119 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:19:46.275293 kubelet[2119]: I1101 00:19:46.275283 2119 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:19:46.275293 kubelet[2119]: I1101 00:19:46.275302 2119 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:46.335944 kubelet[2119]: E1101 00:19:46.335905 2119 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:46.337307 kubelet[2119]: E1101 00:19:46.337275 2119 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-2788c77bd2?timeout=10s\": dial tcp 10.200.20.24:6443: connect: connection refused" interval="400ms" Nov 1 00:19:46.438223 kubelet[2119]: E1101 00:19:46.436484 2119 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:46.536895 kubelet[2119]: E1101 00:19:46.536852 2119 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:46.578000 audit[2142]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.578000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe3adbc10 a2=0 a3=1 items=0 ppid=2119 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.578000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Nov 1 00:19:46.579000 audit[2145]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.579000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcebaa7b0 a2=0 a3=1 items=0 ppid=2119 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.579000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:19:46.579000 audit[2144]: NETFILTER_CFG table=mangle:39 family=10 entries=2 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:46.579000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc2d9cda0 a2=0 a3=1 items=0 ppid=2119 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.579000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Nov 1 00:19:46.580000 audit[2146]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.580000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe00868b0 a2=0 a3=1 items=0 ppid=2119 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.580000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:19:46.581000 audit[2147]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:46.581000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffa55bc70 a2=0 a3=1 items=0 ppid=2119 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.581000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Nov 1 00:19:46.583677 kubelet[2119]: I1101 00:19:46.579486 2119 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:19:46.583677 kubelet[2119]: I1101 00:19:46.580747 2119 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:19:46.583677 kubelet[2119]: I1101 00:19:46.580769 2119 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:19:46.583677 kubelet[2119]: I1101 00:19:46.580790 2119 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:19:46.583677 kubelet[2119]: I1101 00:19:46.580796 2119 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:19:46.583677 kubelet[2119]: E1101 00:19:46.580842 2119 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:19:46.583677 kubelet[2119]: W1101 00:19:46.582239 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:46.583677 kubelet[2119]: E1101 00:19:46.582289 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:46.582000 audit[2148]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:19:46.582000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff05c2210 a2=0 a3=1 items=0 ppid=2119 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.582000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:19:46.583000 audit[2149]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:46.583000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd091cec0 a2=0 a3=1 items=0 ppid=2119 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Nov 1 00:19:46.584000 audit[2150]: NETFILTER_CFG table=filter:44 family=10 entries=2 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:19:46.584000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc1542000 a2=0 a3=1 items=0 ppid=2119 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Nov 1 00:19:46.603743 kubelet[2119]: I1101 00:19:46.603712 2119 policy_none.go:49] "None policy: Start" Nov 1 00:19:46.603743 kubelet[2119]: I1101 00:19:46.603742 2119 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:19:46.603852 kubelet[2119]: I1101 00:19:46.603755 2119 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:19:46.621701 systemd[1]: Created slice kubepods.slice. Nov 1 00:19:46.626092 systemd[1]: Created slice kubepods-besteffort.slice. Nov 1 00:19:46.637262 kubelet[2119]: E1101 00:19:46.637072 2119 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:46.637159 systemd[1]: Created slice kubepods-burstable.slice. Nov 1 00:19:46.638557 kubelet[2119]: I1101 00:19:46.638530 2119 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:19:46.637000 audit[2119]: AVC avc: denied { mac_admin } for pid=2119 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:46.637000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:46.637000 audit[2119]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bf3f50 a1=4000d9f080 a2=4000bf3f20 a3=25 items=0 ppid=1 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:46.637000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:46.638772 kubelet[2119]: I1101 00:19:46.638614 2119 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:19:46.638772 kubelet[2119]: I1101 00:19:46.638734 2119 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:19:46.638772 kubelet[2119]: I1101 00:19:46.638746 2119 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:19:46.639638 kubelet[2119]: I1101 00:19:46.639396 2119 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:19:46.640972 kubelet[2119]: E1101 00:19:46.640948 2119 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:19:46.641079 kubelet[2119]: E1101 00:19:46.640994 2119 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:46.690068 systemd[1]: Created slice kubepods-burstable-pod13d2fa66e9f59a2b706811a17c32ef4e.slice. Nov 1 00:19:46.702231 kubelet[2119]: E1101 00:19:46.702067 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.704598 systemd[1]: Created slice kubepods-burstable-pod440a9b25a00862370d8048eaa60e7540.slice. Nov 1 00:19:46.715277 kubelet[2119]: E1101 00:19:46.715077 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.717304 systemd[1]: Created slice kubepods-burstable-pode5883eec6ca67a5abde1db97ac024f74.slice. Nov 1 00:19:46.719414 kubelet[2119]: E1101 00:19:46.719379 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.737578 kubelet[2119]: I1101 00:19:46.737545 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.737728 kubelet[2119]: I1101 00:19:46.737711 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.737811 kubelet[2119]: I1101 00:19:46.737790 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.737878 kubelet[2119]: I1101 00:19:46.737865 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e5883eec6ca67a5abde1db97ac024f74-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-2788c77bd2\" (UID: \"e5883eec6ca67a5abde1db97ac024f74\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.737970 kubelet[2119]: I1101 00:19:46.737958 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/13d2fa66e9f59a2b706811a17c32ef4e-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" (UID: \"13d2fa66e9f59a2b706811a17c32ef4e\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.738087 kubelet[2119]: I1101 00:19:46.738071 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/13d2fa66e9f59a2b706811a17c32ef4e-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" (UID: \"13d2fa66e9f59a2b706811a17c32ef4e\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.738197 kubelet[2119]: I1101 00:19:46.738185 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/13d2fa66e9f59a2b706811a17c32ef4e-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" (UID: \"13d2fa66e9f59a2b706811a17c32ef4e\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.738294 kubelet[2119]: I1101 00:19:46.738282 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.738395 kubelet[2119]: I1101 00:19:46.738382 2119 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.738480 kubelet[2119]: E1101 00:19:46.737820 2119 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-2788c77bd2?timeout=10s\": dial tcp 10.200.20.24:6443: connect: connection refused" interval="800ms" Nov 1 00:19:46.740327 kubelet[2119]: I1101 00:19:46.740310 2119 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.740803 kubelet[2119]: E1101 00:19:46.740772 2119 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.24:6443/api/v1/nodes\": dial tcp 10.200.20.24:6443: connect: connection refused" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.943977 kubelet[2119]: I1101 00:19:46.943129 2119 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:46.944458 kubelet[2119]: E1101 00:19:46.944426 2119 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.24:6443/api/v1/nodes\": dial tcp 10.200.20.24:6443: connect: connection refused" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:47.003322 env[1484]: time="2025-11-01T00:19:47.003269692Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-2788c77bd2,Uid:13d2fa66e9f59a2b706811a17c32ef4e,Namespace:kube-system,Attempt:0,}" Nov 1 00:19:47.016469 env[1484]: time="2025-11-01T00:19:47.016416484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-2788c77bd2,Uid:440a9b25a00862370d8048eaa60e7540,Namespace:kube-system,Attempt:0,}" Nov 1 00:19:47.021083 env[1484]: time="2025-11-01T00:19:47.021047150Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-2788c77bd2,Uid:e5883eec6ca67a5abde1db97ac024f74,Namespace:kube-system,Attempt:0,}" Nov 1 00:19:47.161106 kubelet[2119]: W1101 00:19:47.161027 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.200.20.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-2788c77bd2&limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:47.161106 kubelet[2119]: E1101 00:19:47.161092 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.200.20.24:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.8-n-2788c77bd2&limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:47.251669 kubelet[2119]: W1101 00:19:47.251155 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.200.20.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:47.251669 kubelet[2119]: E1101 00:19:47.251199 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.200.20.24:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:47.275877 kubelet[2119]: W1101 00:19:47.275841 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.200.20.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:47.276003 kubelet[2119]: E1101 00:19:47.275900 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.200.20.24:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:47.303560 kubelet[2119]: E1101 00:19:47.303451 2119 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.200.20.24:6443/api/v1/namespaces/default/events\": dial tcp 10.200.20.24:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510.3.8-n-2788c77bd2.1873b9ff77d77a87 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510.3.8-n-2788c77bd2,UID:ci-3510.3.8-n-2788c77bd2,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510.3.8-n-2788c77bd2,},FirstTimestamp:2025-11-01 00:19:46.110405255 +0000 UTC m=+1.494157597,LastTimestamp:2025-11-01 00:19:46.110405255 +0000 UTC m=+1.494157597,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510.3.8-n-2788c77bd2,}" Nov 1 00:19:47.346503 kubelet[2119]: I1101 00:19:47.346471 2119 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:47.346847 kubelet[2119]: E1101 00:19:47.346819 2119 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.24:6443/api/v1/nodes\": dial tcp 10.200.20.24:6443: connect: connection refused" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:47.461938 kubelet[2119]: W1101 00:19:47.461873 2119 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.200.20.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.24:6443: connect: connection refused Nov 1 00:19:47.462065 kubelet[2119]: E1101 00:19:47.461945 2119 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.200.20.24:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:47.539486 kubelet[2119]: E1101 00:19:47.538874 2119 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.24:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.8-n-2788c77bd2?timeout=10s\": dial tcp 10.200.20.24:6443: connect: connection refused" interval="1.6s" Nov 1 00:19:47.635917 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1491460789.mount: Deactivated successfully. Nov 1 00:19:47.667042 env[1484]: time="2025-11-01T00:19:47.666993135Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.680501 env[1484]: time="2025-11-01T00:19:47.680451369Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.684090 env[1484]: time="2025-11-01T00:19:47.684057868Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.686686 env[1484]: time="2025-11-01T00:19:47.686645963Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.693834 env[1484]: time="2025-11-01T00:19:47.693789242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.697038 env[1484]: time="2025-11-01T00:19:47.697007099Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.700953 env[1484]: time="2025-11-01T00:19:47.700917081Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.712241 env[1484]: time="2025-11-01T00:19:47.712199863Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.716617 env[1484]: time="2025-11-01T00:19:47.716583807Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.720204 env[1484]: time="2025-11-01T00:19:47.720170267Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.724822 env[1484]: time="2025-11-01T00:19:47.724792652Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.735431 env[1484]: time="2025-11-01T00:19:47.735365350Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:19:47.791801 env[1484]: time="2025-11-01T00:19:47.791081096Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:47.791801 env[1484]: time="2025-11-01T00:19:47.791129016Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:47.791801 env[1484]: time="2025-11-01T00:19:47.791138816Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:47.792159 env[1484]: time="2025-11-01T00:19:47.792111621Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/818c3e280098f89b16b2d8cc73d104820d238892d90db0d5dd4fcb8f0383a319 pid=2158 runtime=io.containerd.runc.v2 Nov 1 00:19:47.810388 systemd[1]: Started cri-containerd-818c3e280098f89b16b2d8cc73d104820d238892d90db0d5dd4fcb8f0383a319.scope. Nov 1 00:19:47.823662 env[1484]: time="2025-11-01T00:19:47.823584514Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:47.823662 env[1484]: time="2025-11-01T00:19:47.823626514Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:47.823662 env[1484]: time="2025-11-01T00:19:47.823636794Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:47.824015 env[1484]: time="2025-11-01T00:19:47.823974716Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3ec6473662358e9f9dc6231456ce1b136f939cc44d9fc671b383220b32c66e0f pid=2185 runtime=io.containerd.runc.v2 Nov 1 00:19:47.845908 kernel: kauditd_printk_skb: 221 callbacks suppressed Nov 1 00:19:47.846032 kernel: audit: type=1400 audit(1761956387.829:470): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.854617 env[1484]: time="2025-11-01T00:19:47.854531924Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:19:47.854617 env[1484]: time="2025-11-01T00:19:47.854578164Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:19:47.854617 env[1484]: time="2025-11-01T00:19:47.854588884Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:19:47.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.855180 env[1484]: time="2025-11-01T00:19:47.855147167Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cd4ad3331f3adf1b3921f9aac91fd13b0d694811f56f97e1a0031dc1acd0c5b4 pid=2211 runtime=io.containerd.runc.v2 Nov 1 00:19:47.872831 kernel: audit: type=1400 audit(1761956387.829:471): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.894960 kernel: audit: type=1400 audit(1761956387.830:472): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.914457 kernel: audit: type=1400 audit(1761956387.830:473): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.934045 kernel: audit: type=1400 audit(1761956387.830:474): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.935247 systemd[1]: Started cri-containerd-3ec6473662358e9f9dc6231456ce1b136f939cc44d9fc671b383220b32c66e0f.scope. Nov 1 00:19:47.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.952904 kernel: audit: type=1400 audit(1761956387.830:475): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.954847 systemd[1]: Started cri-containerd-cd4ad3331f3adf1b3921f9aac91fd13b0d694811f56f97e1a0031dc1acd0c5b4.scope. Nov 1 00:19:47.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.974904 kernel: audit: type=1400 audit(1761956387.830:476): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.015388 kernel: audit: type=1400 audit(1761956387.830:477): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.015487 kernel: audit: type=1400 audit(1761956387.830:478): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.015951 env[1484]: time="2025-11-01T00:19:48.015902448Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.8-n-2788c77bd2,Uid:13d2fa66e9f59a2b706811a17c32ef4e,Namespace:kube-system,Attempt:0,} returns sandbox id \"818c3e280098f89b16b2d8cc73d104820d238892d90db0d5dd4fcb8f0383a319\"" Nov 1 00:19:47.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.035368 kernel: audit: type=1400 audit(1761956387.835:479): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.835000 audit: BPF prog-id=62 op=LOAD Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831386333653238303039386638396231366232643863633733643130 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831386333653238303039386638396231366232643863633733643130 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit: BPF prog-id=63 op=LOAD Nov 1 00:19:47.852000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831386333653238303039386638396231366232643863633733643130 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit: BPF prog-id=64 op=LOAD Nov 1 00:19:47.852000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831386333653238303039386638396231366232643863633733643130 Nov 1 00:19:47.852000 audit: BPF prog-id=64 op=UNLOAD Nov 1 00:19:47.852000 audit: BPF prog-id=63 op=UNLOAD Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.037844 env[1484]: time="2025-11-01T00:19:48.037808765Z" level=info msg="CreateContainer within sandbox \"818c3e280098f89b16b2d8cc73d104820d238892d90db0d5dd4fcb8f0383a319\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:47.852000 audit: BPF prog-id=65 op=LOAD Nov 1 00:19:47.852000 audit[2167]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2158 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:47.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831386333653238303039386638396231366232643863633733643130 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.003000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.015000 audit: BPF prog-id=66 op=LOAD Nov 1 00:19:48.015000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.015000 audit[2212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2185 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2211 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364346164333333316633616466316233393231663961616339316664 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2211 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364346164333333316633616466316233393231663961616339316664 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit: BPF prog-id=68 op=LOAD Nov 1 00:19:48.036000 audit[2226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2211 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364346164333333316633616466316233393231663961616339316664 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit: BPF prog-id=69 op=LOAD Nov 1 00:19:48.036000 audit[2226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2211 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364346164333333316633616466316233393231663961616339316664 Nov 1 00:19:48.036000 audit: BPF prog-id=69 op=UNLOAD Nov 1 00:19:48.036000 audit: BPF prog-id=68 op=UNLOAD Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { bpf } for pid=2226 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.036000 audit[2226]: AVC avc: denied { perfmon } for pid=2226 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365633634373336363233353865396639646336323331343536636531 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2185 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365633634373336363233353865396639646336323331343536636531 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit: BPF prog-id=71 op=LOAD Nov 1 00:19:48.038000 audit[2212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2185 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365633634373336363233353865396639646336323331343536636531 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit: BPF prog-id=72 op=LOAD Nov 1 00:19:48.038000 audit[2212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2185 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365633634373336363233353865396639646336323331343536636531 Nov 1 00:19:48.038000 audit: BPF prog-id=72 op=UNLOAD Nov 1 00:19:48.038000 audit: BPF prog-id=71 op=UNLOAD Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { perfmon } for pid=2212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit[2212]: AVC avc: denied { bpf } for pid=2212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.038000 audit: BPF prog-id=73 op=LOAD Nov 1 00:19:48.038000 audit[2212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2185 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365633634373336363233353865396639646336323331343536636531 Nov 1 00:19:48.036000 audit[2226]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2211 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364346164333333316633616466316233393231663961616339316664 Nov 1 00:19:48.071253 env[1484]: time="2025-11-01T00:19:48.067832485Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.8-n-2788c77bd2,Uid:440a9b25a00862370d8048eaa60e7540,Namespace:kube-system,Attempt:0,} returns sandbox id \"cd4ad3331f3adf1b3921f9aac91fd13b0d694811f56f97e1a0031dc1acd0c5b4\"" Nov 1 00:19:48.076842 env[1484]: time="2025-11-01T00:19:48.076791773Z" level=info msg="CreateContainer within sandbox \"cd4ad3331f3adf1b3921f9aac91fd13b0d694811f56f97e1a0031dc1acd0c5b4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Nov 1 00:19:48.078538 env[1484]: time="2025-11-01T00:19:48.078479782Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.8-n-2788c77bd2,Uid:e5883eec6ca67a5abde1db97ac024f74,Namespace:kube-system,Attempt:0,} returns sandbox id \"3ec6473662358e9f9dc6231456ce1b136f939cc44d9fc671b383220b32c66e0f\"" Nov 1 00:19:48.081518 env[1484]: time="2025-11-01T00:19:48.081484038Z" level=info msg="CreateContainer within sandbox \"3ec6473662358e9f9dc6231456ce1b136f939cc44d9fc671b383220b32c66e0f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Nov 1 00:19:48.086393 env[1484]: time="2025-11-01T00:19:48.086352424Z" level=info msg="CreateContainer within sandbox \"818c3e280098f89b16b2d8cc73d104820d238892d90db0d5dd4fcb8f0383a319\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e32afb47ca0470fe0168459efcdee61ba7a00525f9239aa9d23ce04a52f17782\"" Nov 1 00:19:48.087159 env[1484]: time="2025-11-01T00:19:48.087114268Z" level=info msg="StartContainer for \"e32afb47ca0470fe0168459efcdee61ba7a00525f9239aa9d23ce04a52f17782\"" Nov 1 00:19:48.092441 kubelet[2119]: E1101 00:19:48.092385 2119 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.200.20.24:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.200.20.24:6443: connect: connection refused" logger="UnhandledError" Nov 1 00:19:48.105509 systemd[1]: Started cri-containerd-e32afb47ca0470fe0168459efcdee61ba7a00525f9239aa9d23ce04a52f17782.scope. Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.117000 audit: BPF prog-id=74 op=LOAD Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2158 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533326166623437636130343730666530313638343539656663646565 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2158 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533326166623437636130343730666530313638343539656663646565 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit: BPF prog-id=75 op=LOAD Nov 1 00:19:48.118000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2158 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533326166623437636130343730666530313638343539656663646565 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit: BPF prog-id=76 op=LOAD Nov 1 00:19:48.118000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2158 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533326166623437636130343730666530313638343539656663646565 Nov 1 00:19:48.118000 audit: BPF prog-id=76 op=UNLOAD Nov 1 00:19:48.118000 audit: BPF prog-id=75 op=UNLOAD Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { perfmon } for pid=2288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit[2288]: AVC avc: denied { bpf } for pid=2288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.118000 audit: BPF prog-id=77 op=LOAD Nov 1 00:19:48.118000 audit[2288]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2158 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533326166623437636130343730666530313638343539656663646565 Nov 1 00:19:48.132251 env[1484]: time="2025-11-01T00:19:48.132210749Z" level=info msg="CreateContainer within sandbox \"cd4ad3331f3adf1b3921f9aac91fd13b0d694811f56f97e1a0031dc1acd0c5b4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"cbf327de42003408e725ce418d36f8131618984030b40b6188c851ee38a73c12\"" Nov 1 00:19:48.133080 env[1484]: time="2025-11-01T00:19:48.133053153Z" level=info msg="StartContainer for \"cbf327de42003408e725ce418d36f8131618984030b40b6188c851ee38a73c12\"" Nov 1 00:19:48.149846 env[1484]: time="2025-11-01T00:19:48.149797523Z" level=info msg="CreateContainer within sandbox \"3ec6473662358e9f9dc6231456ce1b136f939cc44d9fc671b383220b32c66e0f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"193ff8dbd708225d7232f3a1ba5aa8603197c816ee3027b60302bc7cea892af2\"" Nov 1 00:19:48.150485 env[1484]: time="2025-11-01T00:19:48.150454206Z" level=info msg="StartContainer for \"193ff8dbd708225d7232f3a1ba5aa8603197c816ee3027b60302bc7cea892af2\"" Nov 1 00:19:48.150589 kubelet[2119]: I1101 00:19:48.150538 2119 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:48.151019 kubelet[2119]: E1101 00:19:48.150985 2119 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.200.20.24:6443/api/v1/nodes\": dial tcp 10.200.20.24:6443: connect: connection refused" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:48.156597 env[1484]: time="2025-11-01T00:19:48.156546639Z" level=info msg="StartContainer for \"e32afb47ca0470fe0168459efcdee61ba7a00525f9239aa9d23ce04a52f17782\" returns successfully" Nov 1 00:19:48.161422 systemd[1]: Started cri-containerd-cbf327de42003408e725ce418d36f8131618984030b40b6188c851ee38a73c12.scope. Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.185000 audit: BPF prog-id=78 op=LOAD Nov 1 00:19:48.186000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.186000 audit[2321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2211 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663332376465343230303334303865373235636534313864333666 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2211 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663332376465343230303334303865373235636534313864333666 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.187000 audit: BPF prog-id=79 op=LOAD Nov 1 00:19:48.187000 audit[2321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2211 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663332376465343230303334303865373235636534313864333666 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit: BPF prog-id=80 op=LOAD Nov 1 00:19:48.189000 audit[2321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2211 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663332376465343230303334303865373235636534313864333666 Nov 1 00:19:48.189000 audit: BPF prog-id=80 op=UNLOAD Nov 1 00:19:48.189000 audit: BPF prog-id=79 op=UNLOAD Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { perfmon } for pid=2321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit[2321]: AVC avc: denied { bpf } for pid=2321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.189000 audit: BPF prog-id=81 op=LOAD Nov 1 00:19:48.189000 audit[2321]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2211 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663332376465343230303334303865373235636534313864333666 Nov 1 00:19:48.202999 systemd[1]: Started cri-containerd-193ff8dbd708225d7232f3a1ba5aa8603197c816ee3027b60302bc7cea892af2.scope. Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.225000 audit: BPF prog-id=82 op=LOAD Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2185 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336666386462643730383232356437323332663361316261356161 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2185 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336666386462643730383232356437323332663361316261356161 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit: BPF prog-id=83 op=LOAD Nov 1 00:19:48.226000 audit[2344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2185 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336666386462643730383232356437323332663361316261356161 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit: BPF prog-id=84 op=LOAD Nov 1 00:19:48.226000 audit[2344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2185 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336666386462643730383232356437323332663361316261356161 Nov 1 00:19:48.226000 audit: BPF prog-id=84 op=UNLOAD Nov 1 00:19:48.226000 audit: BPF prog-id=83 op=UNLOAD Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:48.226000 audit: BPF prog-id=85 op=LOAD Nov 1 00:19:48.226000 audit[2344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2185 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139336666386462643730383232356437323332663361316261356161 Nov 1 00:19:48.235064 env[1484]: time="2025-11-01T00:19:48.235010457Z" level=info msg="StartContainer for \"cbf327de42003408e725ce418d36f8131618984030b40b6188c851ee38a73c12\" returns successfully" Nov 1 00:19:48.262755 env[1484]: time="2025-11-01T00:19:48.262711365Z" level=info msg="StartContainer for \"193ff8dbd708225d7232f3a1ba5aa8603197c816ee3027b60302bc7cea892af2\" returns successfully" Nov 1 00:19:48.588337 kubelet[2119]: E1101 00:19:48.588298 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:48.590908 kubelet[2119]: E1101 00:19:48.590864 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:48.594853 kubelet[2119]: E1101 00:19:48.594821 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:48.637815 systemd[1]: run-containerd-runc-k8s.io-818c3e280098f89b16b2d8cc73d104820d238892d90db0d5dd4fcb8f0383a319-runc.QLEvn7.mount: Deactivated successfully. Nov 1 00:19:49.596866 kubelet[2119]: E1101 00:19:49.596821 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:49.597199 kubelet[2119]: E1101 00:19:49.597176 2119 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:49.752670 kubelet[2119]: I1101 00:19:49.752631 2119 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.375000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:50.375000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4007d8e720 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:19:50.375000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:50.376000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:50.376000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4007d8e780 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:19:50.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:50.388000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:50.388000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=40046db200 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:19:50.388000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:50.391000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:50.391000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=48 a1=400730f120 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:19:50.391000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:50.397000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:50.397000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4007bc6120 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:19:50.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:50.397000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:50.397000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=400791a0c0 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:19:50.397000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:19:50.543316 kubelet[2119]: E1101 00:19:50.543245 2119 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.8-n-2788c77bd2\" not found" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.651769 kubelet[2119]: I1101 00:19:50.651669 2119 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.736433 kubelet[2119]: I1101 00:19:50.736388 2119 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.783384 kubelet[2119]: E1101 00:19:50.783341 2119 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.783384 kubelet[2119]: I1101 00:19:50.783377 2119 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.786926 kubelet[2119]: E1101 00:19:50.786877 2119 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.786926 kubelet[2119]: I1101 00:19:50.786923 2119 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:50.790010 kubelet[2119]: E1101 00:19:50.789975 2119 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-2788c77bd2\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:51.045000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:51.045000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000c32000 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:19:51.045000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:51.046000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:51.046000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=4000157b80 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:19:51.046000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:51.122242 kubelet[2119]: I1101 00:19:51.122205 2119 apiserver.go:52] "Watching apiserver" Nov 1 00:19:51.134833 kubelet[2119]: I1101 00:19:51.134794 2119 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:19:53.723624 kubelet[2119]: I1101 00:19:53.723595 2119 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:53.734923 kubelet[2119]: W1101 00:19:53.734872 2119 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 00:19:54.106974 kubelet[2119]: I1101 00:19:54.106946 2119 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:54.116579 kubelet[2119]: W1101 00:19:54.116537 2119 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 00:19:54.210804 systemd[1]: Reloading. Nov 1 00:19:54.306040 /usr/lib/systemd/system-generators/torcx-generator[2409]: time="2025-11-01T00:19:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.8 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.8 /var/lib/torcx/store]" Nov 1 00:19:54.306069 /usr/lib/systemd/system-generators/torcx-generator[2409]: time="2025-11-01T00:19:54Z" level=info msg="torcx already run" Nov 1 00:19:54.372668 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Nov 1 00:19:54.372687 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Nov 1 00:19:54.388556 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.484309 kernel: kauditd_printk_skb: 390 callbacks suppressed Nov 1 00:19:54.484392 kernel: audit: type=1400 audit(1761956394.478:575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.519755 kernel: audit: type=1400 audit(1761956394.478:576): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.519898 kernel: audit: type=1400 audit(1761956394.478:577): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.556902 kernel: audit: type=1400 audit(1761956394.478:578): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.556978 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.583632 kernel: audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:19:54.583682 kernel: audit: type=1400 audit(1761956394.478:579): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.583717 kernel: audit: backlog limit exceeded Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.605569 kernel: audit: type=1400 audit(1761956394.478:580): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.605619 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit: BPF prog-id=86 op=LOAD Nov 1 00:19:54.483000 audit: BPF prog-id=47 op=UNLOAD Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit: BPF prog-id=87 op=LOAD Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit: BPF prog-id=88 op=LOAD Nov 1 00:19:54.518000 audit: BPF prog-id=48 op=UNLOAD Nov 1 00:19:54.518000 audit: BPF prog-id=49 op=UNLOAD Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit: BPF prog-id=89 op=LOAD Nov 1 00:19:54.536000 audit: BPF prog-id=82 op=UNLOAD Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit: BPF prog-id=90 op=LOAD Nov 1 00:19:54.554000 audit: BPF prog-id=50 op=UNLOAD Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.554000 audit: BPF prog-id=91 op=LOAD Nov 1 00:19:54.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.609000 audit: BPF prog-id=92 op=LOAD Nov 1 00:19:54.609000 audit: BPF prog-id=51 op=UNLOAD Nov 1 00:19:54.609000 audit: BPF prog-id=52 op=UNLOAD Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit: BPF prog-id=93 op=LOAD Nov 1 00:19:54.613000 audit: BPF prog-id=53 op=UNLOAD Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit: BPF prog-id=94 op=LOAD Nov 1 00:19:54.614000 audit: BPF prog-id=78 op=UNLOAD Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.614000 audit: BPF prog-id=95 op=LOAD Nov 1 00:19:54.614000 audit: BPF prog-id=54 op=UNLOAD Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.617000 audit: BPF prog-id=96 op=LOAD Nov 1 00:19:54.617000 audit: BPF prog-id=66 op=UNLOAD Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.618000 audit: BPF prog-id=97 op=LOAD Nov 1 00:19:54.618000 audit: BPF prog-id=74 op=UNLOAD Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.619000 audit: BPF prog-id=98 op=LOAD Nov 1 00:19:54.619000 audit: BPF prog-id=55 op=UNLOAD Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit: BPF prog-id=99 op=LOAD Nov 1 00:19:54.621000 audit: BPF prog-id=56 op=UNLOAD Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit: BPF prog-id=100 op=LOAD Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit: BPF prog-id=101 op=LOAD Nov 1 00:19:54.621000 audit: BPF prog-id=57 op=UNLOAD Nov 1 00:19:54.621000 audit: BPF prog-id=58 op=UNLOAD Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit: BPF prog-id=102 op=LOAD Nov 1 00:19:54.622000 audit: BPF prog-id=67 op=UNLOAD Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.622000 audit: BPF prog-id=103 op=LOAD Nov 1 00:19:54.622000 audit: BPF prog-id=59 op=UNLOAD Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit: BPF prog-id=104 op=LOAD Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit: BPF prog-id=105 op=LOAD Nov 1 00:19:54.623000 audit: BPF prog-id=60 op=UNLOAD Nov 1 00:19:54.623000 audit: BPF prog-id=61 op=UNLOAD Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.623000 audit: BPF prog-id=106 op=LOAD Nov 1 00:19:54.624000 audit: BPF prog-id=62 op=UNLOAD Nov 1 00:19:54.644444 systemd[1]: Stopping kubelet.service... Nov 1 00:19:54.666293 systemd[1]: kubelet.service: Deactivated successfully. Nov 1 00:19:54.666495 systemd[1]: Stopped kubelet.service. Nov 1 00:19:54.666559 systemd[1]: kubelet.service: Consumed 1.320s CPU time. Nov 1 00:19:54.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:54.668672 systemd[1]: Starting kubelet.service... Nov 1 00:19:54.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:19:54.851711 systemd[1]: Started kubelet.service. Nov 1 00:19:54.906430 kubelet[2472]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:54.906430 kubelet[2472]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Nov 1 00:19:54.906430 kubelet[2472]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Nov 1 00:19:54.906430 kubelet[2472]: I1101 00:19:54.906377 2472 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Nov 1 00:19:54.915614 kubelet[2472]: I1101 00:19:54.915582 2472 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Nov 1 00:19:54.916766 kubelet[2472]: I1101 00:19:54.916748 2472 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Nov 1 00:19:54.917721 kubelet[2472]: I1101 00:19:54.917699 2472 server.go:954] "Client rotation is on, will bootstrap in background" Nov 1 00:19:54.922149 kubelet[2472]: I1101 00:19:54.922117 2472 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Nov 1 00:19:54.928365 kubelet[2472]: I1101 00:19:54.928316 2472 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Nov 1 00:19:54.931808 kubelet[2472]: E1101 00:19:54.931771 2472 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Nov 1 00:19:54.932010 kubelet[2472]: I1101 00:19:54.931994 2472 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Nov 1 00:19:54.935380 kubelet[2472]: I1101 00:19:54.935350 2472 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Nov 1 00:19:54.935746 kubelet[2472]: I1101 00:19:54.935713 2472 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Nov 1 00:19:54.936063 kubelet[2472]: I1101 00:19:54.935826 2472 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510.3.8-n-2788c77bd2","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Nov 1 00:19:54.936219 kubelet[2472]: I1101 00:19:54.936204 2472 topology_manager.go:138] "Creating topology manager with none policy" Nov 1 00:19:54.936283 kubelet[2472]: I1101 00:19:54.936274 2472 container_manager_linux.go:304] "Creating device plugin manager" Nov 1 00:19:54.936387 kubelet[2472]: I1101 00:19:54.936376 2472 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:54.936579 kubelet[2472]: I1101 00:19:54.936566 2472 kubelet.go:446] "Attempting to sync node with API server" Nov 1 00:19:54.936666 kubelet[2472]: I1101 00:19:54.936655 2472 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Nov 1 00:19:54.936739 kubelet[2472]: I1101 00:19:54.936730 2472 kubelet.go:352] "Adding apiserver pod source" Nov 1 00:19:54.936793 kubelet[2472]: I1101 00:19:54.936783 2472 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Nov 1 00:19:54.941691 kubelet[2472]: I1101 00:19:54.941664 2472 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Nov 1 00:19:54.942317 kubelet[2472]: I1101 00:19:54.942299 2472 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Nov 1 00:19:54.942835 kubelet[2472]: I1101 00:19:54.942800 2472 watchdog_linux.go:99] "Systemd watchdog is not enabled" Nov 1 00:19:54.942969 kubelet[2472]: I1101 00:19:54.942957 2472 server.go:1287] "Started kubelet" Nov 1 00:19:54.945000 audit[2472]: AVC avc: denied { mac_admin } for pid=2472 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.945000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:54.945000 audit[2472]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bcccc0 a1=4000b654a0 a2=4000bccc90 a3=25 items=0 ppid=1 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:54.945000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:54.946469 kubelet[2472]: I1101 00:19:54.946440 2472 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Nov 1 00:19:54.945000 audit[2472]: AVC avc: denied { mac_admin } for pid=2472 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:54.945000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:54.945000 audit[2472]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b716e0 a1=4000b654b8 a2=4000bccd50 a3=25 items=0 ppid=1 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:54.945000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:54.946753 kubelet[2472]: I1101 00:19:54.946734 2472 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Nov 1 00:19:54.946849 kubelet[2472]: I1101 00:19:54.946838 2472 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Nov 1 00:19:54.956977 kubelet[2472]: I1101 00:19:54.956930 2472 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Nov 1 00:19:54.958360 kubelet[2472]: I1101 00:19:54.958334 2472 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Nov 1 00:19:54.960021 kubelet[2472]: I1101 00:19:54.960001 2472 volume_manager.go:297] "Starting Kubelet Volume Manager" Nov 1 00:19:54.960344 kubelet[2472]: E1101 00:19:54.960321 2472 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ci-3510.3.8-n-2788c77bd2\" not found" Nov 1 00:19:54.967266 kubelet[2472]: I1101 00:19:54.967238 2472 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Nov 1 00:19:54.967526 kubelet[2472]: I1101 00:19:54.967514 2472 reconciler.go:26] "Reconciler: start to sync state" Nov 1 00:19:54.969451 kubelet[2472]: I1101 00:19:54.969419 2472 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Nov 1 00:19:54.971722 kubelet[2472]: I1101 00:19:54.971696 2472 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Nov 1 00:19:54.971863 kubelet[2472]: I1101 00:19:54.971851 2472 status_manager.go:227] "Starting to sync pod status with apiserver" Nov 1 00:19:54.972081 kubelet[2472]: I1101 00:19:54.972067 2472 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Nov 1 00:19:54.972143 kubelet[2472]: I1101 00:19:54.972134 2472 kubelet.go:2382] "Starting kubelet main sync loop" Nov 1 00:19:54.972235 kubelet[2472]: E1101 00:19:54.972219 2472 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Nov 1 00:19:54.972925 kubelet[2472]: I1101 00:19:54.972847 2472 server.go:479] "Adding debug handlers to kubelet server" Nov 1 00:19:54.973920 kubelet[2472]: I1101 00:19:54.973845 2472 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Nov 1 00:19:54.974078 kubelet[2472]: I1101 00:19:54.974056 2472 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Nov 1 00:19:54.985373 kubelet[2472]: I1101 00:19:54.985340 2472 factory.go:221] Registration of the systemd container factory successfully Nov 1 00:19:54.985610 kubelet[2472]: I1101 00:19:54.985590 2472 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Nov 1 00:19:54.991681 kubelet[2472]: E1101 00:19:54.990011 2472 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Nov 1 00:19:54.992537 kubelet[2472]: I1101 00:19:54.992511 2472 factory.go:221] Registration of the containerd container factory successfully Nov 1 00:19:55.050391 kubelet[2472]: I1101 00:19:55.050366 2472 cpu_manager.go:221] "Starting CPU manager" policy="none" Nov 1 00:19:55.050520 kubelet[2472]: I1101 00:19:55.050506 2472 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Nov 1 00:19:55.050581 kubelet[2472]: I1101 00:19:55.050572 2472 state_mem.go:36] "Initialized new in-memory state store" Nov 1 00:19:55.050810 kubelet[2472]: I1101 00:19:55.050796 2472 state_mem.go:88] "Updated default CPUSet" cpuSet="" Nov 1 00:19:55.051065 kubelet[2472]: I1101 00:19:55.051035 2472 state_mem.go:96] "Updated CPUSet assignments" assignments={} Nov 1 00:19:55.051151 kubelet[2472]: I1101 00:19:55.051140 2472 policy_none.go:49] "None policy: Start" Nov 1 00:19:55.051218 kubelet[2472]: I1101 00:19:55.051208 2472 memory_manager.go:186] "Starting memorymanager" policy="None" Nov 1 00:19:55.051332 kubelet[2472]: I1101 00:19:55.051321 2472 state_mem.go:35] "Initializing new in-memory state store" Nov 1 00:19:55.051514 kubelet[2472]: I1101 00:19:55.051501 2472 state_mem.go:75] "Updated machine memory state" Nov 1 00:19:55.055659 kubelet[2472]: I1101 00:19:55.055634 2472 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Nov 1 00:19:55.054000 audit[2472]: AVC avc: denied { mac_admin } for pid=2472 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:19:55.054000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Nov 1 00:19:55.054000 audit[2472]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bcd620 a1=4000c8a210 a2=4000bcd5f0 a3=25 items=0 ppid=1 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:19:55.054000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Nov 1 00:19:55.057539 kubelet[2472]: I1101 00:19:55.056985 2472 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Nov 1 00:19:55.057539 kubelet[2472]: I1101 00:19:55.057189 2472 eviction_manager.go:189] "Eviction manager: starting control loop" Nov 1 00:19:55.057539 kubelet[2472]: I1101 00:19:55.057202 2472 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Nov 1 00:19:55.057621 kubelet[2472]: I1101 00:19:55.057543 2472 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Nov 1 00:19:55.058773 kubelet[2472]: E1101 00:19:55.058597 2472 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Nov 1 00:19:55.073673 kubelet[2472]: I1101 00:19:55.073643 2472 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.075077 kubelet[2472]: I1101 00:19:55.075054 2472 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.078189 kubelet[2472]: I1101 00:19:55.078157 2472 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.160386 kubelet[2472]: I1101 00:19:55.160285 2472 kubelet_node_status.go:75] "Attempting to register node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.168204 kubelet[2472]: W1101 00:19:55.168178 2472 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 00:19:55.170751 kubelet[2472]: I1101 00:19:55.170721 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.170895 kubelet[2472]: I1101 00:19:55.170866 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.170977 kubelet[2472]: I1101 00:19:55.170960 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.171057 kubelet[2472]: I1101 00:19:55.171044 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/13d2fa66e9f59a2b706811a17c32ef4e-k8s-certs\") pod \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" (UID: \"13d2fa66e9f59a2b706811a17c32ef4e\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.171166 kubelet[2472]: I1101 00:19:55.171152 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/13d2fa66e9f59a2b706811a17c32ef4e-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" (UID: \"13d2fa66e9f59a2b706811a17c32ef4e\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.171247 kubelet[2472]: I1101 00:19:55.171235 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-ca-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.171328 kubelet[2472]: I1101 00:19:55.171316 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/440a9b25a00862370d8048eaa60e7540-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.8-n-2788c77bd2\" (UID: \"440a9b25a00862370d8048eaa60e7540\") " pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.171408 kubelet[2472]: I1101 00:19:55.171396 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e5883eec6ca67a5abde1db97ac024f74-kubeconfig\") pod \"kube-scheduler-ci-3510.3.8-n-2788c77bd2\" (UID: \"e5883eec6ca67a5abde1db97ac024f74\") " pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.171488 kubelet[2472]: I1101 00:19:55.171477 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/13d2fa66e9f59a2b706811a17c32ef4e-ca-certs\") pod \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" (UID: \"13d2fa66e9f59a2b706811a17c32ef4e\") " pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.215551 kubelet[2472]: W1101 00:19:55.215010 2472 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 00:19:55.215551 kubelet[2472]: W1101 00:19:55.215202 2472 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 00:19:55.215551 kubelet[2472]: E1101 00:19:55.215237 2472 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-ci-3510.3.8-n-2788c77bd2\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.215551 kubelet[2472]: E1101 00:19:55.215453 2472 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.221940 kubelet[2472]: I1101 00:19:55.221910 2472 kubelet_node_status.go:124] "Node was previously registered" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.222137 kubelet[2472]: I1101 00:19:55.222117 2472 kubelet_node_status.go:78] "Successfully registered node" node="ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:55.938085 kubelet[2472]: I1101 00:19:55.938052 2472 apiserver.go:52] "Watching apiserver" Nov 1 00:19:55.968473 kubelet[2472]: I1101 00:19:55.968432 2472 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Nov 1 00:19:56.023263 kubelet[2472]: I1101 00:19:56.023233 2472 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:56.080972 kubelet[2472]: W1101 00:19:56.080931 2472 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Nov 1 00:19:56.081097 kubelet[2472]: E1101 00:19:56.080997 2472 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-ci-3510.3.8-n-2788c77bd2\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" Nov 1 00:19:56.081250 kubelet[2472]: I1101 00:19:56.081213 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.8-n-2788c77bd2" podStartSLOduration=3.081187569 podStartE2EDuration="3.081187569s" podCreationTimestamp="2025-11-01 00:19:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:19:56.01876686 +0000 UTC m=+1.162494987" watchObservedRunningTime="2025-11-01 00:19:56.081187569 +0000 UTC m=+1.224915656" Nov 1 00:19:56.081509 kubelet[2472]: I1101 00:19:56.081477 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.8-n-2788c77bd2" podStartSLOduration=1.08145409 podStartE2EDuration="1.08145409s" podCreationTimestamp="2025-11-01 00:19:55 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:19:56.08145497 +0000 UTC m=+1.225183097" watchObservedRunningTime="2025-11-01 00:19:56.08145409 +0000 UTC m=+1.225182217" Nov 1 00:19:56.183567 kubelet[2472]: I1101 00:19:56.183495 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.8-n-2788c77bd2" podStartSLOduration=2.183475568 podStartE2EDuration="2.183475568s" podCreationTimestamp="2025-11-01 00:19:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:19:56.168347823 +0000 UTC m=+1.312075950" watchObservedRunningTime="2025-11-01 00:19:56.183475568 +0000 UTC m=+1.327203655" Nov 1 00:19:56.880000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=522518 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Nov 1 00:19:56.880000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40005aa680 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:19:56.880000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:58.676000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:58.676000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6b7a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:19:58.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:58.677000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:58.677000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6b980 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:19:58.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:58.677000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:58.677000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6bce0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:19:58.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:58.678000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:19:58.678000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40008b8520 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:19:58.678000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:19:59.119245 kubelet[2472]: I1101 00:19:59.119210 2472 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Nov 1 00:19:59.119946 env[1484]: time="2025-11-01T00:19:59.119822818Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Nov 1 00:19:59.120179 kubelet[2472]: I1101 00:19:59.120025 2472 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Nov 1 00:20:00.141467 systemd[1]: Created slice kubepods-besteffort-pod352c8375_5623_4185_a360_6e5f2df4449a.slice. Nov 1 00:20:00.200127 kubelet[2472]: I1101 00:20:00.200085 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/352c8375-5623-4185-a360-6e5f2df4449a-kube-proxy\") pod \"kube-proxy-tr4q6\" (UID: \"352c8375-5623-4185-a360-6e5f2df4449a\") " pod="kube-system/kube-proxy-tr4q6" Nov 1 00:20:00.200455 kubelet[2472]: I1101 00:20:00.200141 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/352c8375-5623-4185-a360-6e5f2df4449a-xtables-lock\") pod \"kube-proxy-tr4q6\" (UID: \"352c8375-5623-4185-a360-6e5f2df4449a\") " pod="kube-system/kube-proxy-tr4q6" Nov 1 00:20:00.200455 kubelet[2472]: I1101 00:20:00.200163 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/352c8375-5623-4185-a360-6e5f2df4449a-lib-modules\") pod \"kube-proxy-tr4q6\" (UID: \"352c8375-5623-4185-a360-6e5f2df4449a\") " pod="kube-system/kube-proxy-tr4q6" Nov 1 00:20:00.200455 kubelet[2472]: I1101 00:20:00.200185 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vdchv\" (UniqueName: \"kubernetes.io/projected/352c8375-5623-4185-a360-6e5f2df4449a-kube-api-access-vdchv\") pod \"kube-proxy-tr4q6\" (UID: \"352c8375-5623-4185-a360-6e5f2df4449a\") " pod="kube-system/kube-proxy-tr4q6" Nov 1 00:20:00.417165 kubelet[2472]: I1101 00:20:00.417077 2472 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Nov 1 00:20:00.449919 env[1484]: time="2025-11-01T00:20:00.449723334Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-tr4q6,Uid:352c8375-5623-4185-a360-6e5f2df4449a,Namespace:kube-system,Attempt:0,}" Nov 1 00:20:00.468708 systemd[1]: Created slice kubepods-besteffort-pod0f3a60f3_7cf0_4db7_b4fc_983c2af2c5f3.slice. Nov 1 00:20:00.506511 kubelet[2472]: I1101 00:20:00.506479 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/0f3a60f3-7cf0-4db7-b4fc-983c2af2c5f3-var-lib-calico\") pod \"tigera-operator-7dcd859c48-5nz5m\" (UID: \"0f3a60f3-7cf0-4db7-b4fc-983c2af2c5f3\") " pod="tigera-operator/tigera-operator-7dcd859c48-5nz5m" Nov 1 00:20:00.506750 kubelet[2472]: I1101 00:20:00.506729 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bznwg\" (UniqueName: \"kubernetes.io/projected/0f3a60f3-7cf0-4db7-b4fc-983c2af2c5f3-kube-api-access-bznwg\") pod \"tigera-operator-7dcd859c48-5nz5m\" (UID: \"0f3a60f3-7cf0-4db7-b4fc-983c2af2c5f3\") " pod="tigera-operator/tigera-operator-7dcd859c48-5nz5m" Nov 1 00:20:00.507729 env[1484]: time="2025-11-01T00:20:00.507659519Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:00.507850 env[1484]: time="2025-11-01T00:20:00.507708279Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:00.507850 env[1484]: time="2025-11-01T00:20:00.507726399Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:00.508016 env[1484]: time="2025-11-01T00:20:00.507989080Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/988a366b39c6abc37cd85587f35353a54802aa883ff9deb8454007b4e847a2d0 pid=2521 runtime=io.containerd.runc.v2 Nov 1 00:20:00.523071 systemd[1]: run-containerd-runc-k8s.io-988a366b39c6abc37cd85587f35353a54802aa883ff9deb8454007b4e847a2d0-runc.VPHew2.mount: Deactivated successfully. Nov 1 00:20:00.525866 systemd[1]: Started cri-containerd-988a366b39c6abc37cd85587f35353a54802aa883ff9deb8454007b4e847a2d0.scope. Nov 1 00:20:00.560373 kernel: kauditd_printk_skb: 267 callbacks suppressed Nov 1 00:20:00.560502 kernel: audit: type=1400 audit(1761956400.536:827): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.603284 kernel: audit: type=1400 audit(1761956400.536:828): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.603385 kernel: audit: type=1400 audit(1761956400.537:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.630053 env[1484]: time="2025-11-01T00:20:00.626065337Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-tr4q6,Uid:352c8375-5623-4185-a360-6e5f2df4449a,Namespace:kube-system,Attempt:0,} returns sandbox id \"988a366b39c6abc37cd85587f35353a54802aa883ff9deb8454007b4e847a2d0\"" Nov 1 00:20:00.633921 env[1484]: time="2025-11-01T00:20:00.633866607Z" level=info msg="CreateContainer within sandbox \"988a366b39c6abc37cd85587f35353a54802aa883ff9deb8454007b4e847a2d0\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Nov 1 00:20:00.646990 kernel: audit: type=1400 audit(1761956400.537:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.647104 kernel: audit: type=1400 audit(1761956400.537:831): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.668935 kernel: audit: type=1400 audit(1761956400.537:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.687559 kernel: audit: type=1400 audit(1761956400.537:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.537000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.722605 kernel: audit: type=1400 audit(1761956400.537:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.722750 kernel: audit: type=1400 audit(1761956400.537:835): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.722778 kernel: audit: type=1400 audit(1761956400.542:836): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.542000 audit: BPF prog-id=107 op=LOAD Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2521 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386133363662333963366162633337636438353538376633353335 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2521 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386133363662333963366162633337636438353538376633353335 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit: BPF prog-id=108 op=LOAD Nov 1 00:20:00.560000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2521 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386133363662333963366162633337636438353538376633353335 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit: BPF prog-id=109 op=LOAD Nov 1 00:20:00.560000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2521 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386133363662333963366162633337636438353538376633353335 Nov 1 00:20:00.560000 audit: BPF prog-id=109 op=UNLOAD Nov 1 00:20:00.560000 audit: BPF prog-id=108 op=UNLOAD Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.560000 audit: BPF prog-id=110 op=LOAD Nov 1 00:20:00.560000 audit[2529]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2521 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386133363662333963366162633337636438353538376633353335 Nov 1 00:20:00.758469 env[1484]: time="2025-11-01T00:20:00.758422729Z" level=info msg="CreateContainer within sandbox \"988a366b39c6abc37cd85587f35353a54802aa883ff9deb8454007b4e847a2d0\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"d38909862b536a33167b515fb9493b5474884106913d0c77591b78e339131e83\"" Nov 1 00:20:00.759517 env[1484]: time="2025-11-01T00:20:00.759479213Z" level=info msg="StartContainer for \"d38909862b536a33167b515fb9493b5474884106913d0c77591b78e339131e83\"" Nov 1 00:20:00.771863 env[1484]: time="2025-11-01T00:20:00.771817021Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-5nz5m,Uid:0f3a60f3-7cf0-4db7-b4fc-983c2af2c5f3,Namespace:tigera-operator,Attempt:0,}" Nov 1 00:20:00.774965 systemd[1]: Started cri-containerd-d38909862b536a33167b515fb9493b5474884106913d0c77591b78e339131e83.scope. Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2521 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383930393836326235333661333331363762353135666239343933 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.794000 audit: BPF prog-id=111 op=LOAD Nov 1 00:20:00.794000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2521 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383930393836326235333661333331363762353135666239343933 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit: BPF prog-id=112 op=LOAD Nov 1 00:20:00.795000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2521 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383930393836326235333661333331363762353135666239343933 Nov 1 00:20:00.795000 audit: BPF prog-id=112 op=UNLOAD Nov 1 00:20:00.795000 audit: BPF prog-id=111 op=UNLOAD Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.795000 audit: BPF prog-id=113 op=LOAD Nov 1 00:20:00.795000 audit[2565]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2521 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383930393836326235333661333331363762353135666239343933 Nov 1 00:20:00.819564 env[1484]: time="2025-11-01T00:20:00.819517645Z" level=info msg="StartContainer for \"d38909862b536a33167b515fb9493b5474884106913d0c77591b78e339131e83\" returns successfully" Nov 1 00:20:00.827043 env[1484]: time="2025-11-01T00:20:00.826960434Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:00.827043 env[1484]: time="2025-11-01T00:20:00.827003154Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:00.827234 env[1484]: time="2025-11-01T00:20:00.827021474Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:00.827405 env[1484]: time="2025-11-01T00:20:00.827350796Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/202317006c2728ac5dcbdc57032f21946ab2580117a762e459a9ce6437d71ee3 pid=2600 runtime=io.containerd.runc.v2 Nov 1 00:20:00.839104 systemd[1]: Started cri-containerd-202317006c2728ac5dcbdc57032f21946ab2580117a762e459a9ce6437d71ee3.scope. Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.860000 audit: BPF prog-id=114 op=LOAD Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2600 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230323331373030366332373238616335646362646335373033326632 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2600 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230323331373030366332373238616335646362646335373033326632 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.861000 audit: BPF prog-id=115 op=LOAD Nov 1 00:20:00.861000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2600 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230323331373030366332373238616335646362646335373033326632 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit: BPF prog-id=116 op=LOAD Nov 1 00:20:00.862000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2600 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230323331373030366332373238616335646362646335373033326632 Nov 1 00:20:00.862000 audit: BPF prog-id=116 op=UNLOAD Nov 1 00:20:00.862000 audit: BPF prog-id=115 op=UNLOAD Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:00.862000 audit: BPF prog-id=117 op=LOAD Nov 1 00:20:00.862000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2600 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230323331373030366332373238616335646362646335373033326632 Nov 1 00:20:00.884404 env[1484]: time="2025-11-01T00:20:00.884350656Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7dcd859c48-5nz5m,Uid:0f3a60f3-7cf0-4db7-b4fc-983c2af2c5f3,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"202317006c2728ac5dcbdc57032f21946ab2580117a762e459a9ce6437d71ee3\"" Nov 1 00:20:00.886171 env[1484]: time="2025-11-01T00:20:00.886129023Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\"" Nov 1 00:20:00.970000 audit[2666]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:00.970000 audit[2666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd79da60 a2=0 a3=1 items=0 ppid=2575 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.970000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:20:00.975000 audit[2668]: NETFILTER_CFG table=mangle:46 family=10 entries=1 op=nft_register_chain pid=2668 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:00.975000 audit[2668]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0155750 a2=0 a3=1 items=0 ppid=2575 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.976000 audit[2669]: NETFILTER_CFG table=nat:47 family=2 entries=1 op=nft_register_chain pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:00.976000 audit[2669]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb3aeec0 a2=0 a3=1 items=0 ppid=2575 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.976000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:20:00.975000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Nov 1 00:20:00.981000 audit[2670]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2670 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:00.981000 audit[2670]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe909d2c0 a2=0 a3=1 items=0 ppid=2575 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:20:00.981000 audit[2671]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2671 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:00.981000 audit[2671]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6e193f0 a2=0 a3=1 items=0 ppid=2575 pid=2671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.981000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Nov 1 00:20:00.983000 audit[2672]: NETFILTER_CFG table=filter:50 family=10 entries=1 op=nft_register_chain pid=2672 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:00.983000 audit[2672]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7e5c040 a2=0 a3=1 items=0 ppid=2575 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:00.983000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Nov 1 00:20:01.075000 audit[2673]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.075000 audit[2673]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd955bb10 a2=0 a3=1 items=0 ppid=2575 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.075000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:20:01.078000 audit[2675]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.078000 audit[2675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdcffbdd0 a2=0 a3=1 items=0 ppid=2575 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Nov 1 00:20:01.082000 audit[2678]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.082000 audit[2678]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc0a22aa0 a2=0 a3=1 items=0 ppid=2575 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.082000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Nov 1 00:20:01.083000 audit[2679]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.083000 audit[2679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8e8b160 a2=0 a3=1 items=0 ppid=2575 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:20:01.085000 audit[2681]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.085000 audit[2681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffd1ffec0 a2=0 a3=1 items=0 ppid=2575 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.085000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:20:01.087000 audit[2682]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.087000 audit[2682]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb92bff0 a2=0 a3=1 items=0 ppid=2575 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:20:01.089000 audit[2684]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.089000 audit[2684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffeaaf5e30 a2=0 a3=1 items=0 ppid=2575 pid=2684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.089000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:20:01.092000 audit[2687]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.092000 audit[2687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc81c0c30 a2=0 a3=1 items=0 ppid=2575 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Nov 1 00:20:01.093000 audit[2688]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_chain pid=2688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.093000 audit[2688]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd7a4460 a2=0 a3=1 items=0 ppid=2575 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:20:01.098000 audit[2690]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.098000 audit[2690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd8153330 a2=0 a3=1 items=0 ppid=2575 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.098000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:20:01.099000 audit[2691]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=2691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.099000 audit[2691]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe63134c0 a2=0 a3=1 items=0 ppid=2575 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:20:01.101000 audit[2693]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_rule pid=2693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.101000 audit[2693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff21f0030 a2=0 a3=1 items=0 ppid=2575 pid=2693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:20:01.104000 audit[2696]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_rule pid=2696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.104000 audit[2696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd9a1cf50 a2=0 a3=1 items=0 ppid=2575 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.104000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:20:01.107000 audit[2699]: NETFILTER_CFG table=filter:64 family=2 entries=1 op=nft_register_rule pid=2699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.107000 audit[2699]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd7e83810 a2=0 a3=1 items=0 ppid=2575 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:20:01.108000 audit[2700]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.108000 audit[2700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffebeb2a20 a2=0 a3=1 items=0 ppid=2575 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:20:01.110000 audit[2702]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.110000 audit[2702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd8870e70 a2=0 a3=1 items=0 ppid=2575 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:20:01.113000 audit[2705]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_rule pid=2705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.113000 audit[2705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcfe56310 a2=0 a3=1 items=0 ppid=2575 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:20:01.114000 audit[2706]: NETFILTER_CFG table=nat:68 family=2 entries=1 op=nft_register_chain pid=2706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.114000 audit[2706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff86c2680 a2=0 a3=1 items=0 ppid=2575 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:20:01.117000 audit[2708]: NETFILTER_CFG table=nat:69 family=2 entries=1 op=nft_register_rule pid=2708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Nov 1 00:20:01.117000 audit[2708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffeace79c0 a2=0 a3=1 items=0 ppid=2575 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:20:01.131076 kubelet[2472]: I1101 00:20:01.131018 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-tr4q6" podStartSLOduration=1.130999358 podStartE2EDuration="1.130999358s" podCreationTimestamp="2025-11-01 00:20:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:20:01.04939217 +0000 UTC m=+6.193120297" watchObservedRunningTime="2025-11-01 00:20:01.130999358 +0000 UTC m=+6.274727485" Nov 1 00:20:01.160000 audit[2714]: NETFILTER_CFG table=filter:70 family=2 entries=8 op=nft_register_rule pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:01.160000 audit[2714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffff48f0560 a2=0 a3=1 items=0 ppid=2575 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.160000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:01.181000 audit[2714]: NETFILTER_CFG table=nat:71 family=2 entries=14 op=nft_register_chain pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:01.181000 audit[2714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffff48f0560 a2=0 a3=1 items=0 ppid=2575 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.181000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:01.183000 audit[2719]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.183000 audit[2719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd0979d80 a2=0 a3=1 items=0 ppid=2575 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Nov 1 00:20:01.185000 audit[2721]: NETFILTER_CFG table=filter:73 family=10 entries=2 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.185000 audit[2721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd18e54b0 a2=0 a3=1 items=0 ppid=2575 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.185000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Nov 1 00:20:01.189000 audit[2724]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.189000 audit[2724]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc6f478e0 a2=0 a3=1 items=0 ppid=2575 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.189000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Nov 1 00:20:01.190000 audit[2725]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.190000 audit[2725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcc6d9640 a2=0 a3=1 items=0 ppid=2575 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Nov 1 00:20:01.192000 audit[2727]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.192000 audit[2727]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe85d8e60 a2=0 a3=1 items=0 ppid=2575 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.192000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Nov 1 00:20:01.193000 audit[2728]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.193000 audit[2728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd74f9bd0 a2=0 a3=1 items=0 ppid=2575 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Nov 1 00:20:01.195000 audit[2730]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.195000 audit[2730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe381c1c0 a2=0 a3=1 items=0 ppid=2575 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Nov 1 00:20:01.198000 audit[2733]: NETFILTER_CFG table=filter:79 family=10 entries=2 op=nft_register_chain pid=2733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.198000 audit[2733]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc1ec5ed0 a2=0 a3=1 items=0 ppid=2575 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.198000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Nov 1 00:20:01.200000 audit[2734]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.200000 audit[2734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe74b5f40 a2=0 a3=1 items=0 ppid=2575 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.200000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Nov 1 00:20:01.202000 audit[2736]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2736 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.202000 audit[2736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff229b740 a2=0 a3=1 items=0 ppid=2575 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Nov 1 00:20:01.203000 audit[2737]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.203000 audit[2737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc793f030 a2=0 a3=1 items=0 ppid=2575 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.203000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Nov 1 00:20:01.206000 audit[2739]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2739 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.206000 audit[2739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe0dcc4e0 a2=0 a3=1 items=0 ppid=2575 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.206000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Nov 1 00:20:01.209000 audit[2742]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2742 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.209000 audit[2742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe9635e90 a2=0 a3=1 items=0 ppid=2575 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.209000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Nov 1 00:20:01.213000 audit[2745]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.213000 audit[2745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff396a950 a2=0 a3=1 items=0 ppid=2575 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.213000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Nov 1 00:20:01.214000 audit[2746]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.214000 audit[2746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8f3a500 a2=0 a3=1 items=0 ppid=2575 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.214000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Nov 1 00:20:01.216000 audit[2748]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2748 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.216000 audit[2748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd2529810 a2=0 a3=1 items=0 ppid=2575 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:20:01.219000 audit[2751]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.219000 audit[2751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc4ea3a80 a2=0 a3=1 items=0 ppid=2575 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.219000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Nov 1 00:20:01.220000 audit[2752]: NETFILTER_CFG table=nat:89 family=10 entries=1 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.220000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff44bedf0 a2=0 a3=1 items=0 ppid=2575 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.220000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Nov 1 00:20:01.224000 audit[2754]: NETFILTER_CFG table=nat:90 family=10 entries=2 op=nft_register_chain pid=2754 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.224000 audit[2754]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffddde36e0 a2=0 a3=1 items=0 ppid=2575 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.224000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Nov 1 00:20:01.225000 audit[2755]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.225000 audit[2755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff47d4bf0 a2=0 a3=1 items=0 ppid=2575 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.225000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Nov 1 00:20:01.227000 audit[2757]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.227000 audit[2757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffeea428b0 a2=0 a3=1 items=0 ppid=2575 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:20:01.230000 audit[2760]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Nov 1 00:20:01.230000 audit[2760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcabc6860 a2=0 a3=1 items=0 ppid=2575 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.230000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Nov 1 00:20:01.236000 audit[2762]: NETFILTER_CFG table=filter:94 family=10 entries=3 op=nft_register_rule pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:20:01.236000 audit[2762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd1ae31d0 a2=0 a3=1 items=0 ppid=2575 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.236000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:01.236000 audit[2762]: NETFILTER_CFG table=nat:95 family=10 entries=7 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Nov 1 00:20:01.236000 audit[2762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd1ae31d0 a2=0 a3=1 items=0 ppid=2575 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:01.236000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:02.705789 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3225732231.mount: Deactivated successfully. Nov 1 00:20:03.295611 env[1484]: time="2025-11-01T00:20:03.295555567Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:03.301596 env[1484]: time="2025-11-01T00:20:03.301558189Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:03.305164 env[1484]: time="2025-11-01T00:20:03.305123281Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:03.308598 env[1484]: time="2025-11-01T00:20:03.308562654Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:1b629a1403f5b6d7243f7dd523d04b8a50352a33c1d4d6970b6002a8733acf2e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:03.309090 env[1484]: time="2025-11-01T00:20:03.309050495Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.7\" returns image reference \"sha256:19f52e4b7ea471a91d4186e9701288b905145dc20d4928cbbf2eac8d9dfce54b\"" Nov 1 00:20:03.312866 env[1484]: time="2025-11-01T00:20:03.312821909Z" level=info msg="CreateContainer within sandbox \"202317006c2728ac5dcbdc57032f21946ab2580117a762e459a9ce6437d71ee3\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Nov 1 00:20:03.340638 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2401192748.mount: Deactivated successfully. Nov 1 00:20:03.355972 env[1484]: time="2025-11-01T00:20:03.355928023Z" level=info msg="CreateContainer within sandbox \"202317006c2728ac5dcbdc57032f21946ab2580117a762e459a9ce6437d71ee3\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"b70bf97df4073e670af100c474a61e45043522b6da144ee888e61e6f0be5c103\"" Nov 1 00:20:03.357855 env[1484]: time="2025-11-01T00:20:03.357811910Z" level=info msg="StartContainer for \"b70bf97df4073e670af100c474a61e45043522b6da144ee888e61e6f0be5c103\"" Nov 1 00:20:03.373250 systemd[1]: Started cri-containerd-b70bf97df4073e670af100c474a61e45043522b6da144ee888e61e6f0be5c103.scope. Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.388000 audit: BPF prog-id=118 op=LOAD Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2600 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:03.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237306266393764663430373365363730616631303063343734613631 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2600 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:03.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237306266393764663430373365363730616631303063343734613631 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.389000 audit: BPF prog-id=119 op=LOAD Nov 1 00:20:03.389000 audit[2771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2600 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:03.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237306266393764663430373365363730616631303063343734613631 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit: BPF prog-id=120 op=LOAD Nov 1 00:20:03.390000 audit[2771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2600 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:03.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237306266393764663430373365363730616631303063343734613631 Nov 1 00:20:03.390000 audit: BPF prog-id=120 op=UNLOAD Nov 1 00:20:03.390000 audit: BPF prog-id=119 op=UNLOAD Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { perfmon } for pid=2771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit[2771]: AVC avc: denied { bpf } for pid=2771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:03.390000 audit: BPF prog-id=121 op=LOAD Nov 1 00:20:03.390000 audit[2771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2600 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:03.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237306266393764663430373365363730616631303063343734613631 Nov 1 00:20:03.415209 env[1484]: time="2025-11-01T00:20:03.415161956Z" level=info msg="StartContainer for \"b70bf97df4073e670af100c474a61e45043522b6da144ee888e61e6f0be5c103\" returns successfully" Nov 1 00:20:06.175256 kubelet[2472]: I1101 00:20:06.175117 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7dcd859c48-5nz5m" podStartSLOduration=3.75068725 podStartE2EDuration="6.175101128s" podCreationTimestamp="2025-11-01 00:20:00 +0000 UTC" firstStartedPulling="2025-11-01 00:20:00.885621581 +0000 UTC m=+6.029349708" lastFinishedPulling="2025-11-01 00:20:03.310035499 +0000 UTC m=+8.453763586" observedRunningTime="2025-11-01 00:20:04.066359922 +0000 UTC m=+9.210088049" watchObservedRunningTime="2025-11-01 00:20:06.175101128 +0000 UTC m=+11.318829255" Nov 1 00:20:11.712053 sudo[1808]: pam_unix(sudo:session): session closed for user root Nov 1 00:20:11.711000 audit[1808]: USER_END pid=1808 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:20:11.717703 kernel: kauditd_printk_skb: 357 callbacks suppressed Nov 1 00:20:11.717799 kernel: audit: type=1106 audit(1761956411.711:938): pid=1808 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:20:11.711000 audit[1808]: CRED_DISP pid=1808 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:20:11.762625 kernel: audit: type=1104 audit(1761956411.711:939): pid=1808 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Nov 1 00:20:11.815072 sshd[1805]: pam_unix(sshd:session): session closed for user core Nov 1 00:20:11.816000 audit[1805]: USER_END pid=1805 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:20:11.844825 systemd[1]: sshd@6-10.200.20.24:22-10.200.16.10:60428.service: Deactivated successfully. Nov 1 00:20:11.845529 systemd[1]: session-9.scope: Deactivated successfully. Nov 1 00:20:11.845683 systemd[1]: session-9.scope: Consumed 7.673s CPU time. Nov 1 00:20:11.845871 systemd-logind[1464]: Session 9 logged out. Waiting for processes to exit. Nov 1 00:20:11.846683 systemd-logind[1464]: Removed session 9. Nov 1 00:20:11.816000 audit[1805]: CRED_DISP pid=1805 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:20:11.874862 kernel: audit: type=1106 audit(1761956411.816:940): pid=1805 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:20:11.875001 kernel: audit: type=1104 audit(1761956411.816:941): pid=1805 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:20:11.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.24:22-10.200.16.10:60428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:20:11.905173 kernel: audit: type=1131 audit(1761956411.844:942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.24:22-10.200.16.10:60428 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:20:12.402000 audit[2843]: NETFILTER_CFG table=filter:96 family=2 entries=15 op=nft_register_rule pid=2843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:12.419925 kernel: audit: type=1325 audit(1761956412.402:943): table=filter:96 family=2 entries=15 op=nft_register_rule pid=2843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:12.402000 audit[2843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe41c72d0 a2=0 a3=1 items=0 ppid=2575 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:12.402000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:12.475366 kernel: audit: type=1300 audit(1761956412.402:943): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe41c72d0 a2=0 a3=1 items=0 ppid=2575 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:12.475513 kernel: audit: type=1327 audit(1761956412.402:943): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:12.450000 audit[2843]: NETFILTER_CFG table=nat:97 family=2 entries=12 op=nft_register_rule pid=2843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:12.490977 kernel: audit: type=1325 audit(1761956412.450:944): table=nat:97 family=2 entries=12 op=nft_register_rule pid=2843 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:12.450000 audit[2843]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe41c72d0 a2=0 a3=1 items=0 ppid=2575 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:12.519032 kernel: audit: type=1300 audit(1761956412.450:944): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe41c72d0 a2=0 a3=1 items=0 ppid=2575 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:12.450000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:12.525000 audit[2845]: NETFILTER_CFG table=filter:98 family=2 entries=16 op=nft_register_rule pid=2845 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:12.525000 audit[2845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd3fa16f0 a2=0 a3=1 items=0 ppid=2575 pid=2845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:12.525000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:12.531000 audit[2845]: NETFILTER_CFG table=nat:99 family=2 entries=12 op=nft_register_rule pid=2845 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:12.531000 audit[2845]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd3fa16f0 a2=0 a3=1 items=0 ppid=2575 pid=2845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:12.531000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:16.742000 audit[2847]: NETFILTER_CFG table=filter:100 family=2 entries=17 op=nft_register_rule pid=2847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:16.748620 kernel: kauditd_printk_skb: 7 callbacks suppressed Nov 1 00:20:16.748714 kernel: audit: type=1325 audit(1761956416.742:947): table=filter:100 family=2 entries=17 op=nft_register_rule pid=2847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:16.742000 audit[2847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff0390010 a2=0 a3=1 items=0 ppid=2575 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:16.798923 kernel: audit: type=1300 audit(1761956416.742:947): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff0390010 a2=0 a3=1 items=0 ppid=2575 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:16.742000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:16.819232 kernel: audit: type=1327 audit(1761956416.742:947): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:16.764000 audit[2847]: NETFILTER_CFG table=nat:101 family=2 entries=12 op=nft_register_rule pid=2847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:16.838258 kernel: audit: type=1325 audit(1761956416.764:948): table=nat:101 family=2 entries=12 op=nft_register_rule pid=2847 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:16.764000 audit[2847]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0390010 a2=0 a3=1 items=0 ppid=2575 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:16.870009 kernel: audit: type=1300 audit(1761956416.764:948): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff0390010 a2=0 a3=1 items=0 ppid=2575 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:16.764000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:16.892438 kernel: audit: type=1327 audit(1761956416.764:948): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:16.937000 audit[2849]: NETFILTER_CFG table=filter:102 family=2 entries=18 op=nft_register_rule pid=2849 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:16.937000 audit[2849]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeb376e60 a2=0 a3=1 items=0 ppid=2575 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:16.985726 kernel: audit: type=1325 audit(1761956416.937:949): table=filter:102 family=2 entries=18 op=nft_register_rule pid=2849 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:16.985841 kernel: audit: type=1300 audit(1761956416.937:949): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeb376e60 a2=0 a3=1 items=0 ppid=2575 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:16.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:17.002680 kernel: audit: type=1327 audit(1761956416.937:949): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:17.005000 audit[2849]: NETFILTER_CFG table=nat:103 family=2 entries=12 op=nft_register_rule pid=2849 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:17.005000 audit[2849]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeb376e60 a2=0 a3=1 items=0 ppid=2575 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:17.005000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:17.023912 kernel: audit: type=1325 audit(1761956417.005:950): table=nat:103 family=2 entries=12 op=nft_register_rule pid=2849 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:18.032000 audit[2852]: NETFILTER_CFG table=filter:104 family=2 entries=19 op=nft_register_rule pid=2852 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:18.032000 audit[2852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd09eda80 a2=0 a3=1 items=0 ppid=2575 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:18.032000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:18.035000 audit[2852]: NETFILTER_CFG table=nat:105 family=2 entries=12 op=nft_register_rule pid=2852 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:18.035000 audit[2852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd09eda80 a2=0 a3=1 items=0 ppid=2575 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:18.035000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:20.317000 audit[2854]: NETFILTER_CFG table=filter:106 family=2 entries=21 op=nft_register_rule pid=2854 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:20.317000 audit[2854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe065dc50 a2=0 a3=1 items=0 ppid=2575 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.317000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:20.326000 audit[2854]: NETFILTER_CFG table=nat:107 family=2 entries=12 op=nft_register_rule pid=2854 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:20.326000 audit[2854]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe065dc50 a2=0 a3=1 items=0 ppid=2575 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.326000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:20.350000 audit[2856]: NETFILTER_CFG table=filter:108 family=2 entries=22 op=nft_register_rule pid=2856 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:20.350000 audit[2856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffec3a0570 a2=0 a3=1 items=0 ppid=2575 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:20.354000 audit[2856]: NETFILTER_CFG table=nat:109 family=2 entries=12 op=nft_register_rule pid=2856 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:20.354000 audit[2856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffec3a0570 a2=0 a3=1 items=0 ppid=2575 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:20.364840 systemd[1]: Created slice kubepods-besteffort-pod9673ee1b_8614_45f2_b2bd_0cd5fa90d836.slice. Nov 1 00:20:20.475670 kubelet[2472]: I1101 00:20:20.475620 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9673ee1b-8614-45f2-b2bd-0cd5fa90d836-tigera-ca-bundle\") pod \"calico-typha-f4f85dd88-fhlsx\" (UID: \"9673ee1b-8614-45f2-b2bd-0cd5fa90d836\") " pod="calico-system/calico-typha-f4f85dd88-fhlsx" Nov 1 00:20:20.475670 kubelet[2472]: I1101 00:20:20.475672 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/9673ee1b-8614-45f2-b2bd-0cd5fa90d836-typha-certs\") pod \"calico-typha-f4f85dd88-fhlsx\" (UID: \"9673ee1b-8614-45f2-b2bd-0cd5fa90d836\") " pod="calico-system/calico-typha-f4f85dd88-fhlsx" Nov 1 00:20:20.476078 kubelet[2472]: I1101 00:20:20.475692 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5mdwj\" (UniqueName: \"kubernetes.io/projected/9673ee1b-8614-45f2-b2bd-0cd5fa90d836-kube-api-access-5mdwj\") pod \"calico-typha-f4f85dd88-fhlsx\" (UID: \"9673ee1b-8614-45f2-b2bd-0cd5fa90d836\") " pod="calico-system/calico-typha-f4f85dd88-fhlsx" Nov 1 00:20:20.554877 systemd[1]: Created slice kubepods-besteffort-pod3718260a_7815_42c0_b846_7a766e91c448.slice. Nov 1 00:20:20.669270 env[1484]: time="2025-11-01T00:20:20.668832067Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-f4f85dd88-fhlsx,Uid:9673ee1b-8614-45f2-b2bd-0cd5fa90d836,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:20.676953 kubelet[2472]: I1101 00:20:20.676910 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-cni-log-dir\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.676953 kubelet[2472]: I1101 00:20:20.676952 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-cni-net-dir\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677127 kubelet[2472]: I1101 00:20:20.676976 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-var-run-calico\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677127 kubelet[2472]: I1101 00:20:20.676993 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-xtables-lock\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677127 kubelet[2472]: I1101 00:20:20.677008 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-flexvol-driver-host\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677127 kubelet[2472]: I1101 00:20:20.677026 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-var-lib-calico\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677127 kubelet[2472]: I1101 00:20:20.677044 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3718260a-7815-42c0-b846-7a766e91c448-tigera-ca-bundle\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677241 kubelet[2472]: I1101 00:20:20.677058 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mfp78\" (UniqueName: \"kubernetes.io/projected/3718260a-7815-42c0-b846-7a766e91c448-kube-api-access-mfp78\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677241 kubelet[2472]: I1101 00:20:20.677077 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-cni-bin-dir\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677241 kubelet[2472]: I1101 00:20:20.677091 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-policysync\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677241 kubelet[2472]: I1101 00:20:20.677112 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/3718260a-7815-42c0-b846-7a766e91c448-node-certs\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.677241 kubelet[2472]: I1101 00:20:20.677128 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3718260a-7815-42c0-b846-7a766e91c448-lib-modules\") pod \"calico-node-d6lfr\" (UID: \"3718260a-7815-42c0-b846-7a766e91c448\") " pod="calico-system/calico-node-d6lfr" Nov 1 00:20:20.704658 env[1484]: time="2025-11-01T00:20:20.704579432Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:20.704658 env[1484]: time="2025-11-01T00:20:20.704618672Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:20.704909 env[1484]: time="2025-11-01T00:20:20.704639072Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:20.705244 env[1484]: time="2025-11-01T00:20:20.705133394Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7d32b89f5690c889ce6f36f6ac68ba435e899c9d6dd112003b8344848c31f94a pid=2869 runtime=io.containerd.runc.v2 Nov 1 00:20:20.728114 systemd[1]: Started cri-containerd-7d32b89f5690c889ce6f36f6ac68ba435e899c9d6dd112003b8344848c31f94a.scope. Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.751000 audit: BPF prog-id=122 op=LOAD Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2869 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764333262383966353639306338383963653666333666366163363862 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2869 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764333262383966353639306338383963653666333666366163363862 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit: BPF prog-id=123 op=LOAD Nov 1 00:20:20.752000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2869 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764333262383966353639306338383963653666333666366163363862 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit: BPF prog-id=124 op=LOAD Nov 1 00:20:20.752000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2869 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764333262383966353639306338383963653666333666366163363862 Nov 1 00:20:20.752000 audit: BPF prog-id=124 op=UNLOAD Nov 1 00:20:20.752000 audit: BPF prog-id=123 op=UNLOAD Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { perfmon } for pid=2879 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit[2879]: AVC avc: denied { bpf } for pid=2879 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.752000 audit: BPF prog-id=125 op=LOAD Nov 1 00:20:20.752000 audit[2879]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2869 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.752000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764333262383966353639306338383963653666333666366163363862 Nov 1 00:20:20.772100 kubelet[2472]: E1101 00:20:20.771732 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:20.780310 kubelet[2472]: E1101 00:20:20.780221 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.780310 kubelet[2472]: W1101 00:20:20.780245 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.780310 kubelet[2472]: E1101 00:20:20.780277 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.785873 env[1484]: time="2025-11-01T00:20:20.785828546Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-f4f85dd88-fhlsx,Uid:9673ee1b-8614-45f2-b2bd-0cd5fa90d836,Namespace:calico-system,Attempt:0,} returns sandbox id \"7d32b89f5690c889ce6f36f6ac68ba435e899c9d6dd112003b8344848c31f94a\"" Nov 1 00:20:20.786517 kubelet[2472]: E1101 00:20:20.786478 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.786517 kubelet[2472]: W1101 00:20:20.786505 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.786639 kubelet[2472]: E1101 00:20:20.786532 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.786859 kubelet[2472]: E1101 00:20:20.786840 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.786859 kubelet[2472]: W1101 00:20:20.786855 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.786958 kubelet[2472]: E1101 00:20:20.786946 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.787119 kubelet[2472]: E1101 00:20:20.787102 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.787119 kubelet[2472]: W1101 00:20:20.787115 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.787203 kubelet[2472]: E1101 00:20:20.787128 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.787362 kubelet[2472]: E1101 00:20:20.787336 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.787362 kubelet[2472]: W1101 00:20:20.787356 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.787443 kubelet[2472]: E1101 00:20:20.787371 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.787635 kubelet[2472]: E1101 00:20:20.787616 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.787635 kubelet[2472]: W1101 00:20:20.787632 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.787716 kubelet[2472]: E1101 00:20:20.787648 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.787972 kubelet[2472]: E1101 00:20:20.787951 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.787972 kubelet[2472]: W1101 00:20:20.787973 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.788061 kubelet[2472]: E1101 00:20:20.787984 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.788239 kubelet[2472]: E1101 00:20:20.788221 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.788239 kubelet[2472]: W1101 00:20:20.788235 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.788322 kubelet[2472]: E1101 00:20:20.788245 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.790763 env[1484]: time="2025-11-01T00:20:20.790730397Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\"" Nov 1 00:20:20.794552 kubelet[2472]: E1101 00:20:20.794521 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.794552 kubelet[2472]: W1101 00:20:20.794543 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.794672 kubelet[2472]: E1101 00:20:20.794581 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.800311 kubelet[2472]: E1101 00:20:20.799096 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.800311 kubelet[2472]: W1101 00:20:20.799124 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.800311 kubelet[2472]: E1101 00:20:20.799144 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.831751 kubelet[2472]: E1101 00:20:20.831714 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.831751 kubelet[2472]: W1101 00:20:20.831738 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.831934 kubelet[2472]: E1101 00:20:20.831762 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.831963 kubelet[2472]: E1101 00:20:20.831935 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.831987 kubelet[2472]: W1101 00:20:20.831944 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.832011 kubelet[2472]: E1101 00:20:20.831992 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.832222 kubelet[2472]: E1101 00:20:20.832187 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.832222 kubelet[2472]: W1101 00:20:20.832202 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.832222 kubelet[2472]: E1101 00:20:20.832212 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.832383 kubelet[2472]: E1101 00:20:20.832362 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.832383 kubelet[2472]: W1101 00:20:20.832374 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.832383 kubelet[2472]: E1101 00:20:20.832382 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.832665 kubelet[2472]: E1101 00:20:20.832641 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.832665 kubelet[2472]: W1101 00:20:20.832657 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.832665 kubelet[2472]: E1101 00:20:20.832667 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.832899 kubelet[2472]: E1101 00:20:20.832860 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.832899 kubelet[2472]: W1101 00:20:20.832873 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.832899 kubelet[2472]: E1101 00:20:20.832892 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.834026 kubelet[2472]: E1101 00:20:20.833994 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.834026 kubelet[2472]: W1101 00:20:20.834022 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.834158 kubelet[2472]: E1101 00:20:20.834040 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.834251 kubelet[2472]: E1101 00:20:20.834229 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.834251 kubelet[2472]: W1101 00:20:20.834243 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.834251 kubelet[2472]: E1101 00:20:20.834252 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.834813 kubelet[2472]: E1101 00:20:20.834780 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.834813 kubelet[2472]: W1101 00:20:20.834797 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.834813 kubelet[2472]: E1101 00:20:20.834816 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.835011 kubelet[2472]: E1101 00:20:20.834988 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.835011 kubelet[2472]: W1101 00:20:20.835001 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.835011 kubelet[2472]: E1101 00:20:20.835010 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.835638 kubelet[2472]: E1101 00:20:20.835601 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.835638 kubelet[2472]: W1101 00:20:20.835621 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.835638 kubelet[2472]: E1101 00:20:20.835640 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.835829 kubelet[2472]: E1101 00:20:20.835806 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.835829 kubelet[2472]: W1101 00:20:20.835819 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.835829 kubelet[2472]: E1101 00:20:20.835827 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.836104 kubelet[2472]: E1101 00:20:20.836080 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.836104 kubelet[2472]: W1101 00:20:20.836096 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.836104 kubelet[2472]: E1101 00:20:20.836107 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.836280 kubelet[2472]: E1101 00:20:20.836261 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.836280 kubelet[2472]: W1101 00:20:20.836273 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.836280 kubelet[2472]: E1101 00:20:20.836281 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.837122 kubelet[2472]: E1101 00:20:20.837096 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.837221 kubelet[2472]: W1101 00:20:20.837115 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.837221 kubelet[2472]: E1101 00:20:20.837177 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.837370 kubelet[2472]: E1101 00:20:20.837350 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.837370 kubelet[2472]: W1101 00:20:20.837364 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.837441 kubelet[2472]: E1101 00:20:20.837372 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.838032 kubelet[2472]: E1101 00:20:20.838009 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.838032 kubelet[2472]: W1101 00:20:20.838030 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.838125 kubelet[2472]: E1101 00:20:20.838049 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.838236 kubelet[2472]: E1101 00:20:20.838207 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.838236 kubelet[2472]: W1101 00:20:20.838220 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.838236 kubelet[2472]: E1101 00:20:20.838229 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.838473 kubelet[2472]: E1101 00:20:20.838450 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.838473 kubelet[2472]: W1101 00:20:20.838465 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.838473 kubelet[2472]: E1101 00:20:20.838475 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.838651 kubelet[2472]: E1101 00:20:20.838629 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.838651 kubelet[2472]: W1101 00:20:20.838642 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.838651 kubelet[2472]: E1101 00:20:20.838650 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.858355 env[1484]: time="2025-11-01T00:20:20.858311918Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-d6lfr,Uid:3718260a-7815-42c0-b846-7a766e91c448,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:20.879543 kubelet[2472]: E1101 00:20:20.879510 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.879543 kubelet[2472]: W1101 00:20:20.879535 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.879732 kubelet[2472]: E1101 00:20:20.879555 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.879732 kubelet[2472]: I1101 00:20:20.879587 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/864706af-b74b-4daa-9415-eca81f18da43-registration-dir\") pod \"csi-node-driver-fns4p\" (UID: \"864706af-b74b-4daa-9415-eca81f18da43\") " pod="calico-system/csi-node-driver-fns4p" Nov 1 00:20:20.879993 kubelet[2472]: E1101 00:20:20.879970 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.879993 kubelet[2472]: W1101 00:20:20.879984 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.880091 kubelet[2472]: E1101 00:20:20.880000 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.880091 kubelet[2472]: I1101 00:20:20.880019 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/864706af-b74b-4daa-9415-eca81f18da43-kubelet-dir\") pod \"csi-node-driver-fns4p\" (UID: \"864706af-b74b-4daa-9415-eca81f18da43\") " pod="calico-system/csi-node-driver-fns4p" Nov 1 00:20:20.880183 kubelet[2472]: E1101 00:20:20.880159 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.880183 kubelet[2472]: W1101 00:20:20.880177 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.880271 kubelet[2472]: E1101 00:20:20.880186 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.880271 kubelet[2472]: I1101 00:20:20.880200 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/864706af-b74b-4daa-9415-eca81f18da43-socket-dir\") pod \"csi-node-driver-fns4p\" (UID: \"864706af-b74b-4daa-9415-eca81f18da43\") " pod="calico-system/csi-node-driver-fns4p" Nov 1 00:20:20.880505 kubelet[2472]: E1101 00:20:20.880485 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.880505 kubelet[2472]: W1101 00:20:20.880500 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.880600 kubelet[2472]: E1101 00:20:20.880516 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.880600 kubelet[2472]: I1101 00:20:20.880530 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/864706af-b74b-4daa-9415-eca81f18da43-varrun\") pod \"csi-node-driver-fns4p\" (UID: \"864706af-b74b-4daa-9415-eca81f18da43\") " pod="calico-system/csi-node-driver-fns4p" Nov 1 00:20:20.880688 kubelet[2472]: E1101 00:20:20.880671 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.880688 kubelet[2472]: W1101 00:20:20.880683 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.880770 kubelet[2472]: E1101 00:20:20.880693 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.880770 kubelet[2472]: I1101 00:20:20.880709 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c579n\" (UniqueName: \"kubernetes.io/projected/864706af-b74b-4daa-9415-eca81f18da43-kube-api-access-c579n\") pod \"csi-node-driver-fns4p\" (UID: \"864706af-b74b-4daa-9415-eca81f18da43\") " pod="calico-system/csi-node-driver-fns4p" Nov 1 00:20:20.880991 kubelet[2472]: E1101 00:20:20.880971 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.880991 kubelet[2472]: W1101 00:20:20.880983 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.881086 kubelet[2472]: E1101 00:20:20.881010 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.881157 kubelet[2472]: E1101 00:20:20.881139 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.881157 kubelet[2472]: W1101 00:20:20.881152 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.881372 kubelet[2472]: E1101 00:20:20.881246 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.881447 kubelet[2472]: E1101 00:20:20.881390 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.881447 kubelet[2472]: W1101 00:20:20.881399 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.881665 kubelet[2472]: E1101 00:20:20.881519 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.881665 kubelet[2472]: E1101 00:20:20.881525 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.881665 kubelet[2472]: W1101 00:20:20.881552 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.881665 kubelet[2472]: E1101 00:20:20.881565 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.882014 kubelet[2472]: E1101 00:20:20.881865 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.882014 kubelet[2472]: W1101 00:20:20.881876 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.882014 kubelet[2472]: E1101 00:20:20.881936 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.882343 kubelet[2472]: E1101 00:20:20.882188 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.882343 kubelet[2472]: W1101 00:20:20.882199 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.882343 kubelet[2472]: E1101 00:20:20.882221 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.882696 kubelet[2472]: E1101 00:20:20.882560 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.882696 kubelet[2472]: W1101 00:20:20.882574 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.882696 kubelet[2472]: E1101 00:20:20.882586 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.883017 kubelet[2472]: E1101 00:20:20.882863 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.883017 kubelet[2472]: W1101 00:20:20.882875 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.883017 kubelet[2472]: E1101 00:20:20.882908 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.883325 kubelet[2472]: E1101 00:20:20.883196 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.883325 kubelet[2472]: W1101 00:20:20.883211 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.883325 kubelet[2472]: E1101 00:20:20.883222 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.883599 kubelet[2472]: E1101 00:20:20.883556 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.883599 kubelet[2472]: W1101 00:20:20.883568 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.883599 kubelet[2472]: E1101 00:20:20.883579 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.896045 env[1484]: time="2025-11-01T00:20:20.895955488Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:20.896045 env[1484]: time="2025-11-01T00:20:20.896002208Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:20.896045 env[1484]: time="2025-11-01T00:20:20.896019648Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:20.896510 env[1484]: time="2025-11-01T00:20:20.896469609Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629 pid=2957 runtime=io.containerd.runc.v2 Nov 1 00:20:20.908016 systemd[1]: Started cri-containerd-a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629.scope. Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.922000 audit: BPF prog-id=126 op=LOAD Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2957 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363135366666656438666562376166343738623462383937643365 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2957 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363135366666656438666562376166343738623462383937643365 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit: BPF prog-id=127 op=LOAD Nov 1 00:20:20.927000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2957 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363135366666656438666562376166343738623462383937643365 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit: BPF prog-id=128 op=LOAD Nov 1 00:20:20.927000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2957 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363135366666656438666562376166343738623462383937643365 Nov 1 00:20:20.927000 audit: BPF prog-id=128 op=UNLOAD Nov 1 00:20:20.927000 audit: BPF prog-id=127 op=UNLOAD Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { perfmon } for pid=2966 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit[2966]: AVC avc: denied { bpf } for pid=2966 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:20.927000 audit: BPF prog-id=129 op=LOAD Nov 1 00:20:20.927000 audit[2966]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2957 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:20.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134363135366666656438666562376166343738623462383937643365 Nov 1 00:20:20.945592 env[1484]: time="2025-11-01T00:20:20.945547606Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-d6lfr,Uid:3718260a-7815-42c0-b846-7a766e91c448,Namespace:calico-system,Attempt:0,} returns sandbox id \"a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629\"" Nov 1 00:20:20.981636 kubelet[2472]: E1101 00:20:20.981603 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.981636 kubelet[2472]: W1101 00:20:20.981627 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.981636 kubelet[2472]: E1101 00:20:20.981647 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.981853 kubelet[2472]: E1101 00:20:20.981825 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.981853 kubelet[2472]: W1101 00:20:20.981834 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.981853 kubelet[2472]: E1101 00:20:20.981843 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.982126 kubelet[2472]: E1101 00:20:20.982104 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.982126 kubelet[2472]: W1101 00:20:20.982118 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.982126 kubelet[2472]: E1101 00:20:20.982133 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.982294 kubelet[2472]: E1101 00:20:20.982276 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.982294 kubelet[2472]: W1101 00:20:20.982290 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.982381 kubelet[2472]: E1101 00:20:20.982304 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.982567 kubelet[2472]: E1101 00:20:20.982550 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.982567 kubelet[2472]: W1101 00:20:20.982563 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.982567 kubelet[2472]: E1101 00:20:20.982577 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.982754 kubelet[2472]: E1101 00:20:20.982738 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.982754 kubelet[2472]: W1101 00:20:20.982751 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.982836 kubelet[2472]: E1101 00:20:20.982766 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.983027 kubelet[2472]: E1101 00:20:20.983007 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.983027 kubelet[2472]: W1101 00:20:20.983020 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.983027 kubelet[2472]: E1101 00:20:20.983034 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.983179 kubelet[2472]: E1101 00:20:20.983160 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.983179 kubelet[2472]: W1101 00:20:20.983174 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.983248 kubelet[2472]: E1101 00:20:20.983182 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.983592 kubelet[2472]: E1101 00:20:20.983480 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.983592 kubelet[2472]: W1101 00:20:20.983496 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.983592 kubelet[2472]: E1101 00:20:20.983521 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.983943 kubelet[2472]: E1101 00:20:20.983819 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.983943 kubelet[2472]: W1101 00:20:20.983830 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.983943 kubelet[2472]: E1101 00:20:20.983897 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.984140 kubelet[2472]: E1101 00:20:20.984128 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.984221 kubelet[2472]: W1101 00:20:20.984209 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.984370 kubelet[2472]: E1101 00:20:20.984350 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.984507 kubelet[2472]: E1101 00:20:20.984494 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.984582 kubelet[2472]: W1101 00:20:20.984570 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.984736 kubelet[2472]: E1101 00:20:20.984722 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.984870 kubelet[2472]: E1101 00:20:20.984859 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.984994 kubelet[2472]: W1101 00:20:20.984980 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.985085 kubelet[2472]: E1101 00:20:20.985068 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.985348 kubelet[2472]: E1101 00:20:20.985335 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.985432 kubelet[2472]: W1101 00:20:20.985418 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.985576 kubelet[2472]: E1101 00:20:20.985557 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.985715 kubelet[2472]: E1101 00:20:20.985703 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.985791 kubelet[2472]: W1101 00:20:20.985779 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.986007 kubelet[2472]: E1101 00:20:20.985993 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.986294 kubelet[2472]: E1101 00:20:20.986280 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.986383 kubelet[2472]: W1101 00:20:20.986369 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.986538 kubelet[2472]: E1101 00:20:20.986525 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.986690 kubelet[2472]: E1101 00:20:20.986679 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.986773 kubelet[2472]: W1101 00:20:20.986760 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.986931 kubelet[2472]: E1101 00:20:20.986911 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.987135 kubelet[2472]: E1101 00:20:20.987121 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.987216 kubelet[2472]: W1101 00:20:20.987203 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.987307 kubelet[2472]: E1101 00:20:20.987286 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.987570 kubelet[2472]: E1101 00:20:20.987556 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.987661 kubelet[2472]: W1101 00:20:20.987646 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.987753 kubelet[2472]: E1101 00:20:20.987737 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.987978 kubelet[2472]: E1101 00:20:20.987963 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.988068 kubelet[2472]: W1101 00:20:20.988054 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.988157 kubelet[2472]: E1101 00:20:20.988135 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.988400 kubelet[2472]: E1101 00:20:20.988384 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.988478 kubelet[2472]: W1101 00:20:20.988464 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.988561 kubelet[2472]: E1101 00:20:20.988538 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.988789 kubelet[2472]: E1101 00:20:20.988774 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.988862 kubelet[2472]: W1101 00:20:20.988848 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.988975 kubelet[2472]: E1101 00:20:20.988954 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.989256 kubelet[2472]: E1101 00:20:20.989240 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.989342 kubelet[2472]: W1101 00:20:20.989329 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.989435 kubelet[2472]: E1101 00:20:20.989407 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.989661 kubelet[2472]: E1101 00:20:20.989636 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.989661 kubelet[2472]: W1101 00:20:20.989653 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.989733 kubelet[2472]: E1101 00:20:20.989666 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:20.991215 kubelet[2472]: E1101 00:20:20.991029 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:20.991215 kubelet[2472]: W1101 00:20:20.991046 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:20.991215 kubelet[2472]: E1101 00:20:20.991059 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:21.000542 kubelet[2472]: E1101 00:20:21.000510 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:21.000542 kubelet[2472]: W1101 00:20:21.000533 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:21.000542 kubelet[2472]: E1101 00:20:21.000550 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:21.371000 audit[3020]: NETFILTER_CFG table=filter:110 family=2 entries=22 op=nft_register_rule pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:21.371000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffc9f7f430 a2=0 a3=1 items=0 ppid=2575 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:21.371000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:21.376000 audit[3020]: NETFILTER_CFG table=nat:111 family=2 entries=12 op=nft_register_rule pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:21.376000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc9f7f430 a2=0 a3=1 items=0 ppid=2575 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:21.376000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:21.597258 systemd[1]: run-containerd-runc-k8s.io-7d32b89f5690c889ce6f36f6ac68ba435e899c9d6dd112003b8344848c31f94a-runc.g9CuIg.mount: Deactivated successfully. Nov 1 00:20:21.879871 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2320848226.mount: Deactivated successfully. Nov 1 00:20:22.587210 env[1484]: time="2025-11-01T00:20:22.587170240Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:22.593344 env[1484]: time="2025-11-01T00:20:22.593306974Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:22.597515 env[1484]: time="2025-11-01T00:20:22.597477984Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:22.602410 env[1484]: time="2025-11-01T00:20:22.602376355Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:6f437220b5b3c627fb4a0fc8dc323363101f3c22a8f337612c2a1ddfb73b810c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:22.603172 env[1484]: time="2025-11-01T00:20:22.603147637Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.4\" returns image reference \"sha256:5fe38d12a54098df5aaf5ec7228dc2f976f60cb4f434d7256f03126b004fdc5b\"" Nov 1 00:20:22.604598 env[1484]: time="2025-11-01T00:20:22.604575120Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\"" Nov 1 00:20:22.618287 env[1484]: time="2025-11-01T00:20:22.618245551Z" level=info msg="CreateContainer within sandbox \"7d32b89f5690c889ce6f36f6ac68ba435e899c9d6dd112003b8344848c31f94a\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Nov 1 00:20:22.646413 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount842859961.mount: Deactivated successfully. Nov 1 00:20:22.664421 env[1484]: time="2025-11-01T00:20:22.664339016Z" level=info msg="CreateContainer within sandbox \"7d32b89f5690c889ce6f36f6ac68ba435e899c9d6dd112003b8344848c31f94a\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"b02ad3f3df730e669c682c83cc559759e3af67416eeffb66a9a0d08f8ec76b33\"" Nov 1 00:20:22.667031 env[1484]: time="2025-11-01T00:20:22.666962782Z" level=info msg="StartContainer for \"b02ad3f3df730e669c682c83cc559759e3af67416eeffb66a9a0d08f8ec76b33\"" Nov 1 00:20:22.692638 systemd[1]: Started cri-containerd-b02ad3f3df730e669c682c83cc559759e3af67416eeffb66a9a0d08f8ec76b33.scope. Nov 1 00:20:22.716914 kernel: kauditd_printk_skb: 140 callbacks suppressed Nov 1 00:20:22.717009 kernel: audit: type=1400 audit(1761956422.709:995): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.752190 kernel: audit: type=1400 audit(1761956422.709:996): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.769692 kernel: audit: type=1400 audit(1761956422.709:997): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.789393 kernel: audit: type=1400 audit(1761956422.709:998): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.807624 kernel: audit: type=1400 audit(1761956422.709:999): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.825783 kernel: audit: type=1400 audit(1761956422.709:1000): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.864464 kernel: audit: type=1400 audit(1761956422.709:1001): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.864570 kernel: audit: type=1400 audit(1761956422.709:1002): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.885415 kernel: audit: type=1400 audit(1761956422.709:1003): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.715000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.715000 audit: BPF prog-id=130 op=LOAD Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2869 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:22.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326164336633646637333065363639633638326338336363353539 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2869 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:22.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326164336633646637333065363639633638326338336363353539 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.906947 kernel: audit: type=1400 audit(1761956422.715:1004): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit: BPF prog-id=131 op=LOAD Nov 1 00:20:22.733000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2869 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:22.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326164336633646637333065363639633638326338336363353539 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit: BPF prog-id=132 op=LOAD Nov 1 00:20:22.733000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2869 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:22.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326164336633646637333065363639633638326338336363353539 Nov 1 00:20:22.733000 audit: BPF prog-id=132 op=UNLOAD Nov 1 00:20:22.733000 audit: BPF prog-id=131 op=UNLOAD Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:22.733000 audit: BPF prog-id=133 op=LOAD Nov 1 00:20:22.733000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2869 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:22.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326164336633646637333065363639633638326338336363353539 Nov 1 00:20:22.908319 env[1484]: time="2025-11-01T00:20:22.908272011Z" level=info msg="StartContainer for \"b02ad3f3df730e669c682c83cc559759e3af67416eeffb66a9a0d08f8ec76b33\" returns successfully" Nov 1 00:20:22.972813 kubelet[2472]: E1101 00:20:22.972761 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:23.116436 kubelet[2472]: I1101 00:20:23.116286 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-f4f85dd88-fhlsx" podStartSLOduration=1.3020969550000001 podStartE2EDuration="3.116267999s" podCreationTimestamp="2025-11-01 00:20:20 +0000 UTC" firstStartedPulling="2025-11-01 00:20:20.790289596 +0000 UTC m=+25.934017723" lastFinishedPulling="2025-11-01 00:20:22.60446068 +0000 UTC m=+27.748188767" observedRunningTime="2025-11-01 00:20:23.115589998 +0000 UTC m=+28.259318125" watchObservedRunningTime="2025-11-01 00:20:23.116267999 +0000 UTC m=+28.259996126" Nov 1 00:20:23.154092 kubelet[2472]: E1101 00:20:23.154053 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.154092 kubelet[2472]: W1101 00:20:23.154078 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.154092 kubelet[2472]: E1101 00:20:23.154099 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.154428 kubelet[2472]: E1101 00:20:23.154406 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.154428 kubelet[2472]: W1101 00:20:23.154422 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.154507 kubelet[2472]: E1101 00:20:23.154437 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.154623 kubelet[2472]: E1101 00:20:23.154603 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.154623 kubelet[2472]: W1101 00:20:23.154615 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.154623 kubelet[2472]: E1101 00:20:23.154624 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.154782 kubelet[2472]: E1101 00:20:23.154763 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.154782 kubelet[2472]: W1101 00:20:23.154775 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.154782 kubelet[2472]: E1101 00:20:23.154783 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.154953 kubelet[2472]: E1101 00:20:23.154935 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.154953 kubelet[2472]: W1101 00:20:23.154947 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155021 kubelet[2472]: E1101 00:20:23.154955 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.155115 kubelet[2472]: E1101 00:20:23.155088 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.155115 kubelet[2472]: W1101 00:20:23.155107 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155115 kubelet[2472]: E1101 00:20:23.155115 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.155248 kubelet[2472]: E1101 00:20:23.155228 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.155248 kubelet[2472]: W1101 00:20:23.155245 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155314 kubelet[2472]: E1101 00:20:23.155254 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.155390 kubelet[2472]: E1101 00:20:23.155370 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.155390 kubelet[2472]: W1101 00:20:23.155388 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155457 kubelet[2472]: E1101 00:20:23.155396 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.155547 kubelet[2472]: E1101 00:20:23.155524 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.155547 kubelet[2472]: W1101 00:20:23.155542 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155619 kubelet[2472]: E1101 00:20:23.155549 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.155683 kubelet[2472]: E1101 00:20:23.155665 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.155683 kubelet[2472]: W1101 00:20:23.155682 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155748 kubelet[2472]: E1101 00:20:23.155690 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.155826 kubelet[2472]: E1101 00:20:23.155806 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.155826 kubelet[2472]: W1101 00:20:23.155824 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155903 kubelet[2472]: E1101 00:20:23.155832 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.155988 kubelet[2472]: E1101 00:20:23.155962 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.155988 kubelet[2472]: W1101 00:20:23.155980 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.155988 kubelet[2472]: E1101 00:20:23.155988 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.156144 kubelet[2472]: E1101 00:20:23.156120 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.156144 kubelet[2472]: W1101 00:20:23.156138 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.156200 kubelet[2472]: E1101 00:20:23.156151 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.156316 kubelet[2472]: E1101 00:20:23.156296 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.156316 kubelet[2472]: W1101 00:20:23.156308 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.156316 kubelet[2472]: E1101 00:20:23.156316 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.156464 kubelet[2472]: E1101 00:20:23.156441 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.156464 kubelet[2472]: W1101 00:20:23.156459 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.156524 kubelet[2472]: E1101 00:20:23.156467 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.211162 kubelet[2472]: E1101 00:20:23.211116 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.211162 kubelet[2472]: W1101 00:20:23.211140 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.211162 kubelet[2472]: E1101 00:20:23.211160 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.211556 kubelet[2472]: E1101 00:20:23.211522 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.211556 kubelet[2472]: W1101 00:20:23.211540 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.211556 kubelet[2472]: E1101 00:20:23.211555 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.211960 kubelet[2472]: E1101 00:20:23.211934 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.211960 kubelet[2472]: W1101 00:20:23.211951 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.212066 kubelet[2472]: E1101 00:20:23.211971 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.212182 kubelet[2472]: E1101 00:20:23.212159 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.212182 kubelet[2472]: W1101 00:20:23.212173 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.212253 kubelet[2472]: E1101 00:20:23.212184 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.212332 kubelet[2472]: E1101 00:20:23.212323 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.212362 kubelet[2472]: W1101 00:20:23.212331 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.212362 kubelet[2472]: E1101 00:20:23.212339 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.212477 kubelet[2472]: E1101 00:20:23.212455 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.212477 kubelet[2472]: W1101 00:20:23.212475 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.212558 kubelet[2472]: E1101 00:20:23.212537 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.212661 kubelet[2472]: E1101 00:20:23.212643 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.212661 kubelet[2472]: W1101 00:20:23.212654 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.212731 kubelet[2472]: E1101 00:20:23.212717 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.212833 kubelet[2472]: E1101 00:20:23.212813 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.212833 kubelet[2472]: W1101 00:20:23.212824 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.212833 kubelet[2472]: E1101 00:20:23.212834 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.213048 kubelet[2472]: E1101 00:20:23.213026 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.213048 kubelet[2472]: W1101 00:20:23.213039 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.213048 kubelet[2472]: E1101 00:20:23.213050 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.213215 kubelet[2472]: E1101 00:20:23.213194 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.213215 kubelet[2472]: W1101 00:20:23.213208 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.213215 kubelet[2472]: E1101 00:20:23.213216 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.213397 kubelet[2472]: E1101 00:20:23.213368 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.213397 kubelet[2472]: W1101 00:20:23.213388 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.213397 kubelet[2472]: E1101 00:20:23.213399 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.213800 kubelet[2472]: E1101 00:20:23.213774 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.213800 kubelet[2472]: W1101 00:20:23.213787 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.213800 kubelet[2472]: E1101 00:20:23.213800 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.215166 kubelet[2472]: E1101 00:20:23.214192 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.215166 kubelet[2472]: W1101 00:20:23.214202 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.215166 kubelet[2472]: E1101 00:20:23.214269 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.217048 kubelet[2472]: E1101 00:20:23.217004 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.217048 kubelet[2472]: W1101 00:20:23.217037 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.217177 kubelet[2472]: E1101 00:20:23.217147 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.217326 kubelet[2472]: E1101 00:20:23.217303 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.217326 kubelet[2472]: W1101 00:20:23.217317 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.217422 kubelet[2472]: E1101 00:20:23.217337 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.217779 kubelet[2472]: E1101 00:20:23.217751 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.217779 kubelet[2472]: W1101 00:20:23.217771 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.217852 kubelet[2472]: E1101 00:20:23.217784 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.218115 kubelet[2472]: E1101 00:20:23.218097 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.218115 kubelet[2472]: W1101 00:20:23.218111 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.218195 kubelet[2472]: E1101 00:20:23.218121 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.218475 kubelet[2472]: E1101 00:20:23.218452 2472 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Nov 1 00:20:23.218475 kubelet[2472]: W1101 00:20:23.218466 2472 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Nov 1 00:20:23.218475 kubelet[2472]: E1101 00:20:23.218475 2472 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Nov 1 00:20:23.742502 env[1484]: time="2025-11-01T00:20:23.742451954Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:23.748952 env[1484]: time="2025-11-01T00:20:23.748900809Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:23.753210 env[1484]: time="2025-11-01T00:20:23.753177858Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:23.758600 env[1484]: time="2025-11-01T00:20:23.758555710Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:50bdfe370b7308fa9957ed1eaccd094aa4f27f9a4f1dfcfef2f8a7696a1551e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:23.758836 env[1484]: time="2025-11-01T00:20:23.758806311Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.4\" returns image reference \"sha256:90ff755393144dc5a3c05f95ffe1a3ecd2f89b98ecf36d9e4721471b80af4640\"" Nov 1 00:20:23.762252 env[1484]: time="2025-11-01T00:20:23.762209678Z" level=info msg="CreateContainer within sandbox \"a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Nov 1 00:20:23.786784 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2740311990.mount: Deactivated successfully. Nov 1 00:20:23.801375 env[1484]: time="2025-11-01T00:20:23.801297765Z" level=info msg="CreateContainer within sandbox \"a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf\"" Nov 1 00:20:23.802372 env[1484]: time="2025-11-01T00:20:23.802338328Z" level=info msg="StartContainer for \"312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf\"" Nov 1 00:20:23.824330 systemd[1]: Started cri-containerd-312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf.scope. Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2957 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326664646337383935366238356331303737613437613461646139 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit: BPF prog-id=134 op=LOAD Nov 1 00:20:23.838000 audit[3103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2957 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326664646337383935366238356331303737613437613461646139 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit: BPF prog-id=135 op=LOAD Nov 1 00:20:23.838000 audit[3103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2957 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326664646337383935366238356331303737613437613461646139 Nov 1 00:20:23.838000 audit: BPF prog-id=135 op=UNLOAD Nov 1 00:20:23.838000 audit: BPF prog-id=134 op=UNLOAD Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { perfmon } for pid=3103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit[3103]: AVC avc: denied { bpf } for pid=3103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:23.838000 audit: BPF prog-id=136 op=LOAD Nov 1 00:20:23.838000 audit[3103]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2957 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:23.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331326664646337383935366238356331303737613437613461646139 Nov 1 00:20:23.859866 env[1484]: time="2025-11-01T00:20:23.859807136Z" level=info msg="StartContainer for \"312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf\" returns successfully" Nov 1 00:20:23.871397 systemd[1]: cri-containerd-312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf.scope: Deactivated successfully. Nov 1 00:20:23.875000 audit: BPF prog-id=136 op=UNLOAD Nov 1 00:20:24.084064 kubelet[2472]: I1101 00:20:24.084031 2472 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:20:24.610366 systemd[1]: run-containerd-runc-k8s.io-312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf-runc.JzDIe2.mount: Deactivated successfully. Nov 1 00:20:24.610458 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf-rootfs.mount: Deactivated successfully. Nov 1 00:20:24.902558 env[1484]: time="2025-11-01T00:20:24.902445535Z" level=info msg="shim disconnected" id=312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf Nov 1 00:20:24.902558 env[1484]: time="2025-11-01T00:20:24.902490015Z" level=warning msg="cleaning up after shim disconnected" id=312fddc78956b85c1077a47a4ada96fec41ab08654708810d9fedcc382ed4edf namespace=k8s.io Nov 1 00:20:24.902558 env[1484]: time="2025-11-01T00:20:24.902499375Z" level=info msg="cleaning up dead shim" Nov 1 00:20:24.909780 env[1484]: time="2025-11-01T00:20:24.909731751Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:20:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3145 runtime=io.containerd.runc.v2\n" Nov 1 00:20:24.975197 kubelet[2472]: E1101 00:20:24.975164 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:25.088085 env[1484]: time="2025-11-01T00:20:25.088048576Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\"" Nov 1 00:20:26.974416 kubelet[2472]: E1101 00:20:26.974362 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:27.615797 env[1484]: time="2025-11-01T00:20:27.615742151Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:27.623562 env[1484]: time="2025-11-01T00:20:27.623505166Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:27.627446 env[1484]: time="2025-11-01T00:20:27.627410094Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:27.630913 env[1484]: time="2025-11-01T00:20:27.630841901Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:273501a9cfbd848ade2b6a8452dfafdd3adb4f9bf9aec45c398a5d19b8026627,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:27.631503 env[1484]: time="2025-11-01T00:20:27.631472703Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.4\" returns image reference \"sha256:e60d442b6496497355efdf45eaa3ea72f5a2b28a5187aeab33442933f3c735d2\"" Nov 1 00:20:27.634626 env[1484]: time="2025-11-01T00:20:27.634526509Z" level=info msg="CreateContainer within sandbox \"a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Nov 1 00:20:27.658762 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount844238069.mount: Deactivated successfully. Nov 1 00:20:27.677611 env[1484]: time="2025-11-01T00:20:27.677539757Z" level=info msg="CreateContainer within sandbox \"a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563\"" Nov 1 00:20:27.678445 env[1484]: time="2025-11-01T00:20:27.678120278Z" level=info msg="StartContainer for \"d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563\"" Nov 1 00:20:27.707942 systemd[1]: Started cri-containerd-d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563.scope. Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.730238 kernel: kauditd_printk_skb: 91 callbacks suppressed Nov 1 00:20:27.730335 kernel: audit: type=1400 audit(1761956427.724:1020): avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2957 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:27.772073 kernel: audit: type=1300 audit(1761956427.724:1020): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2957 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:27.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373537303636303862373430346365363364343662393865633239 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.816068 kernel: audit: type=1327 audit(1761956427.724:1020): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373537303636303862373430346365363364343662393865633239 Nov 1 00:20:27.816206 kernel: audit: type=1400 audit(1761956427.724:1021): avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.834330 kernel: audit: type=1400 audit(1761956427.724:1021): avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.851285 kernel: audit: type=1400 audit(1761956427.724:1021): avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.869112 kernel: audit: type=1400 audit(1761956427.724:1021): avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.887600 kernel: audit: type=1400 audit(1761956427.724:1021): avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.905455 kernel: audit: type=1400 audit(1761956427.724:1021): avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.905695 env[1484]: time="2025-11-01T00:20:27.905651904Z" level=info msg="StartContainer for \"d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563\" returns successfully" Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.923487 kernel: audit: type=1400 audit(1761956427.724:1021): avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit: BPF prog-id=137 op=LOAD Nov 1 00:20:27.724000 audit[3166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2957 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:27.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373537303636303862373430346365363364343662393865633239 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit: BPF prog-id=138 op=LOAD Nov 1 00:20:27.724000 audit[3166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2957 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:27.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373537303636303862373430346365363364343662393865633239 Nov 1 00:20:27.724000 audit: BPF prog-id=138 op=UNLOAD Nov 1 00:20:27.724000 audit: BPF prog-id=137 op=UNLOAD Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { perfmon } for pid=3166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit[3166]: AVC avc: denied { bpf } for pid=3166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:27.724000 audit: BPF prog-id=139 op=LOAD Nov 1 00:20:27.724000 audit[3166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2957 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:27.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433373537303636303862373430346365363364343662393865633239 Nov 1 00:20:28.655092 systemd[1]: run-containerd-runc-k8s.io-d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563-runc.KSDV16.mount: Deactivated successfully. Nov 1 00:20:28.973388 kubelet[2472]: E1101 00:20:28.973260 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:29.165685 env[1484]: time="2025-11-01T00:20:29.165554226Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Nov 1 00:20:29.168480 systemd[1]: cri-containerd-d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563.scope: Deactivated successfully. Nov 1 00:20:29.171000 audit: BPF prog-id=139 op=UNLOAD Nov 1 00:20:29.190333 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563-rootfs.mount: Deactivated successfully. Nov 1 00:20:29.466215 kubelet[2472]: I1101 00:20:29.238872 2472 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Nov 1 00:20:29.466215 kubelet[2472]: W1101 00:20:29.305537 2472 reflector.go:569] object-"kube-system"/"coredns": failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ci-3510.3.8-n-2788c77bd2" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.8-n-2788c77bd2' and this object Nov 1 00:20:29.466215 kubelet[2472]: E1101 00:20:29.305588 2472 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"coredns\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"coredns\" is forbidden: User \"system:node:ci-3510.3.8-n-2788c77bd2\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'ci-3510.3.8-n-2788c77bd2' and this object" logger="UnhandledError" Nov 1 00:20:29.466215 kubelet[2472]: I1101 00:20:29.354500 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5mbsm\" (UniqueName: \"kubernetes.io/projected/325cca53-bb7c-48f5-b2f1-432375aa7e1f-kube-api-access-5mbsm\") pod \"calico-apiserver-856fdb46cd-xbgdv\" (UID: \"325cca53-bb7c-48f5-b2f1-432375aa7e1f\") " pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" Nov 1 00:20:29.466215 kubelet[2472]: I1101 00:20:29.354539 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-backend-key-pair\") pod \"whisker-7b847b84bd-qg6bc\" (UID: \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\") " pod="calico-system/whisker-7b847b84bd-qg6bc" Nov 1 00:20:29.283565 systemd[1]: Created slice kubepods-besteffort-podd0c030a0_2978_427b_aeca_01939df97b98.slice. Nov 1 00:20:29.466617 kubelet[2472]: I1101 00:20:29.354560 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bxzq8\" (UniqueName: \"kubernetes.io/projected/06d0dc32-8772-475c-a553-c9602f03c588-kube-api-access-bxzq8\") pod \"calico-apiserver-6d574c4f5b-j8zsj\" (UID: \"06d0dc32-8772-475c-a553-c9602f03c588\") " pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" Nov 1 00:20:29.466617 kubelet[2472]: I1101 00:20:29.354578 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d0c030a0-2978-427b-aeca-01939df97b98-tigera-ca-bundle\") pod \"calico-kube-controllers-65fdfb6775-jq5nz\" (UID: \"d0c030a0-2978-427b-aeca-01939df97b98\") " pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" Nov 1 00:20:29.466617 kubelet[2472]: I1101 00:20:29.354595 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-ca-bundle\") pod \"whisker-7b847b84bd-qg6bc\" (UID: \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\") " pod="calico-system/whisker-7b847b84bd-qg6bc" Nov 1 00:20:29.466617 kubelet[2472]: I1101 00:20:29.354612 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4xn4k\" (UniqueName: \"kubernetes.io/projected/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-kube-api-access-4xn4k\") pod \"whisker-7b847b84bd-qg6bc\" (UID: \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\") " pod="calico-system/whisker-7b847b84bd-qg6bc" Nov 1 00:20:29.466617 kubelet[2472]: I1101 00:20:29.354628 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/325cca53-bb7c-48f5-b2f1-432375aa7e1f-calico-apiserver-certs\") pod \"calico-apiserver-856fdb46cd-xbgdv\" (UID: \"325cca53-bb7c-48f5-b2f1-432375aa7e1f\") " pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" Nov 1 00:20:29.296219 systemd[1]: Created slice kubepods-besteffort-pod06d0dc32_8772_475c_a553_c9602f03c588.slice. Nov 1 00:20:29.466776 kubelet[2472]: I1101 00:20:29.354646 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/e9955b10-5b47-461a-b3ab-955ce4c39730-config\") pod \"goldmane-666569f655-6fknv\" (UID: \"e9955b10-5b47-461a-b3ab-955ce4c39730\") " pod="calico-system/goldmane-666569f655-6fknv" Nov 1 00:20:29.466776 kubelet[2472]: I1101 00:20:29.354665 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/e9955b10-5b47-461a-b3ab-955ce4c39730-goldmane-key-pair\") pod \"goldmane-666569f655-6fknv\" (UID: \"e9955b10-5b47-461a-b3ab-955ce4c39730\") " pod="calico-system/goldmane-666569f655-6fknv" Nov 1 00:20:29.466776 kubelet[2472]: I1101 00:20:29.354683 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ts7jg\" (UniqueName: \"kubernetes.io/projected/b9c5ad65-eebf-4378-95c7-c8e53c9b03d5-kube-api-access-ts7jg\") pod \"coredns-668d6bf9bc-bkqtt\" (UID: \"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5\") " pod="kube-system/coredns-668d6bf9bc-bkqtt" Nov 1 00:20:29.466776 kubelet[2472]: I1101 00:20:29.354702 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nkq4j\" (UniqueName: \"kubernetes.io/projected/e9955b10-5b47-461a-b3ab-955ce4c39730-kube-api-access-nkq4j\") pod \"goldmane-666569f655-6fknv\" (UID: \"e9955b10-5b47-461a-b3ab-955ce4c39730\") " pod="calico-system/goldmane-666569f655-6fknv" Nov 1 00:20:29.466776 kubelet[2472]: I1101 00:20:29.354719 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e9955b10-5b47-461a-b3ab-955ce4c39730-goldmane-ca-bundle\") pod \"goldmane-666569f655-6fknv\" (UID: \"e9955b10-5b47-461a-b3ab-955ce4c39730\") " pod="calico-system/goldmane-666569f655-6fknv" Nov 1 00:20:29.314211 systemd[1]: Created slice kubepods-besteffort-pod325cca53_bb7c_48f5_b2f1_432375aa7e1f.slice. Nov 1 00:20:29.467032 kubelet[2472]: I1101 00:20:29.354738 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w4q4m\" (UniqueName: \"kubernetes.io/projected/d0c030a0-2978-427b-aeca-01939df97b98-kube-api-access-w4q4m\") pod \"calico-kube-controllers-65fdfb6775-jq5nz\" (UID: \"d0c030a0-2978-427b-aeca-01939df97b98\") " pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" Nov 1 00:20:29.467032 kubelet[2472]: I1101 00:20:29.354758 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/b9c5ad65-eebf-4378-95c7-c8e53c9b03d5-config-volume\") pod \"coredns-668d6bf9bc-bkqtt\" (UID: \"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5\") " pod="kube-system/coredns-668d6bf9bc-bkqtt" Nov 1 00:20:29.467032 kubelet[2472]: I1101 00:20:29.354776 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/06d0dc32-8772-475c-a553-c9602f03c588-calico-apiserver-certs\") pod \"calico-apiserver-6d574c4f5b-j8zsj\" (UID: \"06d0dc32-8772-475c-a553-c9602f03c588\") " pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" Nov 1 00:20:29.467032 kubelet[2472]: I1101 00:20:29.455467 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2e8a69dd-776a-4945-85af-d19c382f23d2-calico-apiserver-certs\") pod \"calico-apiserver-856fdb46cd-n8gjk\" (UID: \"2e8a69dd-776a-4945-85af-d19c382f23d2\") " pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" Nov 1 00:20:29.467032 kubelet[2472]: I1101 00:20:29.455641 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/716bcd07-1553-45a0-bebf-9f6d85629075-config-volume\") pod \"coredns-668d6bf9bc-b4579\" (UID: \"716bcd07-1553-45a0-bebf-9f6d85629075\") " pod="kube-system/coredns-668d6bf9bc-b4579" Nov 1 00:20:29.323519 systemd[1]: Created slice kubepods-burstable-podb9c5ad65_eebf_4378_95c7_c8e53c9b03d5.slice. Nov 1 00:20:29.467221 kubelet[2472]: I1101 00:20:29.455668 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xf7z8\" (UniqueName: \"kubernetes.io/projected/716bcd07-1553-45a0-bebf-9f6d85629075-kube-api-access-xf7z8\") pod \"coredns-668d6bf9bc-b4579\" (UID: \"716bcd07-1553-45a0-bebf-9f6d85629075\") " pod="kube-system/coredns-668d6bf9bc-b4579" Nov 1 00:20:29.467221 kubelet[2472]: I1101 00:20:29.455739 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9pxrj\" (UniqueName: \"kubernetes.io/projected/2e8a69dd-776a-4945-85af-d19c382f23d2-kube-api-access-9pxrj\") pod \"calico-apiserver-856fdb46cd-n8gjk\" (UID: \"2e8a69dd-776a-4945-85af-d19c382f23d2\") " pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" Nov 1 00:20:29.330111 systemd[1]: Created slice kubepods-burstable-pod716bcd07_1553_45a0_bebf_9f6d85629075.slice. Nov 1 00:20:29.344898 systemd[1]: Created slice kubepods-besteffort-pod2e8a69dd_776a_4945_85af_d19c382f23d2.slice. Nov 1 00:20:29.353962 systemd[1]: Created slice kubepods-besteffort-pode9955b10_5b47_461a_b3ab_955ce4c39730.slice. Nov 1 00:20:29.360761 systemd[1]: Created slice kubepods-besteffort-podf551a9a1_f8bf_4ad2_b15e_04f3b16595a8.slice. Nov 1 00:20:29.778291 env[1484]: time="2025-11-01T00:20:29.777951788Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d574c4f5b-j8zsj,Uid:06d0dc32-8772-475c-a553-c9602f03c588,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:20:29.778291 env[1484]: time="2025-11-01T00:20:29.778018788Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-65fdfb6775-jq5nz,Uid:d0c030a0-2978-427b-aeca-01939df97b98,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:29.779170 env[1484]: time="2025-11-01T00:20:29.779126070Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-n8gjk,Uid:2e8a69dd-776a-4945-85af-d19c382f23d2,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:20:29.779440 env[1484]: time="2025-11-01T00:20:29.779416631Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-xbgdv,Uid:325cca53-bb7c-48f5-b2f1-432375aa7e1f,Namespace:calico-apiserver,Attempt:0,}" Nov 1 00:20:29.779606 env[1484]: time="2025-11-01T00:20:29.779584071Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7b847b84bd-qg6bc,Uid:f551a9a1-f8bf-4ad2-b15e-04f3b16595a8,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:29.780146 env[1484]: time="2025-11-01T00:20:29.780109632Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-6fknv,Uid:e9955b10-5b47-461a-b3ab-955ce4c39730,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:30.037488 env[1484]: time="2025-11-01T00:20:30.037224455Z" level=info msg="shim disconnected" id=d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563 Nov 1 00:20:30.037488 env[1484]: time="2025-11-01T00:20:30.037271535Z" level=warning msg="cleaning up after shim disconnected" id=d375706608b7404ce63d46b98ec29fd8ff4ef449a22a9f5f2e65267a50394563 namespace=k8s.io Nov 1 00:20:30.037488 env[1484]: time="2025-11-01T00:20:30.037281615Z" level=info msg="cleaning up dead shim" Nov 1 00:20:30.046577 env[1484]: time="2025-11-01T00:20:30.046527993Z" level=warning msg="cleanup warnings time=\"2025-11-01T00:20:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3231 runtime=io.containerd.runc.v2\n" Nov 1 00:20:30.102645 env[1484]: time="2025-11-01T00:20:30.102606501Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\"" Nov 1 00:20:30.389262 env[1484]: time="2025-11-01T00:20:30.389182732Z" level=error msg="Failed to destroy network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.389617 env[1484]: time="2025-11-01T00:20:30.389580293Z" level=error msg="encountered an error cleaning up failed sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.389650 env[1484]: time="2025-11-01T00:20:30.389626333Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7b847b84bd-qg6bc,Uid:f551a9a1-f8bf-4ad2-b15e-04f3b16595a8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.389982 kubelet[2472]: E1101 00:20:30.389862 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.390243 kubelet[2472]: E1101 00:20:30.389949 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7b847b84bd-qg6bc" Nov 1 00:20:30.390243 kubelet[2472]: E1101 00:20:30.390008 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7b847b84bd-qg6bc" Nov 1 00:20:30.390243 kubelet[2472]: E1101 00:20:30.390058 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7b847b84bd-qg6bc_calico-system(f551a9a1-f8bf-4ad2-b15e-04f3b16595a8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7b847b84bd-qg6bc_calico-system(f551a9a1-f8bf-4ad2-b15e-04f3b16595a8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7b847b84bd-qg6bc" podUID="f551a9a1-f8bf-4ad2-b15e-04f3b16595a8" Nov 1 00:20:30.412547 env[1484]: time="2025-11-01T00:20:30.412496617Z" level=error msg="Failed to destroy network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.413067 env[1484]: time="2025-11-01T00:20:30.413024618Z" level=error msg="encountered an error cleaning up failed sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.413228 env[1484]: time="2025-11-01T00:20:30.413199698Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-6fknv,Uid:e9955b10-5b47-461a-b3ab-955ce4c39730,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.413578 kubelet[2472]: E1101 00:20:30.413540 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.413654 kubelet[2472]: E1101 00:20:30.413595 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-6fknv" Nov 1 00:20:30.413654 kubelet[2472]: E1101 00:20:30.413618 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-666569f655-6fknv" Nov 1 00:20:30.413708 kubelet[2472]: E1101 00:20:30.413656 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-666569f655-6fknv_calico-system(e9955b10-5b47-461a-b3ab-955ce4c39730)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-666569f655-6fknv_calico-system(e9955b10-5b47-461a-b3ab-955ce4c39730)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:20:30.415397 env[1484]: time="2025-11-01T00:20:30.415351503Z" level=error msg="Failed to destroy network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.416386 env[1484]: time="2025-11-01T00:20:30.416351784Z" level=error msg="encountered an error cleaning up failed sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.416580 env[1484]: time="2025-11-01T00:20:30.416551705Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-65fdfb6775-jq5nz,Uid:d0c030a0-2978-427b-aeca-01939df97b98,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.416909 kubelet[2472]: E1101 00:20:30.416855 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.416985 kubelet[2472]: E1101 00:20:30.416943 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" Nov 1 00:20:30.416985 kubelet[2472]: E1101 00:20:30.416964 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" Nov 1 00:20:30.417047 kubelet[2472]: E1101 00:20:30.417003 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-65fdfb6775-jq5nz_calico-system(d0c030a0-2978-427b-aeca-01939df97b98)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-65fdfb6775-jq5nz_calico-system(d0c030a0-2978-427b-aeca-01939df97b98)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:20:30.424878 env[1484]: time="2025-11-01T00:20:30.424814961Z" level=error msg="Failed to destroy network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.425509 env[1484]: time="2025-11-01T00:20:30.425474242Z" level=error msg="encountered an error cleaning up failed sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.425645 env[1484]: time="2025-11-01T00:20:30.425618282Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-n8gjk,Uid:2e8a69dd-776a-4945-85af-d19c382f23d2,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.426016 kubelet[2472]: E1101 00:20:30.425971 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.426116 kubelet[2472]: E1101 00:20:30.426051 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" Nov 1 00:20:30.426116 kubelet[2472]: E1101 00:20:30.426076 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" Nov 1 00:20:30.426184 kubelet[2472]: E1101 00:20:30.426121 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-856fdb46cd-n8gjk_calico-apiserver(2e8a69dd-776a-4945-85af-d19c382f23d2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-856fdb46cd-n8gjk_calico-apiserver(2e8a69dd-776a-4945-85af-d19c382f23d2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:20:30.435813 env[1484]: time="2025-11-01T00:20:30.435754262Z" level=error msg="Failed to destroy network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.436159 env[1484]: time="2025-11-01T00:20:30.436123822Z" level=error msg="encountered an error cleaning up failed sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.436201 env[1484]: time="2025-11-01T00:20:30.436179063Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-xbgdv,Uid:325cca53-bb7c-48f5-b2f1-432375aa7e1f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.436417 kubelet[2472]: E1101 00:20:30.436381 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.436488 kubelet[2472]: E1101 00:20:30.436440 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" Nov 1 00:20:30.436488 kubelet[2472]: E1101 00:20:30.436465 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" Nov 1 00:20:30.436540 kubelet[2472]: E1101 00:20:30.436499 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-856fdb46cd-xbgdv_calico-apiserver(325cca53-bb7c-48f5-b2f1-432375aa7e1f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-856fdb46cd-xbgdv_calico-apiserver(325cca53-bb7c-48f5-b2f1-432375aa7e1f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:20:30.445922 env[1484]: time="2025-11-01T00:20:30.445843521Z" level=error msg="Failed to destroy network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.446244 env[1484]: time="2025-11-01T00:20:30.446208442Z" level=error msg="encountered an error cleaning up failed sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.446294 env[1484]: time="2025-11-01T00:20:30.446261562Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d574c4f5b-j8zsj,Uid:06d0dc32-8772-475c-a553-c9602f03c588,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.446497 kubelet[2472]: E1101 00:20:30.446458 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:30.446560 kubelet[2472]: E1101 00:20:30.446530 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" Nov 1 00:20:30.446560 kubelet[2472]: E1101 00:20:30.446550 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" Nov 1 00:20:30.446630 kubelet[2472]: E1101 00:20:30.446585 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6d574c4f5b-j8zsj_calico-apiserver(06d0dc32-8772-475c-a553-c9602f03c588)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6d574c4f5b-j8zsj_calico-apiserver(06d0dc32-8772-475c-a553-c9602f03c588)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:20:30.459766 kubelet[2472]: E1101 00:20:30.459730 2472 configmap.go:193] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Nov 1 00:20:30.459878 kubelet[2472]: E1101 00:20:30.459839 2472 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/b9c5ad65-eebf-4378-95c7-c8e53c9b03d5-config-volume podName:b9c5ad65-eebf-4378-95c7-c8e53c9b03d5 nodeName:}" failed. No retries permitted until 2025-11-01 00:20:30.959816188 +0000 UTC m=+36.103544275 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/b9c5ad65-eebf-4378-95c7-c8e53c9b03d5-config-volume") pod "coredns-668d6bf9bc-bkqtt" (UID: "b9c5ad65-eebf-4378-95c7-c8e53c9b03d5") : failed to sync configmap cache: timed out waiting for the condition Nov 1 00:20:30.557393 kubelet[2472]: E1101 00:20:30.557336 2472 configmap.go:193] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Nov 1 00:20:30.557588 kubelet[2472]: E1101 00:20:30.557445 2472 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/716bcd07-1553-45a0-bebf-9f6d85629075-config-volume podName:716bcd07-1553-45a0-bebf-9f6d85629075 nodeName:}" failed. No retries permitted until 2025-11-01 00:20:31.057418136 +0000 UTC m=+36.201146263 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/716bcd07-1553-45a0-bebf-9f6d85629075-config-volume") pod "coredns-668d6bf9bc-b4579" (UID: "716bcd07-1553-45a0-bebf-9f6d85629075") : failed to sync configmap cache: timed out waiting for the condition Nov 1 00:20:30.656230 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d-shm.mount: Deactivated successfully. Nov 1 00:20:30.656317 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d-shm.mount: Deactivated successfully. Nov 1 00:20:30.978648 systemd[1]: Created slice kubepods-besteffort-pod864706af_b74b_4daa_9415_eca81f18da43.slice. Nov 1 00:20:30.981462 env[1484]: time="2025-11-01T00:20:30.981420911Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fns4p,Uid:864706af-b74b-4daa-9415-eca81f18da43,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:30.988767 env[1484]: time="2025-11-01T00:20:30.988722045Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-bkqtt,Uid:b9c5ad65-eebf-4378-95c7-c8e53c9b03d5,Namespace:kube-system,Attempt:0,}" Nov 1 00:20:31.108869 kubelet[2472]: I1101 00:20:31.108179 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:31.109513 env[1484]: time="2025-11-01T00:20:31.109477794Z" level=info msg="StopPodSandbox for \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\"" Nov 1 00:20:31.112341 kubelet[2472]: I1101 00:20:31.111609 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:31.112459 env[1484]: time="2025-11-01T00:20:31.112391359Z" level=info msg="StopPodSandbox for \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\"" Nov 1 00:20:31.113605 kubelet[2472]: I1101 00:20:31.112990 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:31.113709 env[1484]: time="2025-11-01T00:20:31.113569001Z" level=info msg="StopPodSandbox for \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\"" Nov 1 00:20:31.114459 kubelet[2472]: I1101 00:20:31.114127 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:31.114601 env[1484]: time="2025-11-01T00:20:31.114567963Z" level=info msg="StopPodSandbox for \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\"" Nov 1 00:20:31.115956 kubelet[2472]: I1101 00:20:31.115617 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:31.116831 env[1484]: time="2025-11-01T00:20:31.116700847Z" level=info msg="StopPodSandbox for \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\"" Nov 1 00:20:31.118961 env[1484]: time="2025-11-01T00:20:31.118913011Z" level=error msg="Failed to destroy network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.119359 env[1484]: time="2025-11-01T00:20:31.119319852Z" level=error msg="encountered an error cleaning up failed sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.119416 env[1484]: time="2025-11-01T00:20:31.119385412Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fns4p,Uid:864706af-b74b-4daa-9415-eca81f18da43,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.119841 kubelet[2472]: E1101 00:20:31.119560 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.119841 kubelet[2472]: E1101 00:20:31.119608 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-fns4p" Nov 1 00:20:31.119841 kubelet[2472]: E1101 00:20:31.119717 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-fns4p" Nov 1 00:20:31.120018 kubelet[2472]: E1101 00:20:31.119759 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:31.120693 kubelet[2472]: I1101 00:20:31.120226 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:31.122877 env[1484]: time="2025-11-01T00:20:31.122832899Z" level=info msg="StopPodSandbox for \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\"" Nov 1 00:20:31.196476 env[1484]: time="2025-11-01T00:20:31.196414917Z" level=error msg="StopPodSandbox for \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\" failed" error="failed to destroy network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.197091 kubelet[2472]: E1101 00:20:31.196856 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:31.197091 kubelet[2472]: E1101 00:20:31.196949 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9"} Nov 1 00:20:31.197091 kubelet[2472]: E1101 00:20:31.197018 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e9955b10-5b47-461a-b3ab-955ce4c39730\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:31.197091 kubelet[2472]: E1101 00:20:31.197042 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e9955b10-5b47-461a-b3ab-955ce4c39730\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:20:31.218392 env[1484]: time="2025-11-01T00:20:31.218335679Z" level=error msg="StopPodSandbox for \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\" failed" error="failed to destroy network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.219322 kubelet[2472]: E1101 00:20:31.218979 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:31.219322 kubelet[2472]: E1101 00:20:31.219128 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d"} Nov 1 00:20:31.219322 kubelet[2472]: E1101 00:20:31.219186 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2e8a69dd-776a-4945-85af-d19c382f23d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:31.219322 kubelet[2472]: E1101 00:20:31.219267 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2e8a69dd-776a-4945-85af-d19c382f23d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:20:31.239507 env[1484]: time="2025-11-01T00:20:31.239385878Z" level=error msg="StopPodSandbox for \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\" failed" error="failed to destroy network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.240027 kubelet[2472]: E1101 00:20:31.239851 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:31.240027 kubelet[2472]: E1101 00:20:31.239932 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317"} Nov 1 00:20:31.240027 kubelet[2472]: E1101 00:20:31.239976 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d0c030a0-2978-427b-aeca-01939df97b98\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:31.240027 kubelet[2472]: E1101 00:20:31.240000 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d0c030a0-2978-427b-aeca-01939df97b98\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:20:31.243049 env[1484]: time="2025-11-01T00:20:31.242771965Z" level=error msg="StopPodSandbox for \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\" failed" error="failed to destroy network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.243712 kubelet[2472]: E1101 00:20:31.243555 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:31.243712 kubelet[2472]: E1101 00:20:31.243602 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d"} Nov 1 00:20:31.243712 kubelet[2472]: E1101 00:20:31.243656 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:31.243712 kubelet[2472]: E1101 00:20:31.243678 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7b847b84bd-qg6bc" podUID="f551a9a1-f8bf-4ad2-b15e-04f3b16595a8" Nov 1 00:20:31.279243 env[1484]: time="2025-11-01T00:20:31.279186393Z" level=error msg="Failed to destroy network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.279809 env[1484]: time="2025-11-01T00:20:31.279775715Z" level=error msg="encountered an error cleaning up failed sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.279954 env[1484]: time="2025-11-01T00:20:31.279927875Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-bkqtt,Uid:b9c5ad65-eebf-4378-95c7-c8e53c9b03d5,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.280799 kubelet[2472]: E1101 00:20:31.280244 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.280799 kubelet[2472]: E1101 00:20:31.280306 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-bkqtt" Nov 1 00:20:31.280799 kubelet[2472]: E1101 00:20:31.280326 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-bkqtt" Nov 1 00:20:31.281421 kubelet[2472]: E1101 00:20:31.280377 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-bkqtt_kube-system(b9c5ad65-eebf-4378-95c7-c8e53c9b03d5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-bkqtt_kube-system(b9c5ad65-eebf-4378-95c7-c8e53c9b03d5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-bkqtt" podUID="b9c5ad65-eebf-4378-95c7-c8e53c9b03d5" Nov 1 00:20:31.287242 env[1484]: time="2025-11-01T00:20:31.287202009Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-b4579,Uid:716bcd07-1553-45a0-bebf-9f6d85629075,Namespace:kube-system,Attempt:0,}" Nov 1 00:20:31.290872 env[1484]: time="2025-11-01T00:20:31.290741135Z" level=error msg="StopPodSandbox for \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\" failed" error="failed to destroy network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.290872 env[1484]: time="2025-11-01T00:20:31.290871256Z" level=error msg="StopPodSandbox for \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\" failed" error="failed to destroy network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.291507 kubelet[2472]: E1101 00:20:31.291238 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:31.291507 kubelet[2472]: E1101 00:20:31.291296 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c"} Nov 1 00:20:31.291507 kubelet[2472]: E1101 00:20:31.291328 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"06d0dc32-8772-475c-a553-c9602f03c588\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:31.291507 kubelet[2472]: E1101 00:20:31.291350 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"06d0dc32-8772-475c-a553-c9602f03c588\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:20:31.291701 kubelet[2472]: E1101 00:20:31.291397 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:31.291701 kubelet[2472]: E1101 00:20:31.291412 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017"} Nov 1 00:20:31.291701 kubelet[2472]: E1101 00:20:31.291453 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"325cca53-bb7c-48f5-b2f1-432375aa7e1f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:31.291701 kubelet[2472]: E1101 00:20:31.291470 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"325cca53-bb7c-48f5-b2f1-432375aa7e1f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:20:31.411790 env[1484]: time="2025-11-01T00:20:31.411740003Z" level=error msg="Failed to destroy network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.412958 env[1484]: time="2025-11-01T00:20:31.412917046Z" level=error msg="encountered an error cleaning up failed sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.413327 env[1484]: time="2025-11-01T00:20:31.413292206Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-b4579,Uid:716bcd07-1553-45a0-bebf-9f6d85629075,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.414201 kubelet[2472]: E1101 00:20:31.413799 2472 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:31.414201 kubelet[2472]: E1101 00:20:31.413873 2472 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-b4579" Nov 1 00:20:31.414201 kubelet[2472]: E1101 00:20:31.413918 2472 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-b4579" Nov 1 00:20:31.414671 kubelet[2472]: E1101 00:20:31.413963 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-b4579_kube-system(716bcd07-1553-45a0-bebf-9f6d85629075)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-b4579_kube-system(716bcd07-1553-45a0-bebf-9f6d85629075)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-b4579" podUID="716bcd07-1553-45a0-bebf-9f6d85629075" Nov 1 00:20:31.655791 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616-shm.mount: Deactivated successfully. Nov 1 00:20:31.655897 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4-shm.mount: Deactivated successfully. Nov 1 00:20:32.123410 kubelet[2472]: I1101 00:20:32.123373 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:32.124144 env[1484]: time="2025-11-01T00:20:32.124104262Z" level=info msg="StopPodSandbox for \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\"" Nov 1 00:20:32.126651 kubelet[2472]: I1101 00:20:32.126276 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:32.126942 env[1484]: time="2025-11-01T00:20:32.126910187Z" level=info msg="StopPodSandbox for \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\"" Nov 1 00:20:32.128347 kubelet[2472]: I1101 00:20:32.127962 2472 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:32.128497 env[1484]: time="2025-11-01T00:20:32.128457510Z" level=info msg="StopPodSandbox for \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\"" Nov 1 00:20:32.172525 env[1484]: time="2025-11-01T00:20:32.172466711Z" level=error msg="StopPodSandbox for \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\" failed" error="failed to destroy network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:32.172956 kubelet[2472]: E1101 00:20:32.172907 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:32.173047 kubelet[2472]: E1101 00:20:32.172966 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616"} Nov 1 00:20:32.173047 kubelet[2472]: E1101 00:20:32.173002 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:32.173047 kubelet[2472]: E1101 00:20:32.173023 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-bkqtt" podUID="b9c5ad65-eebf-4378-95c7-c8e53c9b03d5" Nov 1 00:20:32.173398 env[1484]: time="2025-11-01T00:20:32.173345393Z" level=error msg="StopPodSandbox for \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\" failed" error="failed to destroy network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:32.173735 kubelet[2472]: E1101 00:20:32.173613 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:32.173735 kubelet[2472]: E1101 00:20:32.173656 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4"} Nov 1 00:20:32.173735 kubelet[2472]: E1101 00:20:32.173680 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"864706af-b74b-4daa-9415-eca81f18da43\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:32.173735 kubelet[2472]: E1101 00:20:32.173711 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"864706af-b74b-4daa-9415-eca81f18da43\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:32.185434 env[1484]: time="2025-11-01T00:20:32.185367175Z" level=error msg="StopPodSandbox for \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\" failed" error="failed to destroy network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Nov 1 00:20:32.186925 kubelet[2472]: E1101 00:20:32.186753 2472 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:32.186925 kubelet[2472]: E1101 00:20:32.186809 2472 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32"} Nov 1 00:20:32.186925 kubelet[2472]: E1101 00:20:32.186858 2472 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"716bcd07-1553-45a0-bebf-9f6d85629075\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Nov 1 00:20:32.186925 kubelet[2472]: E1101 00:20:32.186895 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"716bcd07-1553-45a0-bebf-9f6d85629075\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-b4579" podUID="716bcd07-1553-45a0-bebf-9f6d85629075" Nov 1 00:20:35.250117 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2578921977.mount: Deactivated successfully. Nov 1 00:20:35.862790 env[1484]: time="2025-11-01T00:20:35.862739456Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:35.871391 env[1484]: time="2025-11-01T00:20:35.871338151Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:35.878495 env[1484]: time="2025-11-01T00:20:35.878454843Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:35.883767 env[1484]: time="2025-11-01T00:20:35.883715492Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e92cca333202c87d07bf57f38182fd68f0779f912ef55305eda1fccc9f33667c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Nov 1 00:20:35.884108 env[1484]: time="2025-11-01T00:20:35.884078813Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.4\" returns image reference \"sha256:43a5290057a103af76996c108856f92ed902f34573d7a864f55f15b8aaf4683b\"" Nov 1 00:20:35.901140 env[1484]: time="2025-11-01T00:20:35.901094483Z" level=info msg="CreateContainer within sandbox \"a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Nov 1 00:20:35.937833 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3100632708.mount: Deactivated successfully. Nov 1 00:20:35.954108 env[1484]: time="2025-11-01T00:20:35.954041215Z" level=info msg="CreateContainer within sandbox \"a46156ffed8feb7af478b4b897d3ec8f42f2deb8211ac5c6429fb8cf471e2629\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458\"" Nov 1 00:20:35.956006 env[1484]: time="2025-11-01T00:20:35.955953858Z" level=info msg="StartContainer for \"0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458\"" Nov 1 00:20:35.973979 systemd[1]: Started cri-containerd-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458.scope. Nov 1 00:20:36.013678 kernel: kauditd_printk_skb: 34 callbacks suppressed Nov 1 00:20:36.013818 kernel: audit: type=1400 audit(1761956435.989:1027): avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.989000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.989000 audit[3628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2957 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:36.042429 kernel: audit: type=1300 audit(1761956435.989:1027): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2957 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666438333638353936363765626366383838303039303634636666 Nov 1 00:20:36.069190 kernel: audit: type=1327 audit(1761956435.989:1027): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666438333638353936363765626366383838303039303634636666 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.088155 kernel: audit: type=1400 audit(1761956435.990:1028): avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.107721 kernel: audit: type=1400 audit(1761956435.990:1028): avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.146225 kernel: audit: type=1400 audit(1761956435.990:1028): avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.146436 kernel: audit: type=1400 audit(1761956435.990:1028): avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.163645 kernel: audit: type=1400 audit(1761956435.990:1028): avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.180999 env[1484]: time="2025-11-01T00:20:36.164639537Z" level=info msg="StartContainer for \"0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458\" returns successfully" Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.198421 kernel: audit: type=1400 audit(1761956435.990:1028): avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.198509 kernel: audit: type=1400 audit(1761956435.990:1028): avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.990000 audit: BPF prog-id=140 op=LOAD Nov 1 00:20:35.990000 audit[3628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2957 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666438333638353936363765626366383838303039303634636666 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:35.995000 audit: BPF prog-id=141 op=LOAD Nov 1 00:20:35.995000 audit[3628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2957 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:35.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666438333638353936363765626366383838303039303634636666 Nov 1 00:20:36.013000 audit: BPF prog-id=141 op=UNLOAD Nov 1 00:20:36.013000 audit: BPF prog-id=140 op=UNLOAD Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { perfmon } for pid=3628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit[3628]: AVC avc: denied { bpf } for pid=3628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:36.013000 audit: BPF prog-id=142 op=LOAD Nov 1 00:20:36.013000 audit[3628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2957 pid=3628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:36.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063666438333638353936363765626366383838303039303634636666 Nov 1 00:20:36.309014 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Nov 1 00:20:36.309140 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Nov 1 00:20:36.442692 env[1484]: time="2025-11-01T00:20:36.442572253Z" level=info msg="StopPodSandbox for \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\"" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.522 [INFO][3680] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.522 [INFO][3680] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" iface="eth0" netns="/var/run/netns/cni-53be6e0c-3e9e-6558-3977-4f9f0a5280e0" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.522 [INFO][3680] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" iface="eth0" netns="/var/run/netns/cni-53be6e0c-3e9e-6558-3977-4f9f0a5280e0" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.523 [INFO][3680] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" iface="eth0" netns="/var/run/netns/cni-53be6e0c-3e9e-6558-3977-4f9f0a5280e0" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.523 [INFO][3680] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.523 [INFO][3680] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.554 [INFO][3688] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.554 [INFO][3688] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.554 [INFO][3688] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.564 [WARNING][3688] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.564 [INFO][3688] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.566 [INFO][3688] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:36.569452 env[1484]: 2025-11-01 00:20:36.567 [INFO][3680] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:36.571720 systemd[1]: run-netns-cni\x2d53be6e0c\x2d3e9e\x2d6558\x2d3977\x2d4f9f0a5280e0.mount: Deactivated successfully. Nov 1 00:20:36.572757 env[1484]: time="2025-11-01T00:20:36.572460715Z" level=info msg="TearDown network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\" successfully" Nov 1 00:20:36.572757 env[1484]: time="2025-11-01T00:20:36.572498035Z" level=info msg="StopPodSandbox for \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\" returns successfully" Nov 1 00:20:36.674249 kubelet[2472]: I1101 00:20:36.674198 2472 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-backend-key-pair\") pod \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\" (UID: \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\") " Nov 1 00:20:36.674605 kubelet[2472]: I1101 00:20:36.674260 2472 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-ca-bundle\") pod \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\" (UID: \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\") " Nov 1 00:20:36.674605 kubelet[2472]: I1101 00:20:36.674284 2472 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-4xn4k\" (UniqueName: \"kubernetes.io/projected/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-kube-api-access-4xn4k\") pod \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\" (UID: \"f551a9a1-f8bf-4ad2-b15e-04f3b16595a8\") " Nov 1 00:20:36.675686 kubelet[2472]: I1101 00:20:36.675636 2472 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "f551a9a1-f8bf-4ad2-b15e-04f3b16595a8" (UID: "f551a9a1-f8bf-4ad2-b15e-04f3b16595a8"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Nov 1 00:20:36.679957 kubelet[2472]: I1101 00:20:36.679289 2472 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-kube-api-access-4xn4k" (OuterVolumeSpecName: "kube-api-access-4xn4k") pod "f551a9a1-f8bf-4ad2-b15e-04f3b16595a8" (UID: "f551a9a1-f8bf-4ad2-b15e-04f3b16595a8"). InnerVolumeSpecName "kube-api-access-4xn4k". PluginName "kubernetes.io/projected", VolumeGIDValue "" Nov 1 00:20:36.681934 systemd[1]: var-lib-kubelet-pods-f551a9a1\x2df8bf\x2d4ad2\x2db15e\x2d04f3b16595a8-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d4xn4k.mount: Deactivated successfully. Nov 1 00:20:36.682042 systemd[1]: var-lib-kubelet-pods-f551a9a1\x2df8bf\x2d4ad2\x2db15e\x2d04f3b16595a8-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Nov 1 00:20:36.685245 kubelet[2472]: I1101 00:20:36.685062 2472 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "f551a9a1-f8bf-4ad2-b15e-04f3b16595a8" (UID: "f551a9a1-f8bf-4ad2-b15e-04f3b16595a8"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Nov 1 00:20:36.775057 kubelet[2472]: I1101 00:20:36.774953 2472 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-ca-bundle\") on node \"ci-3510.3.8-n-2788c77bd2\" DevicePath \"\"" Nov 1 00:20:36.775221 kubelet[2472]: I1101 00:20:36.775207 2472 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-4xn4k\" (UniqueName: \"kubernetes.io/projected/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-kube-api-access-4xn4k\") on node \"ci-3510.3.8-n-2788c77bd2\" DevicePath \"\"" Nov 1 00:20:36.775285 kubelet[2472]: I1101 00:20:36.775274 2472 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8-whisker-backend-key-pair\") on node \"ci-3510.3.8-n-2788c77bd2\" DevicePath \"\"" Nov 1 00:20:36.980201 systemd[1]: Removed slice kubepods-besteffort-podf551a9a1_f8bf_4ad2_b15e_04f3b16595a8.slice. Nov 1 00:20:37.263538 kubelet[2472]: I1101 00:20:37.263466 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-d6lfr" podStartSLOduration=2.324999763 podStartE2EDuration="17.263444409s" podCreationTimestamp="2025-11-01 00:20:20 +0000 UTC" firstStartedPulling="2025-11-01 00:20:20.946952729 +0000 UTC m=+26.090680856" lastFinishedPulling="2025-11-01 00:20:35.885397375 +0000 UTC m=+41.029125502" observedRunningTime="2025-11-01 00:20:37.248586304 +0000 UTC m=+42.392314431" watchObservedRunningTime="2025-11-01 00:20:37.263444409 +0000 UTC m=+42.407172536" Nov 1 00:20:37.269381 systemd[1]: Created slice kubepods-besteffort-podb3f59ccf_7740_48c7_b885_21ec60ac189d.slice. Nov 1 00:20:37.380208 kubelet[2472]: I1101 00:20:37.380158 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b3f59ccf-7740-48c7-b885-21ec60ac189d-whisker-ca-bundle\") pod \"whisker-699c84b798-wfdq5\" (UID: \"b3f59ccf-7740-48c7-b885-21ec60ac189d\") " pod="calico-system/whisker-699c84b798-wfdq5" Nov 1 00:20:37.380377 kubelet[2472]: I1101 00:20:37.380239 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dtpvt\" (UniqueName: \"kubernetes.io/projected/b3f59ccf-7740-48c7-b885-21ec60ac189d-kube-api-access-dtpvt\") pod \"whisker-699c84b798-wfdq5\" (UID: \"b3f59ccf-7740-48c7-b885-21ec60ac189d\") " pod="calico-system/whisker-699c84b798-wfdq5" Nov 1 00:20:37.380377 kubelet[2472]: I1101 00:20:37.380261 2472 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b3f59ccf-7740-48c7-b885-21ec60ac189d-whisker-backend-key-pair\") pod \"whisker-699c84b798-wfdq5\" (UID: \"b3f59ccf-7740-48c7-b885-21ec60ac189d\") " pod="calico-system/whisker-699c84b798-wfdq5" Nov 1 00:20:37.573611 env[1484]: time="2025-11-01T00:20:37.573498850Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-699c84b798-wfdq5,Uid:b3f59ccf-7740-48c7-b885-21ec60ac189d,Namespace:calico-system,Attempt:0,}" Nov 1 00:20:37.758977 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:37.759122 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia8ca02657e1: link becomes ready Nov 1 00:20:37.763771 systemd-networkd[1625]: calia8ca02657e1: Link UP Nov 1 00:20:37.763961 systemd-networkd[1625]: calia8ca02657e1: Gained carrier Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.629 [INFO][3710] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.644 [INFO][3710] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0 whisker-699c84b798- calico-system b3f59ccf-7740-48c7-b885-21ec60ac189d 899 0 2025-11-01 00:20:37 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:699c84b798 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 whisker-699c84b798-wfdq5 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calia8ca02657e1 [] [] }} ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.644 [INFO][3710] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.668 [INFO][3722] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" HandleID="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.668 [INFO][3722] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" HandleID="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"whisker-699c84b798-wfdq5", "timestamp":"2025-11-01 00:20:37.66872569 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.669 [INFO][3722] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.669 [INFO][3722] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.669 [INFO][3722] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.677 [INFO][3722] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.682 [INFO][3722] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.687 [INFO][3722] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.688 [INFO][3722] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.695 [INFO][3722] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.695 [INFO][3722] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.698 [INFO][3722] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685 Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.705 [INFO][3722] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.718 [INFO][3722] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.1/26] block=192.168.103.0/26 handle="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.718 [INFO][3722] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.1/26] handle="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.718 [INFO][3722] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:37.779729 env[1484]: 2025-11-01 00:20:37.718 [INFO][3722] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.1/26] IPv6=[] ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" HandleID="k8s-pod-network.afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" Nov 1 00:20:37.780331 env[1484]: 2025-11-01 00:20:37.720 [INFO][3710] cni-plugin/k8s.go 418: Populated endpoint ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0", GenerateName:"whisker-699c84b798-", Namespace:"calico-system", SelfLink:"", UID:"b3f59ccf-7740-48c7-b885-21ec60ac189d", ResourceVersion:"899", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"699c84b798", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"whisker-699c84b798-wfdq5", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.103.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia8ca02657e1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.780331 env[1484]: 2025-11-01 00:20:37.720 [INFO][3710] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.1/32] ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" Nov 1 00:20:37.780331 env[1484]: 2025-11-01 00:20:37.720 [INFO][3710] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia8ca02657e1 ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" Nov 1 00:20:37.780331 env[1484]: 2025-11-01 00:20:37.741 [INFO][3710] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" Nov 1 00:20:37.780331 env[1484]: 2025-11-01 00:20:37.763 [INFO][3710] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0", GenerateName:"whisker-699c84b798-", Namespace:"calico-system", SelfLink:"", UID:"b3f59ccf-7740-48c7-b885-21ec60ac189d", ResourceVersion:"899", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"699c84b798", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685", Pod:"whisker-699c84b798-wfdq5", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.103.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia8ca02657e1", MAC:"12:10:8e:c3:72:da", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:37.780331 env[1484]: 2025-11-01 00:20:37.777 [INFO][3710] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685" Namespace="calico-system" Pod="whisker-699c84b798-wfdq5" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--699c84b798--wfdq5-eth0" Nov 1 00:20:37.798015 env[1484]: time="2025-11-01T00:20:37.797593547Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:37.798015 env[1484]: time="2025-11-01T00:20:37.797628067Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:37.798015 env[1484]: time="2025-11-01T00:20:37.797638907Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:37.798015 env[1484]: time="2025-11-01T00:20:37.797740907Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685 pid=3753 runtime=io.containerd.runc.v2 Nov 1 00:20:37.821615 systemd[1]: Started cri-containerd-afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685.scope. Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.850000 audit: BPF prog-id=143 op=LOAD Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=3753 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166636431323730336162383066306665356165663635333035346138 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=3753 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166636431323730336162383066306665356165663635333035346138 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit: BPF prog-id=144 op=LOAD Nov 1 00:20:37.851000 audit[3774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=3753 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166636431323730336162383066306665356165663635333035346138 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit: BPF prog-id=145 op=LOAD Nov 1 00:20:37.851000 audit[3774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=3753 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166636431323730336162383066306665356165663635333035346138 Nov 1 00:20:37.851000 audit: BPF prog-id=145 op=UNLOAD Nov 1 00:20:37.851000 audit: BPF prog-id=144 op=UNLOAD Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:37.851000 audit: BPF prog-id=146 op=LOAD Nov 1 00:20:37.851000 audit[3774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=3753 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166636431323730336162383066306665356165663635333035346138 Nov 1 00:20:37.867000 audit[3800]: AVC avc: denied { write } for pid=3800 comm="tee" name="fd" dev="proc" ino=26698 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:37.867000 audit[3800]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc47a07c5 a2=241 a3=1b6 items=1 ppid=3772 pid=3800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.867000 audit: CWD cwd="/etc/service/enabled/cni/log" Nov 1 00:20:37.867000 audit: PATH item=0 name="/dev/fd/63" inode=26676 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:37.867000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:37.877000 audit[3820]: AVC avc: denied { write } for pid=3820 comm="tee" name="fd" dev="proc" ino=25764 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:37.877000 audit[3820]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc41077c3 a2=241 a3=1b6 items=1 ppid=3755 pid=3820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.877000 audit: CWD cwd="/etc/service/enabled/bird6/log" Nov 1 00:20:37.877000 audit: PATH item=0 name="/dev/fd/63" inode=25731 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:37.877000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:37.879000 audit[3824]: AVC avc: denied { write } for pid=3824 comm="tee" name="fd" dev="proc" ino=26704 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:37.879000 audit[3824]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcebc17b3 a2=241 a3=1b6 items=1 ppid=3771 pid=3824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.879000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Nov 1 00:20:37.879000 audit: PATH item=0 name="/dev/fd/63" inode=25734 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:37.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:37.903745 env[1484]: time="2025-11-01T00:20:37.903684565Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-699c84b798-wfdq5,Uid:b3f59ccf-7740-48c7-b885-21ec60ac189d,Namespace:calico-system,Attempt:0,} returns sandbox id \"afcd12703ab80f0fe5aef653054a85fda5845b38d4ad90f9092ef163633a4685\"" Nov 1 00:20:37.905332 env[1484]: time="2025-11-01T00:20:37.905281728Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:20:37.911000 audit[3839]: AVC avc: denied { write } for pid=3839 comm="tee" name="fd" dev="proc" ino=25794 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:37.911000 audit[3839]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd9d2a7c4 a2=241 a3=1b6 items=1 ppid=3768 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.911000 audit: CWD cwd="/etc/service/enabled/bird/log" Nov 1 00:20:37.911000 audit: PATH item=0 name="/dev/fd/63" inode=25766 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:37.911000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:37.924000 audit[3844]: AVC avc: denied { write } for pid=3844 comm="tee" name="fd" dev="proc" ino=25799 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:37.924000 audit[3844]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdb5dd7c3 a2=241 a3=1b6 items=1 ppid=3765 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.924000 audit: CWD cwd="/etc/service/enabled/confd/log" Nov 1 00:20:37.924000 audit: PATH item=0 name="/dev/fd/63" inode=25778 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:37.924000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:37.936000 audit[3858]: AVC avc: denied { write } for pid=3858 comm="tee" name="fd" dev="proc" ino=25803 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:37.936000 audit[3858]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdbcdf7c3 a2=241 a3=1b6 items=1 ppid=3773 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.936000 audit: CWD cwd="/etc/service/enabled/felix/log" Nov 1 00:20:37.936000 audit: PATH item=0 name="/dev/fd/63" inode=25796 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:37.936000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:37.940000 audit[3850]: AVC avc: denied { write } for pid=3850 comm="tee" name="fd" dev="proc" ino=25807 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Nov 1 00:20:37.940000 audit[3850]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcfda27b4 a2=241 a3=1b6 items=1 ppid=3749 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:37.940000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Nov 1 00:20:37.940000 audit: PATH item=0 name="/dev/fd/63" inode=25782 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Nov 1 00:20:37.940000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Nov 1 00:20:38.153920 env[1484]: time="2025-11-01T00:20:38.153786980Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:38.157677 env[1484]: time="2025-11-01T00:20:38.157568227Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:20:38.157906 kubelet[2472]: E1101 00:20:38.157852 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:38.158196 kubelet[2472]: E1101 00:20:38.157922 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:38.158229 kubelet[2472]: E1101 00:20:38.158051 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a5df3952c76546deb3fcde5c311cc6b2,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:38.160241 env[1484]: time="2025-11-01T00:20:38.160207151Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:20:38.409286 env[1484]: time="2025-11-01T00:20:38.409166842Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:38.413784 env[1484]: time="2025-11-01T00:20:38.413721369Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:20:38.414052 kubelet[2472]: E1101 00:20:38.413994 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:38.414122 kubelet[2472]: E1101 00:20:38.414063 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:38.414429 kubelet[2472]: E1101 00:20:38.414190 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:38.415603 kubelet[2472]: E1101 00:20:38.415558 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:20:38.975675 kubelet[2472]: I1101 00:20:38.975633 2472 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="f551a9a1-f8bf-4ad2-b15e-04f3b16595a8" path="/var/lib/kubelet/pods/f551a9a1-f8bf-4ad2-b15e-04f3b16595a8/volumes" Nov 1 00:20:39.175642 kubelet[2472]: E1101 00:20:39.175593 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:20:39.212000 audit[3884]: NETFILTER_CFG table=filter:112 family=2 entries=22 op=nft_register_rule pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:39.212000 audit[3884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffff25a6610 a2=0 a3=1 items=0 ppid=2575 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:39.212000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:39.217000 audit[3884]: NETFILTER_CFG table=nat:113 family=2 entries=12 op=nft_register_rule pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:39.217000 audit[3884]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff25a6610 a2=0 a3=1 items=0 ppid=2575 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:39.217000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:39.523935 kubelet[2472]: I1101 00:20:39.523898 2472 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:20:39.542797 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.GN3Kvh.mount: Deactivated successfully. Nov 1 00:20:39.620127 systemd-networkd[1625]: calia8ca02657e1: Gained IPv6LL Nov 1 00:20:40.535918 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.0VzjZG.mount: Deactivated successfully. Nov 1 00:20:41.973541 env[1484]: time="2025-11-01T00:20:41.973436229Z" level=info msg="StopPodSandbox for \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\"" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.025 [INFO][3977] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.025 [INFO][3977] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" iface="eth0" netns="/var/run/netns/cni-274288a8-d99e-793b-3a8b-fa71af5fac64" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.025 [INFO][3977] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" iface="eth0" netns="/var/run/netns/cni-274288a8-d99e-793b-3a8b-fa71af5fac64" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.025 [INFO][3977] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" iface="eth0" netns="/var/run/netns/cni-274288a8-d99e-793b-3a8b-fa71af5fac64" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.025 [INFO][3977] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.025 [INFO][3977] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.049 [INFO][3985] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.049 [INFO][3985] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.049 [INFO][3985] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.058 [WARNING][3985] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.058 [INFO][3985] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.059 [INFO][3985] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:42.061964 env[1484]: 2025-11-01 00:20:42.060 [INFO][3977] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:42.065777 env[1484]: time="2025-11-01T00:20:42.064528610Z" level=info msg="TearDown network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\" successfully" Nov 1 00:20:42.065777 env[1484]: time="2025-11-01T00:20:42.064926170Z" level=info msg="StopPodSandbox for \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\" returns successfully" Nov 1 00:20:42.064407 systemd[1]: run-netns-cni\x2d274288a8\x2dd99e\x2d793b\x2d3a8b\x2dfa71af5fac64.mount: Deactivated successfully. Nov 1 00:20:42.066193 env[1484]: time="2025-11-01T00:20:42.065964092Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-xbgdv,Uid:325cca53-bb7c-48f5-b2f1-432375aa7e1f,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:20:42.229773 systemd-networkd[1625]: calid4778568a2e: Link UP Nov 1 00:20:42.244653 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:42.244809 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid4778568a2e: link becomes ready Nov 1 00:20:42.244998 systemd-networkd[1625]: calid4778568a2e: Gained carrier Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.142 [INFO][3991] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.157 [INFO][3991] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0 calico-apiserver-856fdb46cd- calico-apiserver 325cca53-bb7c-48f5-b2f1-432375aa7e1f 928 0 2025-11-01 00:20:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:856fdb46cd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 calico-apiserver-856fdb46cd-xbgdv eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid4778568a2e [] [] }} ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.158 [INFO][3991] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.183 [INFO][4004] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" HandleID="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.183 [INFO][4004] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" HandleID="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"calico-apiserver-856fdb46cd-xbgdv", "timestamp":"2025-11-01 00:20:42.183188392 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.183 [INFO][4004] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.183 [INFO][4004] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.183 [INFO][4004] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.192 [INFO][4004] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.196 [INFO][4004] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.203 [INFO][4004] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.205 [INFO][4004] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.207 [INFO][4004] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.207 [INFO][4004] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.208 [INFO][4004] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.217 [INFO][4004] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.225 [INFO][4004] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.2/26] block=192.168.103.0/26 handle="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.225 [INFO][4004] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.2/26] handle="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.225 [INFO][4004] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:42.266242 env[1484]: 2025-11-01 00:20:42.225 [INFO][4004] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.2/26] IPv6=[] ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" HandleID="k8s-pod-network.fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.266939 env[1484]: 2025-11-01 00:20:42.227 [INFO][3991] cni-plugin/k8s.go 418: Populated endpoint ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"325cca53-bb7c-48f5-b2f1-432375aa7e1f", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"calico-apiserver-856fdb46cd-xbgdv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4778568a2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:42.266939 env[1484]: 2025-11-01 00:20:42.227 [INFO][3991] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.2/32] ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.266939 env[1484]: 2025-11-01 00:20:42.227 [INFO][3991] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid4778568a2e ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.266939 env[1484]: 2025-11-01 00:20:42.245 [INFO][3991] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.266939 env[1484]: 2025-11-01 00:20:42.246 [INFO][3991] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"325cca53-bb7c-48f5-b2f1-432375aa7e1f", ResourceVersion:"928", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff", Pod:"calico-apiserver-856fdb46cd-xbgdv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4778568a2e", MAC:"6a:a1:c4:ef:92:bd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:42.266939 env[1484]: 2025-11-01 00:20:42.262 [INFO][3991] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-xbgdv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:42.282811 env[1484]: time="2025-11-01T00:20:42.282619985Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:42.282811 env[1484]: time="2025-11-01T00:20:42.282659265Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:42.282811 env[1484]: time="2025-11-01T00:20:42.282669425Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:42.283210 env[1484]: time="2025-11-01T00:20:42.283130065Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff pid=4033 runtime=io.containerd.runc.v2 Nov 1 00:20:42.306673 systemd[1]: Started cri-containerd-fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff.scope. Nov 1 00:20:42.352298 kernel: kauditd_printk_skb: 131 callbacks suppressed Nov 1 00:20:42.352428 kernel: audit: type=1400 audit(1761956442.329:1060): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.378421 kernel: audit: type=1400 audit(1761956442.329:1061): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.400654 kernel: audit: type=1400 audit(1761956442.329:1062): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.401652 env[1484]: time="2025-11-01T00:20:42.401610767Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-xbgdv,Uid:325cca53-bb7c-48f5-b2f1-432375aa7e1f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff\"" Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.418421 kernel: audit: type=1400 audit(1761956442.329:1063): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.436294 kernel: audit: type=1400 audit(1761956442.329:1064): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.453940 kernel: audit: type=1400 audit(1761956442.329:1065): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.454282 env[1484]: time="2025-11-01T00:20:42.454240768Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.471922 kernel: audit: type=1400 audit(1761956442.329:1066): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.489201 kernel: audit: type=1400 audit(1761956442.329:1067): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.508987 kernel: audit: type=1400 audit(1761956442.329:1068): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.525878 kernel: audit: type=1400 audit(1761956442.334:1069): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.334000 audit: BPF prog-id=147 op=LOAD Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4033 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:42.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373234386561303533306434643063326264323465336332396466 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4033 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:42.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373234386561303533306434643063326264323465336332396466 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit: BPF prog-id=148 op=LOAD Nov 1 00:20:42.352000 audit[4043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4033 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:42.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373234386561303533306434643063326264323465336332396466 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit: BPF prog-id=149 op=LOAD Nov 1 00:20:42.352000 audit[4043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4033 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:42.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373234386561303533306434643063326264323465336332396466 Nov 1 00:20:42.352000 audit: BPF prog-id=149 op=UNLOAD Nov 1 00:20:42.352000 audit: BPF prog-id=148 op=UNLOAD Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:42.352000 audit: BPF prog-id=150 op=LOAD Nov 1 00:20:42.352000 audit[4043]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4033 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:42.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373234386561303533306434643063326264323465336332396466 Nov 1 00:20:42.754207 env[1484]: time="2025-11-01T00:20:42.754072389Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:42.758264 env[1484]: time="2025-11-01T00:20:42.758211835Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:42.759091 kubelet[2472]: E1101 00:20:42.758599 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:42.759091 kubelet[2472]: E1101 00:20:42.758653 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:42.759091 kubelet[2472]: E1101 00:20:42.759031 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5mbsm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-xbgdv_calico-apiserver(325cca53-bb7c-48f5-b2f1-432375aa7e1f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:42.760246 kubelet[2472]: E1101 00:20:42.760174 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:20:43.182385 kubelet[2472]: E1101 00:20:43.182334 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:20:43.211000 audit[4078]: NETFILTER_CFG table=filter:114 family=2 entries=22 op=nft_register_rule pid=4078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:43.211000 audit[4078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffc05d06c0 a2=0 a3=1 items=0 ppid=2575 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:43.211000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:43.215000 audit[4078]: NETFILTER_CFG table=nat:115 family=2 entries=12 op=nft_register_rule pid=4078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:43.215000 audit[4078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc05d06c0 a2=0 a3=1 items=0 ppid=2575 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:43.215000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:43.653022 systemd-networkd[1625]: calid4778568a2e: Gained IPv6LL Nov 1 00:20:43.973487 env[1484]: time="2025-11-01T00:20:43.973367437Z" level=info msg="StopPodSandbox for \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\"" Nov 1 00:20:43.973796 env[1484]: time="2025-11-01T00:20:43.973377797Z" level=info msg="StopPodSandbox for \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\"" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.073 [INFO][4120] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.074 [INFO][4120] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" iface="eth0" netns="/var/run/netns/cni-2aba3a2d-b52e-6d26-0eed-cdfc72c172fb" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.074 [INFO][4120] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" iface="eth0" netns="/var/run/netns/cni-2aba3a2d-b52e-6d26-0eed-cdfc72c172fb" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.075 [INFO][4120] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" iface="eth0" netns="/var/run/netns/cni-2aba3a2d-b52e-6d26-0eed-cdfc72c172fb" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.075 [INFO][4120] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.075 [INFO][4120] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.098 [INFO][4133] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.099 [INFO][4133] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.099 [INFO][4133] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.107 [WARNING][4133] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.107 [INFO][4133] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.108 [INFO][4133] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:44.113004 env[1484]: 2025-11-01 00:20:44.110 [INFO][4120] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:44.115866 systemd[1]: run-netns-cni\x2d2aba3a2d\x2db52e\x2d6d26\x2d0eed\x2dcdfc72c172fb.mount: Deactivated successfully. Nov 1 00:20:44.116783 env[1484]: time="2025-11-01T00:20:44.116734290Z" level=info msg="TearDown network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\" successfully" Nov 1 00:20:44.116907 env[1484]: time="2025-11-01T00:20:44.116873251Z" level=info msg="StopPodSandbox for \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\" returns successfully" Nov 1 00:20:44.121409 env[1484]: time="2025-11-01T00:20:44.121375337Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-n8gjk,Uid:2e8a69dd-776a-4945-85af-d19c382f23d2,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.069 [INFO][4114] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.069 [INFO][4114] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" iface="eth0" netns="/var/run/netns/cni-d7758561-bdf1-e1db-4959-fb5cb6c25fa1" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.069 [INFO][4114] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" iface="eth0" netns="/var/run/netns/cni-d7758561-bdf1-e1db-4959-fb5cb6c25fa1" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.073 [INFO][4114] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" iface="eth0" netns="/var/run/netns/cni-d7758561-bdf1-e1db-4959-fb5cb6c25fa1" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.073 [INFO][4114] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.073 [INFO][4114] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.109 [INFO][4131] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.109 [INFO][4131] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.110 [INFO][4131] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.124 [WARNING][4131] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.124 [INFO][4131] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.136 [INFO][4131] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:44.140188 env[1484]: 2025-11-01 00:20:44.138 [INFO][4114] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:44.142872 systemd[1]: run-netns-cni\x2dd7758561\x2dbdf1\x2de1db\x2d4959\x2dfb5cb6c25fa1.mount: Deactivated successfully. Nov 1 00:20:44.143797 env[1484]: time="2025-11-01T00:20:44.143757050Z" level=info msg="TearDown network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\" successfully" Nov 1 00:20:44.143921 env[1484]: time="2025-11-01T00:20:44.143903291Z" level=info msg="StopPodSandbox for \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\" returns successfully" Nov 1 00:20:44.144720 env[1484]: time="2025-11-01T00:20:44.144678052Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fns4p,Uid:864706af-b74b-4daa-9415-eca81f18da43,Namespace:calico-system,Attempt:1,}" Nov 1 00:20:44.187076 kubelet[2472]: E1101 00:20:44.186395 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:20:44.319956 systemd-networkd[1625]: cali49e3d08b070: Link UP Nov 1 00:20:44.334097 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:44.334223 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali49e3d08b070: link becomes ready Nov 1 00:20:44.336056 systemd-networkd[1625]: cali49e3d08b070: Gained carrier Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.213 [INFO][4144] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.231 [INFO][4144] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0 calico-apiserver-856fdb46cd- calico-apiserver 2e8a69dd-776a-4945-85af-d19c382f23d2 952 0 2025-11-01 00:20:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:856fdb46cd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 calico-apiserver-856fdb46cd-n8gjk eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali49e3d08b070 [] [] }} ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.231 [INFO][4144] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.269 [INFO][4169] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" HandleID="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.269 [INFO][4169] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" HandleID="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab3a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"calico-apiserver-856fdb46cd-n8gjk", "timestamp":"2025-11-01 00:20:44.269138957 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.269 [INFO][4169] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.269 [INFO][4169] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.269 [INFO][4169] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.279 [INFO][4169] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.285 [INFO][4169] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.290 [INFO][4169] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.291 [INFO][4169] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.293 [INFO][4169] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.293 [INFO][4169] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.294 [INFO][4169] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.299 [INFO][4169] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.307 [INFO][4169] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.3/26] block=192.168.103.0/26 handle="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.307 [INFO][4169] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.3/26] handle="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.307 [INFO][4169] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:44.353090 env[1484]: 2025-11-01 00:20:44.307 [INFO][4169] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.3/26] IPv6=[] ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" HandleID="k8s-pod-network.e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.353768 env[1484]: 2025-11-01 00:20:44.313 [INFO][4144] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"2e8a69dd-776a-4945-85af-d19c382f23d2", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"calico-apiserver-856fdb46cd-n8gjk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali49e3d08b070", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:44.353768 env[1484]: 2025-11-01 00:20:44.313 [INFO][4144] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.3/32] ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.353768 env[1484]: 2025-11-01 00:20:44.313 [INFO][4144] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali49e3d08b070 ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.353768 env[1484]: 2025-11-01 00:20:44.336 [INFO][4144] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.353768 env[1484]: 2025-11-01 00:20:44.336 [INFO][4144] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"2e8a69dd-776a-4945-85af-d19c382f23d2", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a", Pod:"calico-apiserver-856fdb46cd-n8gjk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali49e3d08b070", MAC:"1e:5f:b8:8c:eb:03", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:44.353768 env[1484]: 2025-11-01 00:20:44.351 [INFO][4144] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a" Namespace="calico-apiserver" Pod="calico-apiserver-856fdb46cd-n8gjk" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:44.367593 env[1484]: time="2025-11-01T00:20:44.367448463Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:44.367593 env[1484]: time="2025-11-01T00:20:44.367498623Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:44.368131 env[1484]: time="2025-11-01T00:20:44.367518383Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:44.368131 env[1484]: time="2025-11-01T00:20:44.368087224Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a pid=4198 runtime=io.containerd.runc.v2 Nov 1 00:20:44.382195 systemd[1]: Started cri-containerd-e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a.scope. Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.404000 audit: BPF prog-id=151 op=LOAD Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4198 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538393032356236663338306636616365613837653333666233303637 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4198 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538393032356236663338306636616365613837653333666233303637 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit: BPF prog-id=152 op=LOAD Nov 1 00:20:44.405000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4198 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538393032356236663338306636616365613837653333666233303637 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit: BPF prog-id=153 op=LOAD Nov 1 00:20:44.405000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4198 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538393032356236663338306636616365613837653333666233303637 Nov 1 00:20:44.405000 audit: BPF prog-id=153 op=UNLOAD Nov 1 00:20:44.405000 audit: BPF prog-id=152 op=UNLOAD Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { perfmon } for pid=4209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit[4209]: AVC avc: denied { bpf } for pid=4209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.405000 audit: BPF prog-id=154 op=LOAD Nov 1 00:20:44.405000 audit[4209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4198 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538393032356236663338306636616365613837653333666233303637 Nov 1 00:20:44.448747 systemd-networkd[1625]: cali87c1452659a: Link UP Nov 1 00:20:44.457339 systemd-networkd[1625]: cali87c1452659a: Gained carrier Nov 1 00:20:44.457990 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali87c1452659a: link becomes ready Nov 1 00:20:44.458928 env[1484]: time="2025-11-01T00:20:44.458872118Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-856fdb46cd-n8gjk,Uid:2e8a69dd-776a-4945-85af-d19c382f23d2,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a\"" Nov 1 00:20:44.463194 env[1484]: time="2025-11-01T00:20:44.463158965Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.240 [INFO][4155] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.252 [INFO][4155] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0 csi-node-driver- calico-system 864706af-b74b-4daa-9415-eca81f18da43 951 0 2025-11-01 00:20:20 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:857b56db8f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 csi-node-driver-fns4p eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali87c1452659a [] [] }} ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.252 [INFO][4155] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.308 [INFO][4175] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" HandleID="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.308 [INFO][4175] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" HandleID="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000323720), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"csi-node-driver-fns4p", "timestamp":"2025-11-01 00:20:44.308204975 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.308 [INFO][4175] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.308 [INFO][4175] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.308 [INFO][4175] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.381 [INFO][4175] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.389 [INFO][4175] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.394 [INFO][4175] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.396 [INFO][4175] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.399 [INFO][4175] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.399 [INFO][4175] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.400 [INFO][4175] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13 Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.408 [INFO][4175] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.428 [INFO][4175] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.4/26] block=192.168.103.0/26 handle="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.428 [INFO][4175] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.4/26] handle="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.428 [INFO][4175] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:44.481309 env[1484]: 2025-11-01 00:20:44.428 [INFO][4175] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.4/26] IPv6=[] ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" HandleID="k8s-pod-network.a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.481972 env[1484]: 2025-11-01 00:20:44.435 [INFO][4155] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"864706af-b74b-4daa-9415-eca81f18da43", ResourceVersion:"951", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"csi-node-driver-fns4p", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.103.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali87c1452659a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:44.481972 env[1484]: 2025-11-01 00:20:44.435 [INFO][4155] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.4/32] ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.481972 env[1484]: 2025-11-01 00:20:44.435 [INFO][4155] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali87c1452659a ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.481972 env[1484]: 2025-11-01 00:20:44.461 [INFO][4155] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.481972 env[1484]: 2025-11-01 00:20:44.462 [INFO][4155] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"864706af-b74b-4daa-9415-eca81f18da43", ResourceVersion:"951", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13", Pod:"csi-node-driver-fns4p", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.103.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali87c1452659a", MAC:"72:cb:9c:ab:57:30", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:44.481972 env[1484]: 2025-11-01 00:20:44.479 [INFO][4155] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13" Namespace="calico-system" Pod="csi-node-driver-fns4p" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:44.501506 env[1484]: time="2025-11-01T00:20:44.501438222Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:44.501731 env[1484]: time="2025-11-01T00:20:44.501704862Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:44.501820 env[1484]: time="2025-11-01T00:20:44.501799022Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:44.502120 env[1484]: time="2025-11-01T00:20:44.502087543Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13 pid=4253 runtime=io.containerd.runc.v2 Nov 1 00:20:44.514370 systemd[1]: Started cri-containerd-a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13.scope. Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.535000 audit: BPF prog-id=155 op=LOAD Nov 1 00:20:44.535000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.535000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4253 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313331643038656264653665613732393837313134373365373166 Nov 1 00:20:44.535000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.535000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4253 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313331643038656264653665613732393837313134373365373166 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit: BPF prog-id=156 op=LOAD Nov 1 00:20:44.536000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4253 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313331643038656264653665613732393837313134373365373166 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit: BPF prog-id=157 op=LOAD Nov 1 00:20:44.536000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4253 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313331643038656264653665613732393837313134373365373166 Nov 1 00:20:44.536000 audit: BPF prog-id=157 op=UNLOAD Nov 1 00:20:44.536000 audit: BPF prog-id=156 op=UNLOAD Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { perfmon } for pid=4260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit[4260]: AVC avc: denied { bpf } for pid=4260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:44.536000 audit: BPF prog-id=158 op=LOAD Nov 1 00:20:44.536000 audit[4260]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4253 pid=4260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136313331643038656264653665613732393837313134373365373166 Nov 1 00:20:44.568088 env[1484]: time="2025-11-01T00:20:44.568044800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fns4p,Uid:864706af-b74b-4daa-9415-eca81f18da43,Namespace:calico-system,Attempt:1,} returns sandbox id \"a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13\"" Nov 1 00:20:44.687942 env[1484]: time="2025-11-01T00:20:44.687863418Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:44.691784 env[1484]: time="2025-11-01T00:20:44.691726464Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:44.692848 kubelet[2472]: E1101 00:20:44.692152 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:44.692848 kubelet[2472]: E1101 00:20:44.692214 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:44.692848 kubelet[2472]: E1101 00:20:44.692406 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9pxrj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-n8gjk_calico-apiserver(2e8a69dd-776a-4945-85af-d19c382f23d2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:44.693129 env[1484]: time="2025-11-01T00:20:44.692986226Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:20:44.694440 kubelet[2472]: E1101 00:20:44.694379 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:20:44.908318 env[1484]: time="2025-11-01T00:20:44.908254426Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:44.911527 env[1484]: time="2025-11-01T00:20:44.911458150Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:20:44.911729 kubelet[2472]: E1101 00:20:44.911677 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:44.911800 kubelet[2472]: E1101 00:20:44.911738 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:44.911910 kubelet[2472]: E1101 00:20:44.911849 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:44.914044 env[1484]: time="2025-11-01T00:20:44.914000914Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:20:44.973655 env[1484]: time="2025-11-01T00:20:44.973543563Z" level=info msg="StopPodSandbox for \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\"" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.032 [INFO][4307] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.032 [INFO][4307] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" iface="eth0" netns="/var/run/netns/cni-f1de27ea-b5b0-71b4-8223-db4855df3282" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.034 [INFO][4307] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" iface="eth0" netns="/var/run/netns/cni-f1de27ea-b5b0-71b4-8223-db4855df3282" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.034 [INFO][4307] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" iface="eth0" netns="/var/run/netns/cni-f1de27ea-b5b0-71b4-8223-db4855df3282" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.034 [INFO][4307] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.034 [INFO][4307] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.059 [INFO][4315] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.059 [INFO][4315] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.059 [INFO][4315] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.071 [WARNING][4315] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.071 [INFO][4315] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.072 [INFO][4315] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:45.075248 env[1484]: 2025-11-01 00:20:45.073 [INFO][4307] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:45.075724 env[1484]: time="2025-11-01T00:20:45.075371232Z" level=info msg="TearDown network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\" successfully" Nov 1 00:20:45.075724 env[1484]: time="2025-11-01T00:20:45.075407352Z" level=info msg="StopPodSandbox for \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\" returns successfully" Nov 1 00:20:45.076120 env[1484]: time="2025-11-01T00:20:45.076086833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d574c4f5b-j8zsj,Uid:06d0dc32-8772-475c-a553-c9602f03c588,Namespace:calico-apiserver,Attempt:1,}" Nov 1 00:20:45.118218 systemd[1]: run-netns-cni\x2df1de27ea\x2db5b0\x2d71b4\x2d8223\x2ddb4855df3282.mount: Deactivated successfully. Nov 1 00:20:45.171205 env[1484]: time="2025-11-01T00:20:45.171155892Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:45.174760 env[1484]: time="2025-11-01T00:20:45.174666497Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:20:45.175229 kubelet[2472]: E1101 00:20:45.175180 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:20:45.175326 kubelet[2472]: E1101 00:20:45.175241 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:20:45.175423 kubelet[2472]: E1101 00:20:45.175367 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:45.177072 kubelet[2472]: E1101 00:20:45.176535 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:45.200916 kubelet[2472]: E1101 00:20:45.198684 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:20:45.200916 kubelet[2472]: E1101 00:20:45.199000 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:45.266000 audit[4342]: NETFILTER_CFG table=filter:116 family=2 entries=22 op=nft_register_rule pid=4342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:45.266000 audit[4342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffdb7ffb10 a2=0 a3=1 items=0 ppid=2575 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:45.268000 audit[4342]: NETFILTER_CFG table=nat:117 family=2 entries=12 op=nft_register_rule pid=4342 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:45.268000 audit[4342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdb7ffb10 a2=0 a3=1 items=0 ppid=2575 pid=4342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.268000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:45.285108 systemd-networkd[1625]: cali765b902987f: Link UP Nov 1 00:20:45.292129 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali765b902987f: link becomes ready Nov 1 00:20:45.293240 systemd-networkd[1625]: cali765b902987f: Gained carrier Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.141 [INFO][4321] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.154 [INFO][4321] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0 calico-apiserver-6d574c4f5b- calico-apiserver 06d0dc32-8772-475c-a553-c9602f03c588 972 0 2025-11-01 00:20:15 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6d574c4f5b projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 calico-apiserver-6d574c4f5b-j8zsj eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali765b902987f [] [] }} ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.154 [INFO][4321] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.186 [INFO][4334] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" HandleID="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.187 [INFO][4334] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" HandleID="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"calico-apiserver-6d574c4f5b-j8zsj", "timestamp":"2025-11-01 00:20:45.186935155 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.187 [INFO][4334] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.187 [INFO][4334] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.187 [INFO][4334] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.222 [INFO][4334] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.231 [INFO][4334] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.246 [INFO][4334] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.256 [INFO][4334] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.258 [INFO][4334] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.259 [INFO][4334] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.261 [INFO][4334] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255 Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.270 [INFO][4334] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.280 [INFO][4334] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.5/26] block=192.168.103.0/26 handle="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.280 [INFO][4334] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.5/26] handle="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.281 [INFO][4334] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:45.311378 env[1484]: 2025-11-01 00:20:45.281 [INFO][4334] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.5/26] IPv6=[] ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" HandleID="k8s-pod-network.74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.312004 env[1484]: 2025-11-01 00:20:45.282 [INFO][4321] cni-plugin/k8s.go 418: Populated endpoint ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0", GenerateName:"calico-apiserver-6d574c4f5b-", Namespace:"calico-apiserver", SelfLink:"", UID:"06d0dc32-8772-475c-a553-c9602f03c588", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d574c4f5b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"calico-apiserver-6d574c4f5b-j8zsj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali765b902987f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:45.312004 env[1484]: 2025-11-01 00:20:45.282 [INFO][4321] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.5/32] ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.312004 env[1484]: 2025-11-01 00:20:45.282 [INFO][4321] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali765b902987f ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.312004 env[1484]: 2025-11-01 00:20:45.293 [INFO][4321] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.312004 env[1484]: 2025-11-01 00:20:45.293 [INFO][4321] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0", GenerateName:"calico-apiserver-6d574c4f5b-", Namespace:"calico-apiserver", SelfLink:"", UID:"06d0dc32-8772-475c-a553-c9602f03c588", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d574c4f5b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255", Pod:"calico-apiserver-6d574c4f5b-j8zsj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali765b902987f", MAC:"f6:5e:4b:81:26:9b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:45.312004 env[1484]: 2025-11-01 00:20:45.309 [INFO][4321] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255" Namespace="calico-apiserver" Pod="calico-apiserver-6d574c4f5b-j8zsj" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:45.324310 env[1484]: time="2025-11-01T00:20:45.324246475Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:45.324493 env[1484]: time="2025-11-01T00:20:45.324471876Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:45.324572 env[1484]: time="2025-11-01T00:20:45.324553756Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:45.324788 env[1484]: time="2025-11-01T00:20:45.324756396Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255 pid=4358 runtime=io.containerd.runc.v2 Nov 1 00:20:45.341798 systemd[1]: Started cri-containerd-74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255.scope. Nov 1 00:20:45.347664 systemd[1]: run-containerd-runc-k8s.io-74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255-runc.19qwAH.mount: Deactivated successfully. Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit: BPF prog-id=159 op=LOAD Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4358 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663537626332363035623535393663326435383665346365656633 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4358 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663537626332363035623535393663326435383665346365656633 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit: BPF prog-id=160 op=LOAD Nov 1 00:20:45.364000 audit[4368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4358 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663537626332363035623535393663326435383665346365656633 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit: BPF prog-id=161 op=LOAD Nov 1 00:20:45.364000 audit[4368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4358 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663537626332363035623535393663326435383665346365656633 Nov 1 00:20:45.364000 audit: BPF prog-id=161 op=UNLOAD Nov 1 00:20:45.364000 audit: BPF prog-id=160 op=UNLOAD Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { perfmon } for pid=4368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit[4368]: AVC avc: denied { bpf } for pid=4368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:45.364000 audit: BPF prog-id=162 op=LOAD Nov 1 00:20:45.364000 audit[4368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4358 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734663537626332363035623535393663326435383665346365656633 Nov 1 00:20:45.383691 env[1484]: time="2025-11-01T00:20:45.383650162Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6d574c4f5b-j8zsj,Uid:06d0dc32-8772-475c-a553-c9602f03c588,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255\"" Nov 1 00:20:45.385993 env[1484]: time="2025-11-01T00:20:45.385961726Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:45.514914 kubelet[2472]: I1101 00:20:45.514562 2472 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Nov 1 00:20:45.558000 audit[4391]: NETFILTER_CFG table=filter:118 family=2 entries=21 op=nft_register_rule pid=4391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:45.558000 audit[4391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdc1af6b0 a2=0 a3=1 items=0 ppid=2575 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.558000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:45.563000 audit[4391]: NETFILTER_CFG table=nat:119 family=2 entries=19 op=nft_register_chain pid=4391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:45.563000 audit[4391]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdc1af6b0 a2=0 a3=1 items=0 ppid=2575 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:45.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:45.625541 env[1484]: time="2025-11-01T00:20:45.625482235Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:45.629256 env[1484]: time="2025-11-01T00:20:45.629177841Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:45.629644 kubelet[2472]: E1101 00:20:45.629597 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:45.629731 kubelet[2472]: E1101 00:20:45.629655 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:45.629813 kubelet[2472]: E1101 00:20:45.629771 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-bxzq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d574c4f5b-j8zsj_calico-apiserver(06d0dc32-8772-475c-a553-c9602f03c588): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:45.631225 kubelet[2472]: E1101 00:20:45.631132 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:20:45.828017 systemd-networkd[1625]: cali87c1452659a: Gained IPv6LL Nov 1 00:20:45.974173 env[1484]: time="2025-11-01T00:20:45.974129905Z" level=info msg="StopPodSandbox for \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\"" Nov 1 00:20:45.975926 env[1484]: time="2025-11-01T00:20:45.975893907Z" level=info msg="StopPodSandbox for \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\"" Nov 1 00:20:45.976268 env[1484]: time="2025-11-01T00:20:45.976125387Z" level=info msg="StopPodSandbox for \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\"" Nov 1 00:20:46.153994 systemd-networkd[1625]: cali49e3d08b070: Gained IPv6LL Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.085 [INFO][4429] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.085 [INFO][4429] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" iface="eth0" netns="/var/run/netns/cni-4fe48921-6df6-1adb-644c-092f993aac3e" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.085 [INFO][4429] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" iface="eth0" netns="/var/run/netns/cni-4fe48921-6df6-1adb-644c-092f993aac3e" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.087 [INFO][4429] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" iface="eth0" netns="/var/run/netns/cni-4fe48921-6df6-1adb-644c-092f993aac3e" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.087 [INFO][4429] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.087 [INFO][4429] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.127 [INFO][4457] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.127 [INFO][4457] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.127 [INFO][4457] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.144 [WARNING][4457] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.144 [INFO][4457] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.146 [INFO][4457] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:46.158753 env[1484]: 2025-11-01 00:20:46.154 [INFO][4429] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:46.162518 env[1484]: time="2025-11-01T00:20:46.161860895Z" level=info msg="TearDown network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\" successfully" Nov 1 00:20:46.162518 env[1484]: time="2025-11-01T00:20:46.161924255Z" level=info msg="StopPodSandbox for \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\" returns successfully" Nov 1 00:20:46.161192 systemd[1]: run-netns-cni\x2d4fe48921\x2d6df6\x2d1adb\x2d644c\x2d092f993aac3e.mount: Deactivated successfully. Nov 1 00:20:46.162865 env[1484]: time="2025-11-01T00:20:46.162619136Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-65fdfb6775-jq5nz,Uid:d0c030a0-2978-427b-aeca-01939df97b98,Namespace:calico-system,Attempt:1,}" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.131 [INFO][4438] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.131 [INFO][4438] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" iface="eth0" netns="/var/run/netns/cni-aaaabec1-0c56-1095-7d3d-eecdd4657a75" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.131 [INFO][4438] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" iface="eth0" netns="/var/run/netns/cni-aaaabec1-0c56-1095-7d3d-eecdd4657a75" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.131 [INFO][4438] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" iface="eth0" netns="/var/run/netns/cni-aaaabec1-0c56-1095-7d3d-eecdd4657a75" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.131 [INFO][4438] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.131 [INFO][4438] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.175 [INFO][4470] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.175 [INFO][4470] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.175 [INFO][4470] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.185 [WARNING][4470] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.187 [INFO][4470] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.189 [INFO][4470] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:46.196422 env[1484]: 2025-11-01 00:20:46.194 [INFO][4438] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:46.199389 systemd[1]: run-netns-cni\x2daaaabec1\x2d0c56\x2d1095\x2d7d3d\x2deecdd4657a75.mount: Deactivated successfully. Nov 1 00:20:46.201319 env[1484]: time="2025-11-01T00:20:46.201276712Z" level=info msg="TearDown network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\" successfully" Nov 1 00:20:46.204649 kubelet[2472]: E1101 00:20:46.204528 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:20:46.204649 kubelet[2472]: E1101 00:20:46.204597 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:20:46.205299 kubelet[2472]: E1101 00:20:46.205241 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:20:46.217056 env[1484]: time="2025-11-01T00:20:46.209876044Z" level=info msg="StopPodSandbox for \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\" returns successfully" Nov 1 00:20:46.224961 env[1484]: time="2025-11-01T00:20:46.224133304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-b4579,Uid:716bcd07-1553-45a0-bebf-9f6d85629075,Namespace:kube-system,Attempt:1,}" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.102 [INFO][4418] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.102 [INFO][4418] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" iface="eth0" netns="/var/run/netns/cni-e8429943-cf6b-d096-3106-8fe8003400ab" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.103 [INFO][4418] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" iface="eth0" netns="/var/run/netns/cni-e8429943-cf6b-d096-3106-8fe8003400ab" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.103 [INFO][4418] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" iface="eth0" netns="/var/run/netns/cni-e8429943-cf6b-d096-3106-8fe8003400ab" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.103 [INFO][4418] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.103 [INFO][4418] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.180 [INFO][4462] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.180 [INFO][4462] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.189 [INFO][4462] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.217 [WARNING][4462] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.217 [INFO][4462] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.238 [INFO][4462] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:46.245809 env[1484]: 2025-11-01 00:20:46.239 [INFO][4418] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:46.248453 systemd[1]: run-netns-cni\x2de8429943\x2dcf6b\x2dd096\x2d3106\x2d8fe8003400ab.mount: Deactivated successfully. Nov 1 00:20:46.252420 env[1484]: time="2025-11-01T00:20:46.252332625Z" level=info msg="TearDown network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\" successfully" Nov 1 00:20:46.252420 env[1484]: time="2025-11-01T00:20:46.252409425Z" level=info msg="StopPodSandbox for \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\" returns successfully" Nov 1 00:20:46.253338 env[1484]: time="2025-11-01T00:20:46.253304106Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-6fknv,Uid:e9955b10-5b47-461a-b3ab-955ce4c39730,Namespace:calico-system,Attempt:1,}" Nov 1 00:20:46.332000 audit[4506]: NETFILTER_CFG table=filter:120 family=2 entries=20 op=nft_register_rule pid=4506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:46.332000 audit[4506]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffcb705740 a2=0 a3=1 items=0 ppid=2575 pid=4506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.332000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:46.351000 audit[4506]: NETFILTER_CFG table=nat:121 family=2 entries=14 op=nft_register_rule pid=4506 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:46.351000 audit[4506]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3468 a0=3 a1=ffffcb705740 a2=0 a3=1 items=0 ppid=2575 pid=4506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:46.469012 systemd-networkd[1625]: cali765b902987f: Gained IPv6LL Nov 1 00:20:46.529995 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Nov 1 00:20:46.530142 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4c0b0e713d5: link becomes ready Nov 1 00:20:46.520014 systemd-networkd[1625]: cali4c0b0e713d5: Link UP Nov 1 00:20:46.535449 systemd-networkd[1625]: cali4c0b0e713d5: Gained carrier Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.281 [INFO][4480] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.327 [INFO][4480] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0 calico-kube-controllers-65fdfb6775- calico-system d0c030a0-2978-427b-aeca-01939df97b98 1003 0 2025-11-01 00:20:20 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:65fdfb6775 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 calico-kube-controllers-65fdfb6775-jq5nz eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali4c0b0e713d5 [] [] }} ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.327 [INFO][4480] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.424 [INFO][4515] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" HandleID="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.424 [INFO][4515] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" HandleID="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab370), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"calico-kube-controllers-65fdfb6775-jq5nz", "timestamp":"2025-11-01 00:20:46.424404952 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.424 [INFO][4515] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.424 [INFO][4515] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.424 [INFO][4515] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.443 [INFO][4515] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.452 [INFO][4515] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.458 [INFO][4515] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.459 [INFO][4515] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.461 [INFO][4515] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.461 [INFO][4515] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.465 [INFO][4515] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0 Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.470 [INFO][4515] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.509 [INFO][4515] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.6/26] block=192.168.103.0/26 handle="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.509 [INFO][4515] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.6/26] handle="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.509 [INFO][4515] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:46.558053 env[1484]: 2025-11-01 00:20:46.509 [INFO][4515] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.6/26] IPv6=[] ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" HandleID="k8s-pod-network.f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.558673 env[1484]: 2025-11-01 00:20:46.510 [INFO][4480] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0", GenerateName:"calico-kube-controllers-65fdfb6775-", Namespace:"calico-system", SelfLink:"", UID:"d0c030a0-2978-427b-aeca-01939df97b98", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"65fdfb6775", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"calico-kube-controllers-65fdfb6775-jq5nz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.103.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c0b0e713d5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:46.558673 env[1484]: 2025-11-01 00:20:46.510 [INFO][4480] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.6/32] ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.558673 env[1484]: 2025-11-01 00:20:46.510 [INFO][4480] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4c0b0e713d5 ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.558673 env[1484]: 2025-11-01 00:20:46.535 [INFO][4480] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.558673 env[1484]: 2025-11-01 00:20:46.536 [INFO][4480] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0", GenerateName:"calico-kube-controllers-65fdfb6775-", Namespace:"calico-system", SelfLink:"", UID:"d0c030a0-2978-427b-aeca-01939df97b98", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"65fdfb6775", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0", Pod:"calico-kube-controllers-65fdfb6775-jq5nz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.103.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c0b0e713d5", MAC:"f6:3f:13:c7:a7:1f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:46.558673 env[1484]: 2025-11-01 00:20:46.556 [INFO][4480] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0" Namespace="calico-system" Pod="calico-kube-controllers-65fdfb6775-jq5nz" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:46.581368 env[1484]: time="2025-11-01T00:20:46.580352256Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:46.581368 env[1484]: time="2025-11-01T00:20:46.580390616Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:46.581368 env[1484]: time="2025-11-01T00:20:46.580401096Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:46.581368 env[1484]: time="2025-11-01T00:20:46.580628897Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0 pid=4561 runtime=io.containerd.runc.v2 Nov 1 00:20:46.608671 systemd[1]: Started cri-containerd-f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0.scope. Nov 1 00:20:46.628176 systemd-networkd[1625]: calif1ea88dbb70: Link UP Nov 1 00:20:46.639306 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif1ea88dbb70: link becomes ready Nov 1 00:20:46.638621 systemd-networkd[1625]: calif1ea88dbb70: Gained carrier Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.371 [INFO][4495] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.398 [INFO][4495] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0 coredns-668d6bf9bc- kube-system 716bcd07-1553-45a0-bebf-9f6d85629075 1005 0 2025-11-01 00:20:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 coredns-668d6bf9bc-b4579 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif1ea88dbb70 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.399 [INFO][4495] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.485 [INFO][4526] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" HandleID="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.485 [INFO][4526] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" HandleID="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002ab3a0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"coredns-668d6bf9bc-b4579", "timestamp":"2025-11-01 00:20:46.48553792 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.485 [INFO][4526] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.512 [INFO][4526] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.512 [INFO][4526] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.550 [INFO][4526] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.556 [INFO][4526] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.566 [INFO][4526] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.570 [INFO][4526] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.573 [INFO][4526] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.573 [INFO][4526] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.586 [INFO][4526] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0 Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.593 [INFO][4526] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.620 [INFO][4526] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.7/26] block=192.168.103.0/26 handle="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.620 [INFO][4526] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.7/26] handle="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.620 [INFO][4526] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:46.671059 env[1484]: 2025-11-01 00:20:46.620 [INFO][4526] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.7/26] IPv6=[] ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" HandleID="k8s-pod-network.4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.671660 env[1484]: 2025-11-01 00:20:46.622 [INFO][4495] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"716bcd07-1553-45a0-bebf-9f6d85629075", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"coredns-668d6bf9bc-b4579", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif1ea88dbb70", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:46.671660 env[1484]: 2025-11-01 00:20:46.622 [INFO][4495] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.7/32] ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.671660 env[1484]: 2025-11-01 00:20:46.622 [INFO][4495] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif1ea88dbb70 ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.671660 env[1484]: 2025-11-01 00:20:46.642 [INFO][4495] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.671660 env[1484]: 2025-11-01 00:20:46.643 [INFO][4495] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"716bcd07-1553-45a0-bebf-9f6d85629075", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0", Pod:"coredns-668d6bf9bc-b4579", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif1ea88dbb70", MAC:"8e:c1:56:73:0a:26", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:46.671660 env[1484]: 2025-11-01 00:20:46.668 [INFO][4495] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0" Namespace="kube-system" Pod="coredns-668d6bf9bc-b4579" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:46.685512 env[1484]: time="2025-11-01T00:20:46.684828206Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:46.685512 env[1484]: time="2025-11-01T00:20:46.684920406Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:46.685512 env[1484]: time="2025-11-01T00:20:46.684947606Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:46.685512 env[1484]: time="2025-11-01T00:20:46.685096207Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0 pid=4602 runtime=io.containerd.runc.v2 Nov 1 00:20:46.708664 systemd[1]: Started cri-containerd-4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0.scope. Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.713000 audit: BPF prog-id=163 op=LOAD Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4561 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633663964663939656136333662393961343037333766623066306435 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4561 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633663964663939656136333662393961343037333766623066306435 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit: BPF prog-id=164 op=LOAD Nov 1 00:20:46.714000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4561 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633663964663939656136333662393961343037333766623066306435 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.714000 audit: BPF prog-id=165 op=LOAD Nov 1 00:20:46.714000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4561 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.714000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633663964663939656136333662393961343037333766623066306435 Nov 1 00:20:46.715000 audit: BPF prog-id=165 op=UNLOAD Nov 1 00:20:46.715000 audit: BPF prog-id=164 op=UNLOAD Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.715000 audit: BPF prog-id=166 op=LOAD Nov 1 00:20:46.715000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4561 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633663964663939656136333662393961343037333766623066306435 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.746909 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif7133a7e6fd: link becomes ready Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.743000 audit: BPF prog-id=167 op=LOAD Nov 1 00:20:46.737878 systemd-networkd[1625]: calif7133a7e6fd: Link UP Nov 1 00:20:46.746063 systemd-networkd[1625]: calif7133a7e6fd: Gained carrier Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4602 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376239396265336539356130663530323036633431656263343338 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4602 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376239396265336539356130663530323036633431656263343338 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit: BPF prog-id=168 op=LOAD Nov 1 00:20:46.749000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4602 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376239396265336539356130663530323036633431656263343338 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit: BPF prog-id=169 op=LOAD Nov 1 00:20:46.749000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4602 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376239396265336539356130663530323036633431656263343338 Nov 1 00:20:46.749000 audit: BPF prog-id=169 op=UNLOAD Nov 1 00:20:46.749000 audit: BPF prog-id=168 op=UNLOAD Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { perfmon } for pid=4613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit[4613]: AVC avc: denied { bpf } for pid=4613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.749000 audit: BPF prog-id=170 op=LOAD Nov 1 00:20:46.749000 audit[4613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4602 pid=4613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463376239396265336539356130663530323036633431656263343338 Nov 1 00:20:46.776944 env[1484]: time="2025-11-01T00:20:46.776827938Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-65fdfb6775-jq5nz,Uid:d0c030a0-2978-427b-aeca-01939df97b98,Namespace:calico-system,Attempt:1,} returns sandbox id \"f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0\"" Nov 1 00:20:46.778761 env[1484]: time="2025-11-01T00:20:46.778721621Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.403 [INFO][4505] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.430 [INFO][4505] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0 goldmane-666569f655- calico-system e9955b10-5b47-461a-b3ab-955ce4c39730 1004 0 2025-11-01 00:20:17 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:666569f655 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 goldmane-666569f655-6fknv eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calif7133a7e6fd [] [] }} ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.430 [INFO][4505] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.550 [INFO][4538] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" HandleID="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.550 [INFO][4538] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" HandleID="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cafe0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"goldmane-666569f655-6fknv", "timestamp":"2025-11-01 00:20:46.550236333 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.550 [INFO][4538] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.620 [INFO][4538] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.620 [INFO][4538] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.657 [INFO][4538] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.674 [INFO][4538] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.679 [INFO][4538] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.686 [INFO][4538] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.689 [INFO][4538] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.689 [INFO][4538] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.691 [INFO][4538] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1 Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.700 [INFO][4538] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.718 [INFO][4538] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.8/26] block=192.168.103.0/26 handle="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.718 [INFO][4538] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.8/26] handle="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.718 [INFO][4538] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:46.786946 env[1484]: 2025-11-01 00:20:46.718 [INFO][4538] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.8/26] IPv6=[] ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" HandleID="k8s-pod-network.34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.787535 env[1484]: 2025-11-01 00:20:46.724 [INFO][4505] cni-plugin/k8s.go 418: Populated endpoint ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e9955b10-5b47-461a-b3ab-955ce4c39730", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"goldmane-666569f655-6fknv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.103.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif7133a7e6fd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:46.787535 env[1484]: 2025-11-01 00:20:46.724 [INFO][4505] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.8/32] ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.787535 env[1484]: 2025-11-01 00:20:46.724 [INFO][4505] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif7133a7e6fd ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.787535 env[1484]: 2025-11-01 00:20:46.746 [INFO][4505] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.787535 env[1484]: 2025-11-01 00:20:46.751 [INFO][4505] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e9955b10-5b47-461a-b3ab-955ce4c39730", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1", Pod:"goldmane-666569f655-6fknv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.103.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif7133a7e6fd", MAC:"96:94:65:45:b1:9f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:46.787535 env[1484]: 2025-11-01 00:20:46.779 [INFO][4505] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1" Namespace="calico-system" Pod="goldmane-666569f655-6fknv" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:46.793822 env[1484]: time="2025-11-01T00:20:46.793766483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-b4579,Uid:716bcd07-1553-45a0-bebf-9f6d85629075,Namespace:kube-system,Attempt:1,} returns sandbox id \"4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0\"" Nov 1 00:20:46.799302 env[1484]: time="2025-11-01T00:20:46.799001890Z" level=info msg="CreateContainer within sandbox \"4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:20:46.813097 env[1484]: time="2025-11-01T00:20:46.811171548Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:46.813097 env[1484]: time="2025-11-01T00:20:46.811250348Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:46.813097 env[1484]: time="2025-11-01T00:20:46.811261908Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:46.814496 env[1484]: time="2025-11-01T00:20:46.811402788Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1 pid=4666 runtime=io.containerd.runc.v2 Nov 1 00:20:46.830392 systemd[1]: Started cri-containerd-34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1.scope. Nov 1 00:20:46.846783 env[1484]: time="2025-11-01T00:20:46.846732759Z" level=info msg="CreateContainer within sandbox \"4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"225927d1c8784ea786c12fcaf75d7533097a22b4e8168b866266823fd34a51a9\"" Nov 1 00:20:46.849284 env[1484]: time="2025-11-01T00:20:46.849226842Z" level=info msg="StartContainer for \"225927d1c8784ea786c12fcaf75d7533097a22b4e8168b866266823fd34a51a9\"" Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.855000 audit: BPF prog-id=171 op=LOAD Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4666 pid=4676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643538383034353931616561353437373962613333366139383833 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4666 pid=4676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643538383034353931616561353437373962613333366139383833 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit: BPF prog-id=172 op=LOAD Nov 1 00:20:46.856000 audit[4676]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4666 pid=4676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643538383034353931616561353437373962613333366139383833 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit: BPF prog-id=173 op=LOAD Nov 1 00:20:46.856000 audit[4676]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4666 pid=4676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643538383034353931616561353437373962613333366139383833 Nov 1 00:20:46.856000 audit: BPF prog-id=173 op=UNLOAD Nov 1 00:20:46.856000 audit: BPF prog-id=172 op=UNLOAD Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { perfmon } for pid=4676 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit[4676]: AVC avc: denied { bpf } for pid=4676 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.856000 audit: BPF prog-id=174 op=LOAD Nov 1 00:20:46.856000 audit[4676]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4666 pid=4676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334643538383034353931616561353437373962613333366139383833 Nov 1 00:20:46.880810 systemd[1]: Started cri-containerd-225927d1c8784ea786c12fcaf75d7533097a22b4e8168b866266823fd34a51a9.scope. Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.905000 audit: BPF prog-id=175 op=LOAD Nov 1 00:20:46.907331 env[1484]: time="2025-11-01T00:20:46.907285286Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-666569f655-6fknv,Uid:e9955b10-5b47-461a-b3ab-955ce4c39730,Namespace:calico-system,Attempt:1,} returns sandbox id \"34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1\"" Nov 1 00:20:46.908000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.908000 audit[4699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4602 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232353932376431633837383465613738366331326663616637356437 Nov 1 00:20:46.908000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.908000 audit[4699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4602 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232353932376431633837383465613738366331326663616637356437 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit: BPF prog-id=176 op=LOAD Nov 1 00:20:46.909000 audit[4699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4602 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232353932376431633837383465613738366331326663616637356437 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit: BPF prog-id=177 op=LOAD Nov 1 00:20:46.909000 audit[4699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4602 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232353932376431633837383465613738366331326663616637356437 Nov 1 00:20:46.909000 audit: BPF prog-id=177 op=UNLOAD Nov 1 00:20:46.909000 audit: BPF prog-id=176 op=UNLOAD Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { perfmon } for pid=4699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit[4699]: AVC avc: denied { bpf } for pid=4699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:46.909000 audit: BPF prog-id=178 op=LOAD Nov 1 00:20:46.909000 audit[4699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4602 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:46.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232353932376431633837383465613738366331326663616637356437 Nov 1 00:20:46.930531 env[1484]: time="2025-11-01T00:20:46.930485039Z" level=info msg="StartContainer for \"225927d1c8784ea786c12fcaf75d7533097a22b4e8168b866266823fd34a51a9\" returns successfully" Nov 1 00:20:46.939000 audit[4709]: AVC avc: denied { getattr } for pid=4709 comm="coredns" path="cgroup:[4026532729]" dev="nsfs" ino=4026532729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c511 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:20:46.939000 audit[4709]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=400014a948 a2=400014c578 a3=0 items=0 ppid=4602 pid=4709 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c179,c511 key=(null) Nov 1 00:20:46.939000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.008000 audit: BPF prog-id=179 op=LOAD Nov 1 00:20:47.008000 audit[4746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe500f778 a2=98 a3=ffffe500f768 items=0 ppid=4588 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.008000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:47.009000 audit: BPF prog-id=179 op=UNLOAD Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.009000 audit: BPF prog-id=180 op=LOAD Nov 1 00:20:47.009000 audit[4746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe500f628 a2=74 a3=95 items=0 ppid=4588 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.009000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:47.010000 audit: BPF prog-id=180 op=UNLOAD Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit: BPF prog-id=181 op=LOAD Nov 1 00:20:47.010000 audit[4746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe500f658 a2=40 a3=ffffe500f688 items=0 ppid=4588 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.010000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:47.010000 audit: BPF prog-id=181 op=UNLOAD Nov 1 00:20:47.010000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.010000 audit[4746]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffe500f770 a2=50 a3=0 items=0 ppid=4588 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.010000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit: BPF prog-id=182 op=LOAD Nov 1 00:20:47.013000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd17d73f8 a2=98 a3=ffffd17d73e8 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.013000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.013000 audit: BPF prog-id=182 op=UNLOAD Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit: BPF prog-id=183 op=LOAD Nov 1 00:20:47.013000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd17d7088 a2=74 a3=95 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.013000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.013000 audit: BPF prog-id=183 op=UNLOAD Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.013000 audit: BPF prog-id=184 op=LOAD Nov 1 00:20:47.013000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd17d70e8 a2=94 a3=2 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.013000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.014000 audit: BPF prog-id=184 op=UNLOAD Nov 1 00:20:47.044038 env[1484]: time="2025-11-01T00:20:47.043992161Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:47.048425 env[1484]: time="2025-11-01T00:20:47.048367167Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:20:47.048857 kubelet[2472]: E1101 00:20:47.048812 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:20:47.048968 kubelet[2472]: E1101 00:20:47.048875 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:20:47.049210 kubelet[2472]: E1101 00:20:47.049139 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-w4q4m,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-65fdfb6775-jq5nz_calico-system(d0c030a0-2978-427b-aeca-01939df97b98): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:47.049649 env[1484]: time="2025-11-01T00:20:47.049625369Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:20:47.051142 kubelet[2472]: E1101 00:20:47.051094 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit: BPF prog-id=185 op=LOAD Nov 1 00:20:47.121000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd17d70a8 a2=40 a3=ffffd17d70d8 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.121000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.121000 audit: BPF prog-id=185 op=UNLOAD Nov 1 00:20:47.121000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.121000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd17d71c0 a2=50 a3=0 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.121000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.130000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.130000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd17d7118 a2=28 a3=ffffd17d7248 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.130000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.131000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.131000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd17d7148 a2=28 a3=ffffd17d7278 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.131000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.131000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.131000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd17d6ff8 a2=28 a3=ffffd17d7128 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.131000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.131000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.131000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd17d7168 a2=28 a3=ffffd17d7298 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.131000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.131000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.131000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd17d7148 a2=28 a3=ffffd17d7278 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.131000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.131000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.131000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd17d7138 a2=28 a3=ffffd17d7268 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.131000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.132000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.132000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd17d7168 a2=28 a3=ffffd17d7298 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.132000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.132000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.132000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd17d7148 a2=28 a3=ffffd17d7278 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.132000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.132000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.132000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd17d7168 a2=28 a3=ffffd17d7298 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.132000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.132000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.132000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd17d7138 a2=28 a3=ffffd17d7268 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.132000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.132000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.132000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd17d71b8 a2=28 a3=ffffd17d72f8 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.132000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd17d6ef0 a2=50 a3=0 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.133000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit: BPF prog-id=186 op=LOAD Nov 1 00:20:47.133000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd17d6ef8 a2=94 a3=5 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.133000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.133000 audit: BPF prog-id=186 op=UNLOAD Nov 1 00:20:47.133000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.133000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd17d7000 a2=50 a3=0 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.133000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd17d7148 a2=4 a3=3 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.134000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.134000 audit[4747]: AVC avc: denied { confidentiality } for pid=4747 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:47.134000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd17d7128 a2=94 a3=6 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.134000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { confidentiality } for pid=4747 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:47.135000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd17d68f8 a2=94 a3=83 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.135000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { perfmon } for pid=4747 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { bpf } for pid=4747 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.135000 audit[4747]: AVC avc: denied { confidentiality } for pid=4747 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:47.135000 audit[4747]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd17d68f8 a2=94 a3=83 items=0 ppid=4588 pid=4747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.135000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit: BPF prog-id=187 op=LOAD Nov 1 00:20:47.144000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe3945ec8 a2=98 a3=ffffe3945eb8 items=0 ppid=4588 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.144000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:20:47.144000 audit: BPF prog-id=187 op=UNLOAD Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit: BPF prog-id=188 op=LOAD Nov 1 00:20:47.144000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe3945d78 a2=74 a3=95 items=0 ppid=4588 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.144000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:20:47.144000 audit: BPF prog-id=188 op=UNLOAD Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { perfmon } for pid=4750 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit[4750]: AVC avc: denied { bpf } for pid=4750 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.144000 audit: BPF prog-id=189 op=LOAD Nov 1 00:20:47.144000 audit[4750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe3945da8 a2=40 a3=ffffe3945dd8 items=0 ppid=4588 pid=4750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.144000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Nov 1 00:20:47.144000 audit: BPF prog-id=189 op=UNLOAD Nov 1 00:20:47.219798 kubelet[2472]: E1101 00:20:47.219483 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:20:47.219798 kubelet[2472]: E1101 00:20:47.219507 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:20:47.235498 kubelet[2472]: I1101 00:20:47.235225 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-b4579" podStartSLOduration=47.235207352 podStartE2EDuration="47.235207352s" podCreationTimestamp="2025-11-01 00:20:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:20:47.230722465 +0000 UTC m=+52.374450592" watchObservedRunningTime="2025-11-01 00:20:47.235207352 +0000 UTC m=+52.378935439" Nov 1 00:20:47.255716 systemd-networkd[1625]: vxlan.calico: Link UP Nov 1 00:20:47.255722 systemd-networkd[1625]: vxlan.calico: Gained carrier Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.288000 audit: BPF prog-id=190 op=LOAD Nov 1 00:20:47.288000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe99571b8 a2=98 a3=ffffe99571a8 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.288000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.289000 audit: BPF prog-id=190 op=UNLOAD Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.289000 audit: BPF prog-id=191 op=LOAD Nov 1 00:20:47.289000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9956e98 a2=74 a3=95 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.289000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.290000 audit: BPF prog-id=191 op=UNLOAD Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.290000 audit: BPF prog-id=192 op=LOAD Nov 1 00:20:47.290000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9956ef8 a2=94 a3=2 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.290000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.291000 audit: BPF prog-id=192 op=UNLOAD Nov 1 00:20:47.291000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.291000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9956f28 a2=28 a3=ffffe9957058 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.291000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.291000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.291000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9956f58 a2=28 a3=ffffe9957088 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.291000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.291000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.291000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9956e08 a2=28 a3=ffffe9956f38 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.291000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.291000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.291000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9956f78 a2=28 a3=ffffe99570a8 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.291000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.292000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.292000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9956f58 a2=28 a3=ffffe9957088 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.292000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.292000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.292000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9956f48 a2=28 a3=ffffe9957078 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.292000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.292000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.292000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9956f78 a2=28 a3=ffffe99570a8 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.292000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.292000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.292000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9956f58 a2=28 a3=ffffe9957088 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.292000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9956f78 a2=28 a3=ffffe99570a8 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.293000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9956f48 a2=28 a3=ffffe9957078 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.293000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffe9956fc8 a2=28 a3=ffffe9957108 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.293000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.293000 audit: BPF prog-id=193 op=LOAD Nov 1 00:20:47.293000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9956de8 a2=40 a3=ffffe9956e18 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.293000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.294000 audit: BPF prog-id=193 op=UNLOAD Nov 1 00:20:47.294000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.294000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffe9956e10 a2=50 a3=0 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.294000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.294000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295978 env[1484]: time="2025-11-01T00:20:47.295734517Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:47.294000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffe9956e10 a2=50 a3=0 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.294000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit: BPF prog-id=194 op=LOAD Nov 1 00:20:47.295000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9956578 a2=94 a3=2 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.295000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.295000 audit: BPF prog-id=194 op=UNLOAD Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { perfmon } for pid=4778 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit[4778]: AVC avc: denied { bpf } for pid=4778 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.295000 audit: BPF prog-id=195 op=LOAD Nov 1 00:20:47.295000 audit[4778]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9956708 a2=94 a3=30 items=0 ppid=4588 pid=4778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.295000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Nov 1 00:20:47.301160 env[1484]: time="2025-11-01T00:20:47.301096605Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:20:47.301873 kubelet[2472]: E1101 00:20:47.301306 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:47.301873 kubelet[2472]: E1101 00:20:47.301369 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:47.301873 kubelet[2472]: E1101 00:20:47.301497 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nkq4j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-6fknv_calico-system(e9955b10-5b47-461a-b3ab-955ce4c39730): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:47.302775 kubelet[2472]: E1101 00:20:47.302732 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit: BPF prog-id=196 op=LOAD Nov 1 00:20:47.316000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdb052c58 a2=98 a3=ffffdb052c48 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.316000 audit: BPF prog-id=196 op=UNLOAD Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit: BPF prog-id=197 op=LOAD Nov 1 00:20:47.316000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdb0528e8 a2=74 a3=95 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.316000 audit: BPF prog-id=197 op=UNLOAD Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.316000 audit: BPF prog-id=198 op=LOAD Nov 1 00:20:47.316000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdb052948 a2=94 a3=2 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.316000 audit: BPF prog-id=198 op=UNLOAD Nov 1 00:20:47.347949 kernel: kauditd_printk_skb: 860 callbacks suppressed Nov 1 00:20:47.348079 kernel: audit: type=1325 audit(1761956447.341:1284): table=filter:122 family=2 entries=17 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:47.341000 audit[4782]: NETFILTER_CFG table=filter:122 family=2 entries=17 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:47.341000 audit[4782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffede2f610 a2=0 a3=1 items=0 ppid=2575 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.387009 kernel: audit: type=1300 audit(1761956447.341:1284): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffede2f610 a2=0 a3=1 items=0 ppid=2575 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.341000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:47.401825 kernel: audit: type=1327 audit(1761956447.341:1284): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:47.363000 audit[4782]: NETFILTER_CFG table=nat:123 family=2 entries=35 op=nft_register_chain pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:47.416555 kernel: audit: type=1325 audit(1761956447.363:1285): table=nat:123 family=2 entries=35 op=nft_register_chain pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:47.363000 audit[4782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffede2f610 a2=0 a3=1 items=0 ppid=2575 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.443091 kernel: audit: type=1300 audit(1761956447.363:1285): arch=c00000b7 syscall=211 success=yes exit=14196 a0=3 a1=ffffede2f610 a2=0 a3=1 items=0 ppid=2575 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.363000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:47.456877 kernel: audit: type=1327 audit(1761956447.363:1285): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.478960 kernel: audit: type=1400 audit(1761956447.453:1286): avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.479087 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Nov 1 00:20:47.479116 kernel: audit: type=1400 audit(1761956447.453:1286): avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.500822 kernel: audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.453000 audit: BPF prog-id=199 op=LOAD Nov 1 00:20:47.453000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdb052908 a2=40 a3=ffffdb052938 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.453000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.456000 audit: BPF prog-id=199 op=UNLOAD Nov 1 00:20:47.456000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.456000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffdb052a20 a2=50 a3=0 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.456000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb052978 a2=28 a3=ffffdb052aa8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb0529a8 a2=28 a3=ffffdb052ad8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb052858 a2=28 a3=ffffdb052988 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb0529c8 a2=28 a3=ffffdb052af8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb0529a8 a2=28 a3=ffffdb052ad8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb052998 a2=28 a3=ffffdb052ac8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb0529c8 a2=28 a3=ffffdb052af8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb0529a8 a2=28 a3=ffffdb052ad8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb0529c8 a2=28 a3=ffffdb052af8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdb052998 a2=28 a3=ffffdb052ac8 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdb052a18 a2=28 a3=ffffdb052b58 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdb052750 a2=50 a3=0 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.467000 audit: BPF prog-id=200 op=LOAD Nov 1 00:20:47.467000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdb052758 a2=94 a3=5 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.467000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.501000 audit: BPF prog-id=200 op=UNLOAD Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdb052860 a2=50 a3=0 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffdb0529a8 a2=4 a3=3 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { confidentiality } for pid=4780 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:47.501000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdb052988 a2=94 a3=6 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.501000 audit[4780]: AVC avc: denied { confidentiality } for pid=4780 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:47.501000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdb052158 a2=94 a3=83 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { perfmon } for pid=4780 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.502000 audit[4780]: AVC avc: denied { confidentiality } for pid=4780 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Nov 1 00:20:47.502000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdb052158 a2=94 a3=83 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.502000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.503000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.503000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb053b98 a2=10 a3=ffffdb053c88 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.503000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.504000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.504000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb053a58 a2=10 a3=ffffdb053b48 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.504000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.504000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.504000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb0539c8 a2=10 a3=ffffdb053b48 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.504000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.504000 audit[4780]: AVC avc: denied { bpf } for pid=4780 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:47.504000 audit[4780]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffdb0539c8 a2=10 a3=ffffdb053b48 items=0 ppid=4588 pid=4780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.504000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Nov 1 00:20:47.512000 audit: BPF prog-id=195 op=UNLOAD Nov 1 00:20:47.629000 audit[4814]: NETFILTER_CFG table=mangle:124 family=2 entries=16 op=nft_register_chain pid=4814 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:47.629000 audit[4814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffffb19f530 a2=0 a3=ffffa19f9fa8 items=0 ppid=4588 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.629000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:47.639000 audit[4813]: NETFILTER_CFG table=nat:125 family=2 entries=15 op=nft_register_chain pid=4813 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:47.639000 audit[4813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffdce21d90 a2=0 a3=ffffb3b4cfa8 items=0 ppid=4588 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.639000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:47.647000 audit[4812]: NETFILTER_CFG table=raw:126 family=2 entries=21 op=nft_register_chain pid=4812 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:47.647000 audit[4812]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffffc3dc030 a2=0 a3=ffff9bb9cfa8 items=0 ppid=4588 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.647000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:47.652000 audit[4817]: NETFILTER_CFG table=filter:127 family=2 entries=332 op=nft_register_chain pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:47.652000 audit[4817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=197388 a0=3 a1=ffffce93e490 a2=0 a3=ffff8cfd8fa8 items=0 ppid=4588 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:47.652000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:47.975026 env[1484]: time="2025-11-01T00:20:47.973779276Z" level=info msg="StopPodSandbox for \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\"" Nov 1 00:20:48.070015 systemd-networkd[1625]: calif7133a7e6fd: Gained IPv6LL Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.038 [INFO][4838] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.038 [INFO][4838] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" iface="eth0" netns="/var/run/netns/cni-a8bb0b5a-6504-cb5a-5b33-93950848a2a8" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.038 [INFO][4838] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" iface="eth0" netns="/var/run/netns/cni-a8bb0b5a-6504-cb5a-5b33-93950848a2a8" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.038 [INFO][4838] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" iface="eth0" netns="/var/run/netns/cni-a8bb0b5a-6504-cb5a-5b33-93950848a2a8" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.038 [INFO][4838] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.038 [INFO][4838] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.066 [INFO][4846] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.066 [INFO][4846] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.066 [INFO][4846] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.075 [WARNING][4846] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.075 [INFO][4846] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.076 [INFO][4846] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:48.079441 env[1484]: 2025-11-01 00:20:48.078 [INFO][4838] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:48.083634 env[1484]: time="2025-11-01T00:20:48.079588384Z" level=info msg="TearDown network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\" successfully" Nov 1 00:20:48.083634 env[1484]: time="2025-11-01T00:20:48.079618624Z" level=info msg="StopPodSandbox for \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\" returns successfully" Nov 1 00:20:48.083412 systemd[1]: run-netns-cni\x2da8bb0b5a\x2d6504\x2dcb5a\x2d5b33\x2d93950848a2a8.mount: Deactivated successfully. Nov 1 00:20:48.084595 env[1484]: time="2025-11-01T00:20:48.084562030Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-bkqtt,Uid:b9c5ad65-eebf-4378-95c7-c8e53c9b03d5,Namespace:kube-system,Attempt:1,}" Nov 1 00:20:48.196057 systemd-networkd[1625]: calif1ea88dbb70: Gained IPv6LL Nov 1 00:20:48.221941 kubelet[2472]: E1101 00:20:48.221144 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:20:48.221941 kubelet[2472]: E1101 00:20:48.221291 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:20:48.250473 systemd-networkd[1625]: cali9be8049d47f: Link UP Nov 1 00:20:48.254150 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9be8049d47f: link becomes ready Nov 1 00:20:48.254348 systemd-networkd[1625]: cali9be8049d47f: Gained carrier Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.162 [INFO][4853] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0 coredns-668d6bf9bc- kube-system b9c5ad65-eebf-4378-95c7-c8e53c9b03d5 1055 0 2025-11-01 00:20:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510.3.8-n-2788c77bd2 coredns-668d6bf9bc-bkqtt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali9be8049d47f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.162 [INFO][4853] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.186 [INFO][4865] ipam/ipam_plugin.go 227: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" HandleID="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.186 [INFO][4865] ipam/ipam_plugin.go 275: Auto assigning IP ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" HandleID="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002d2fe0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510.3.8-n-2788c77bd2", "pod":"coredns-668d6bf9bc-bkqtt", "timestamp":"2025-11-01 00:20:48.186561652 +0000 UTC"}, Hostname:"ci-3510.3.8-n-2788c77bd2", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.186 [INFO][4865] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.186 [INFO][4865] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.186 [INFO][4865] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510.3.8-n-2788c77bd2' Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.196 [INFO][4865] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.200 [INFO][4865] ipam/ipam.go 394: Looking up existing affinities for host host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.204 [INFO][4865] ipam/ipam.go 511: Trying affinity for 192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.206 [INFO][4865] ipam/ipam.go 158: Attempting to load block cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.210 [INFO][4865] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.103.0/26 host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.210 [INFO][4865] ipam/ipam.go 1219: Attempting to assign 1 addresses from block block=192.168.103.0/26 handle="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.214 [INFO][4865] ipam/ipam.go 1780: Creating new handle: k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.227 [INFO][4865] ipam/ipam.go 1246: Writing block in order to claim IPs block=192.168.103.0/26 handle="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.239 [INFO][4865] ipam/ipam.go 1262: Successfully claimed IPs: [192.168.103.9/26] block=192.168.103.0/26 handle="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.239 [INFO][4865] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.103.9/26] handle="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" host="ci-3510.3.8-n-2788c77bd2" Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.239 [INFO][4865] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:48.282809 env[1484]: 2025-11-01 00:20:48.239 [INFO][4865] ipam/ipam_plugin.go 299: Calico CNI IPAM assigned addresses IPv4=[192.168.103.9/26] IPv6=[] ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" HandleID="k8s-pod-network.c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.283466 env[1484]: 2025-11-01 00:20:48.241 [INFO][4853] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"", Pod:"coredns-668d6bf9bc-bkqtt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.9/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9be8049d47f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:48.283466 env[1484]: 2025-11-01 00:20:48.241 [INFO][4853] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.103.9/32] ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.283466 env[1484]: 2025-11-01 00:20:48.241 [INFO][4853] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9be8049d47f ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.283466 env[1484]: 2025-11-01 00:20:48.254 [INFO][4853] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.283466 env[1484]: 2025-11-01 00:20:48.259 [INFO][4853] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba", Pod:"coredns-668d6bf9bc-bkqtt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.9/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9be8049d47f", MAC:"ca:8f:a7:77:fa:07", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:48.283466 env[1484]: 2025-11-01 00:20:48.281 [INFO][4853] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba" Namespace="kube-system" Pod="coredns-668d6bf9bc-bkqtt" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:48.289000 audit[4877]: NETFILTER_CFG table=filter:128 family=2 entries=14 op=nft_register_rule pid=4877 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:48.289000 audit[4877]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffdb1cb1d0 a2=0 a3=1 items=0 ppid=2575 pid=4877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.289000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:48.296000 audit[4877]: NETFILTER_CFG table=nat:129 family=2 entries=20 op=nft_register_rule pid=4877 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:48.296000 audit[4877]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffdb1cb1d0 a2=0 a3=1 items=0 ppid=2575 pid=4877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.296000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:48.301101 env[1484]: time="2025-11-01T00:20:48.301032612Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Nov 1 00:20:48.301101 env[1484]: time="2025-11-01T00:20:48.301070452Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Nov 1 00:20:48.301245 env[1484]: time="2025-11-01T00:20:48.301080652Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Nov 1 00:20:48.301439 env[1484]: time="2025-11-01T00:20:48.301401292Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba pid=4892 runtime=io.containerd.runc.v2 Nov 1 00:20:48.330099 systemd[1]: run-containerd-runc-k8s.io-c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba-runc.RaXVqL.mount: Deactivated successfully. Nov 1 00:20:48.331727 systemd[1]: Started cri-containerd-c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba.scope. Nov 1 00:20:48.338000 audit[4916]: NETFILTER_CFG table=filter:130 family=2 entries=52 op=nft_register_chain pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Nov 1 00:20:48.338000 audit[4916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23876 a0=3 a1=fffffc5f6660 a2=0 a3=ffff8ce7ffa8 items=0 ppid=4588 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.338000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit: BPF prog-id=201 op=LOAD Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4892 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333336563356330656239663330383632666630373137616534343839 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4892 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333336563356330656239663330383632666630373137616534343839 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit: BPF prog-id=202 op=LOAD Nov 1 00:20:48.343000 audit[4904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4892 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333336563356330656239663330383632666630373137616534343839 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.343000 audit: BPF prog-id=203 op=LOAD Nov 1 00:20:48.343000 audit[4904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4892 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.343000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333336563356330656239663330383632666630373137616534343839 Nov 1 00:20:48.344000 audit: BPF prog-id=203 op=UNLOAD Nov 1 00:20:48.344000 audit: BPF prog-id=202 op=UNLOAD Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { perfmon } for pid=4904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit[4904]: AVC avc: denied { bpf } for pid=4904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.344000 audit: BPF prog-id=204 op=LOAD Nov 1 00:20:48.344000 audit[4904]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4892 pid=4904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333336563356330656239663330383632666630373137616534343839 Nov 1 00:20:48.366126 env[1484]: time="2025-11-01T00:20:48.366085102Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-bkqtt,Uid:b9c5ad65-eebf-4378-95c7-c8e53c9b03d5,Namespace:kube-system,Attempt:1,} returns sandbox id \"c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba\"" Nov 1 00:20:48.370024 env[1484]: time="2025-11-01T00:20:48.369982468Z" level=info msg="CreateContainer within sandbox \"c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Nov 1 00:20:48.463862 env[1484]: time="2025-11-01T00:20:48.463817478Z" level=info msg="CreateContainer within sandbox \"c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"7ad734307c9bd5c6c61057772858827e5efc03d1288e339fb90cb7f57df3bb44\"" Nov 1 00:20:48.464861 env[1484]: time="2025-11-01T00:20:48.464831840Z" level=info msg="StartContainer for \"7ad734307c9bd5c6c61057772858827e5efc03d1288e339fb90cb7f57df3bb44\"" Nov 1 00:20:48.479150 systemd[1]: Started cri-containerd-7ad734307c9bd5c6c61057772858827e5efc03d1288e339fb90cb7f57df3bb44.scope. Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.492000 audit: BPF prog-id=205 op=LOAD Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4892 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643733343330376339626435633663363130353737373238353838 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4892 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643733343330376339626435633663363130353737373238353838 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit: BPF prog-id=206 op=LOAD Nov 1 00:20:48.493000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4892 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643733343330376339626435633663363130353737373238353838 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit: BPF prog-id=207 op=LOAD Nov 1 00:20:48.493000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4892 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643733343330376339626435633663363130353737373238353838 Nov 1 00:20:48.493000 audit: BPF prog-id=207 op=UNLOAD Nov 1 00:20:48.493000 audit: BPF prog-id=206 op=UNLOAD Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Nov 1 00:20:48.493000 audit: BPF prog-id=208 op=LOAD Nov 1 00:20:48.493000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4892 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:48.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761643733343330376339626435633663363130353737373238353838 Nov 1 00:20:48.515065 env[1484]: time="2025-11-01T00:20:48.514959629Z" level=info msg="StartContainer for \"7ad734307c9bd5c6c61057772858827e5efc03d1288e339fb90cb7f57df3bb44\" returns successfully" Nov 1 00:20:48.517848 systemd-networkd[1625]: cali4c0b0e713d5: Gained IPv6LL Nov 1 00:20:48.526000 audit[4946]: AVC avc: denied { getattr } for pid=4946 comm="coredns" path="cgroup:[4026532749]" dev="nsfs" ino=4026532749 scontext=system_u:system_r:svirt_lxc_net_t:s0:c138,c772 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Nov 1 00:20:48.526000 audit[4946]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=4892 pid=4946 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c138,c772 key=(null) Nov 1 00:20:48.526000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Nov 1 00:20:48.708031 systemd-networkd[1625]: vxlan.calico: Gained IPv6LL Nov 1 00:20:49.246582 kubelet[2472]: I1101 00:20:49.246518 2472 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-bkqtt" podStartSLOduration=49.246502362 podStartE2EDuration="49.246502362s" podCreationTimestamp="2025-11-01 00:20:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-11-01 00:20:49.246229442 +0000 UTC m=+54.389957569" watchObservedRunningTime="2025-11-01 00:20:49.246502362 +0000 UTC m=+54.390230489" Nov 1 00:20:49.297000 audit[4965]: NETFILTER_CFG table=filter:131 family=2 entries=14 op=nft_register_rule pid=4965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:49.297000 audit[4965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffe6c38cd0 a2=0 a3=1 items=0 ppid=2575 pid=4965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:49.297000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:49.314000 audit[4965]: NETFILTER_CFG table=nat:132 family=2 entries=56 op=nft_register_chain pid=4965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:20:49.314000 audit[4965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19860 a0=3 a1=ffffe6c38cd0 a2=0 a3=1 items=0 ppid=2575 pid=4965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:20:49.314000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:20:49.974593 env[1484]: time="2025-11-01T00:20:49.974558199Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:20:50.052062 systemd-networkd[1625]: cali9be8049d47f: Gained IPv6LL Nov 1 00:20:50.223817 env[1484]: time="2025-11-01T00:20:50.223634576Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:50.228162 env[1484]: time="2025-11-01T00:20:50.228028942Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:20:50.229602 kubelet[2472]: E1101 00:20:50.229562 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:50.229747 kubelet[2472]: E1101 00:20:50.229728 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:20:50.229937 kubelet[2472]: E1101 00:20:50.229904 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a5df3952c76546deb3fcde5c311cc6b2,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:50.232086 env[1484]: time="2025-11-01T00:20:50.232037147Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:20:50.376000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:50.376000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400de65770 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:20:50.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:50.376000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:50.376000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400a94cff0 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:20:50.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:50.389000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:50.389000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=400de65860 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:20:50.389000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:50.398000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:50.398000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4009a6a240 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:20:50.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:50.398000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:50.398000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=400de65890 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:20:50.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:50.398000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:50.398000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6c a1=4009a6a280 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:20:50.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:20:50.471891 env[1484]: time="2025-11-01T00:20:50.471830031Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:50.475535 env[1484]: time="2025-11-01T00:20:50.475466516Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:20:50.475715 kubelet[2472]: E1101 00:20:50.475676 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:50.476113 kubelet[2472]: E1101 00:20:50.475723 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:20:50.476113 kubelet[2472]: E1101 00:20:50.475826 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:50.477105 kubelet[2472]: E1101 00:20:50.477054 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:20:51.047000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:51.047000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400222bfa0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:51.047000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:51.047000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:51.047000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40014ca780 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:51.047000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:54.991559 env[1484]: time="2025-11-01T00:20:54.991208972Z" level=info msg="StopPodSandbox for \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\"" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.025 [WARNING][4985] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"864706af-b74b-4daa-9415-eca81f18da43", ResourceVersion:"1011", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13", Pod:"csi-node-driver-fns4p", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.103.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali87c1452659a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.026 [INFO][4985] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.026 [INFO][4985] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" iface="eth0" netns="" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.026 [INFO][4985] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.026 [INFO][4985] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.047 [INFO][4992] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.047 [INFO][4992] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.047 [INFO][4992] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.055 [WARNING][4992] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.055 [INFO][4992] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.056 [INFO][4992] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.059112 env[1484]: 2025-11-01 00:20:55.057 [INFO][4985] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.059610 env[1484]: time="2025-11-01T00:20:55.059145337Z" level=info msg="TearDown network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\" successfully" Nov 1 00:20:55.059610 env[1484]: time="2025-11-01T00:20:55.059175977Z" level=info msg="StopPodSandbox for \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\" returns successfully" Nov 1 00:20:55.060199 env[1484]: time="2025-11-01T00:20:55.060171699Z" level=info msg="RemovePodSandbox for \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\"" Nov 1 00:20:55.060416 env[1484]: time="2025-11-01T00:20:55.060375659Z" level=info msg="Forcibly stopping sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\"" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.096 [WARNING][5007] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"864706af-b74b-4daa-9415-eca81f18da43", ResourceVersion:"1011", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"857b56db8f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"a6131d08ebde6ea7298711473e71f9db5de72591cd2bfed64d45ce301b1d5d13", Pod:"csi-node-driver-fns4p", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.103.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali87c1452659a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.096 [INFO][5007] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.096 [INFO][5007] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" iface="eth0" netns="" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.096 [INFO][5007] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.096 [INFO][5007] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.115 [INFO][5014] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.116 [INFO][5014] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.116 [INFO][5014] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.124 [WARNING][5014] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.124 [INFO][5014] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" HandleID="k8s-pod-network.1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Workload="ci--3510.3.8--n--2788c77bd2-k8s-csi--node--driver--fns4p-eth0" Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.125 [INFO][5014] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.128704 env[1484]: 2025-11-01 00:20:55.127 [INFO][5007] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4" Nov 1 00:20:55.129273 env[1484]: time="2025-11-01T00:20:55.129227945Z" level=info msg="TearDown network for sandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\" successfully" Nov 1 00:20:55.153622 env[1484]: time="2025-11-01T00:20:55.153574656Z" level=info msg="RemovePodSandbox \"1c1d856f51033165e20ab77c8b14ca5b6b8d7a219ebbdd6c3cadb01fa32c33d4\" returns successfully" Nov 1 00:20:55.154341 env[1484]: time="2025-11-01T00:20:55.154314857Z" level=info msg="StopPodSandbox for \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\"" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.197 [WARNING][5030] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0", GenerateName:"calico-apiserver-6d574c4f5b-", Namespace:"calico-apiserver", SelfLink:"", UID:"06d0dc32-8772-475c-a553-c9602f03c588", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d574c4f5b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255", Pod:"calico-apiserver-6d574c4f5b-j8zsj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali765b902987f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.197 [INFO][5030] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.197 [INFO][5030] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" iface="eth0" netns="" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.197 [INFO][5030] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.197 [INFO][5030] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.216 [INFO][5037] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.220 [INFO][5037] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.220 [INFO][5037] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.229 [WARNING][5037] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.229 [INFO][5037] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.231 [INFO][5037] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.235157 env[1484]: 2025-11-01 00:20:55.233 [INFO][5030] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.235815 env[1484]: time="2025-11-01T00:20:55.235778639Z" level=info msg="TearDown network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\" successfully" Nov 1 00:20:55.236013 env[1484]: time="2025-11-01T00:20:55.235991319Z" level=info msg="StopPodSandbox for \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\" returns successfully" Nov 1 00:20:55.236558 env[1484]: time="2025-11-01T00:20:55.236527280Z" level=info msg="RemovePodSandbox for \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\"" Nov 1 00:20:55.236717 env[1484]: time="2025-11-01T00:20:55.236652920Z" level=info msg="Forcibly stopping sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\"" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.273 [WARNING][5051] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0", GenerateName:"calico-apiserver-6d574c4f5b-", Namespace:"calico-apiserver", SelfLink:"", UID:"06d0dc32-8772-475c-a553-c9602f03c588", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6d574c4f5b", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"74f57bc2605b5596c2d586e4ceef39f71a1539460648d28282da0b4f19d89255", Pod:"calico-apiserver-6d574c4f5b-j8zsj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali765b902987f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.274 [INFO][5051] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.274 [INFO][5051] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" iface="eth0" netns="" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.274 [INFO][5051] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.274 [INFO][5051] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.296 [INFO][5058] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.296 [INFO][5058] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.296 [INFO][5058] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.305 [WARNING][5058] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.305 [INFO][5058] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" HandleID="k8s-pod-network.f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--6d574c4f5b--j8zsj-eth0" Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.306 [INFO][5058] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.312387 env[1484]: 2025-11-01 00:20:55.309 [INFO][5051] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c" Nov 1 00:20:55.313174 env[1484]: time="2025-11-01T00:20:55.313135856Z" level=info msg="TearDown network for sandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\" successfully" Nov 1 00:20:55.321766 env[1484]: time="2025-11-01T00:20:55.321718546Z" level=info msg="RemovePodSandbox \"f91f8dc7f58720375440a67e80a84f4c9baa7726d11aef68ed17d378a20ecb4c\" returns successfully" Nov 1 00:20:55.322394 env[1484]: time="2025-11-01T00:20:55.322367667Z" level=info msg="StopPodSandbox for \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\"" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.357 [WARNING][5072] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0", GenerateName:"calico-kube-controllers-65fdfb6775-", Namespace:"calico-system", SelfLink:"", UID:"d0c030a0-2978-427b-aeca-01939df97b98", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"65fdfb6775", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0", Pod:"calico-kube-controllers-65fdfb6775-jq5nz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.103.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c0b0e713d5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.357 [INFO][5072] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.357 [INFO][5072] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" iface="eth0" netns="" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.357 [INFO][5072] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.357 [INFO][5072] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.375 [INFO][5079] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.376 [INFO][5079] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.376 [INFO][5079] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.384 [WARNING][5079] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.384 [INFO][5079] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.386 [INFO][5079] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.388991 env[1484]: 2025-11-01 00:20:55.387 [INFO][5072] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.389533 env[1484]: time="2025-11-01T00:20:55.389497991Z" level=info msg="TearDown network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\" successfully" Nov 1 00:20:55.389607 env[1484]: time="2025-11-01T00:20:55.389590872Z" level=info msg="StopPodSandbox for \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\" returns successfully" Nov 1 00:20:55.390168 env[1484]: time="2025-11-01T00:20:55.390145352Z" level=info msg="RemovePodSandbox for \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\"" Nov 1 00:20:55.390316 env[1484]: time="2025-11-01T00:20:55.390276912Z" level=info msg="Forcibly stopping sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\"" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.428 [WARNING][5094] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0", GenerateName:"calico-kube-controllers-65fdfb6775-", Namespace:"calico-system", SelfLink:"", UID:"d0c030a0-2978-427b-aeca-01939df97b98", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"65fdfb6775", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"f3f9df99ea636b99a40737fb0f0d56de9223193319886bd306915e78b61de8f0", Pod:"calico-kube-controllers-65fdfb6775-jq5nz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.103.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c0b0e713d5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.428 [INFO][5094] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.428 [INFO][5094] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" iface="eth0" netns="" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.428 [INFO][5094] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.429 [INFO][5094] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.448 [INFO][5102] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.448 [INFO][5102] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.448 [INFO][5102] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.457 [WARNING][5102] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.457 [INFO][5102] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" HandleID="k8s-pod-network.ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--kube--controllers--65fdfb6775--jq5nz-eth0" Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.458 [INFO][5102] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.461463 env[1484]: 2025-11-01 00:20:55.460 [INFO][5094] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317" Nov 1 00:20:55.461929 env[1484]: time="2025-11-01T00:20:55.461513682Z" level=info msg="TearDown network for sandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\" successfully" Nov 1 00:20:55.477523 env[1484]: time="2025-11-01T00:20:55.477455382Z" level=info msg="RemovePodSandbox \"ca1e5ac44a7f1bf361b7d8f1ad3326d8c56de8d39fa67673397f84e39d4ba317\" returns successfully" Nov 1 00:20:55.478076 env[1484]: time="2025-11-01T00:20:55.478048103Z" level=info msg="StopPodSandbox for \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\"" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.521 [WARNING][5118] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e9955b10-5b47-461a-b3ab-955ce4c39730", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1", Pod:"goldmane-666569f655-6fknv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.103.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif7133a7e6fd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.521 [INFO][5118] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.521 [INFO][5118] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" iface="eth0" netns="" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.521 [INFO][5118] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.521 [INFO][5118] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.553 [INFO][5125] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.553 [INFO][5125] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.553 [INFO][5125] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.562 [WARNING][5125] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.562 [INFO][5125] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.563 [INFO][5125] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.567979 env[1484]: 2025-11-01 00:20:55.564 [INFO][5118] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.568518 env[1484]: time="2025-11-01T00:20:55.568479856Z" level=info msg="TearDown network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\" successfully" Nov 1 00:20:55.568595 env[1484]: time="2025-11-01T00:20:55.568578896Z" level=info msg="StopPodSandbox for \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\" returns successfully" Nov 1 00:20:55.569189 env[1484]: time="2025-11-01T00:20:55.569163697Z" level=info msg="RemovePodSandbox for \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\"" Nov 1 00:20:55.569418 env[1484]: time="2025-11-01T00:20:55.569372937Z" level=info msg="Forcibly stopping sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\"" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.603 [WARNING][5139] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0", GenerateName:"goldmane-666569f655-", Namespace:"calico-system", SelfLink:"", UID:"e9955b10-5b47-461a-b3ab-955ce4c39730", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"666569f655", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"34d58804591aea54779ba336a98837b900d2e500e0e5a79268c76cad006af0d1", Pod:"goldmane-666569f655-6fknv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.103.8/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calif7133a7e6fd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.603 [INFO][5139] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.603 [INFO][5139] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" iface="eth0" netns="" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.603 [INFO][5139] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.603 [INFO][5139] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.622 [INFO][5147] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.622 [INFO][5147] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.622 [INFO][5147] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.631 [WARNING][5147] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.631 [INFO][5147] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" HandleID="k8s-pod-network.4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Workload="ci--3510.3.8--n--2788c77bd2-k8s-goldmane--666569f655--6fknv-eth0" Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.632 [INFO][5147] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.635585 env[1484]: 2025-11-01 00:20:55.634 [INFO][5139] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9" Nov 1 00:20:55.636146 env[1484]: time="2025-11-01T00:20:55.636100181Z" level=info msg="TearDown network for sandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\" successfully" Nov 1 00:20:55.645777 env[1484]: time="2025-11-01T00:20:55.645725553Z" level=info msg="RemovePodSandbox \"4d7cbab08e6eb2be5973f35d60340c8756cc4b34abb7108992eab3f57601a6a9\" returns successfully" Nov 1 00:20:55.646589 env[1484]: time="2025-11-01T00:20:55.646558354Z" level=info msg="StopPodSandbox for \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\"" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.682 [WARNING][5161] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"716bcd07-1553-45a0-bebf-9f6d85629075", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0", Pod:"coredns-668d6bf9bc-b4579", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif1ea88dbb70", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.682 [INFO][5161] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.682 [INFO][5161] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" iface="eth0" netns="" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.682 [INFO][5161] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.682 [INFO][5161] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.702 [INFO][5168] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.702 [INFO][5168] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.702 [INFO][5168] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.710 [WARNING][5168] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.710 [INFO][5168] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.711 [INFO][5168] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.714924 env[1484]: 2025-11-01 00:20:55.713 [INFO][5161] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.715378 env[1484]: time="2025-11-01T00:20:55.714959000Z" level=info msg="TearDown network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\" successfully" Nov 1 00:20:55.715378 env[1484]: time="2025-11-01T00:20:55.714991280Z" level=info msg="StopPodSandbox for \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\" returns successfully" Nov 1 00:20:55.715599 env[1484]: time="2025-11-01T00:20:55.715574840Z" level=info msg="RemovePodSandbox for \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\"" Nov 1 00:20:55.715743 env[1484]: time="2025-11-01T00:20:55.715707321Z" level=info msg="Forcibly stopping sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\"" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.748 [WARNING][5183] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"716bcd07-1553-45a0-bebf-9f6d85629075", ResourceVersion:"1048", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"4c7b99be3e95a0f50206c41ebc4389e8165d49d69004e1dd2d5ff7fadb9a90f0", Pod:"coredns-668d6bf9bc-b4579", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.7/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif1ea88dbb70", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.748 [INFO][5183] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.748 [INFO][5183] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" iface="eth0" netns="" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.748 [INFO][5183] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.748 [INFO][5183] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.765 [INFO][5190] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.766 [INFO][5190] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.766 [INFO][5190] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.774 [WARNING][5190] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.774 [INFO][5190] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" HandleID="k8s-pod-network.822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--b4579-eth0" Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.775 [INFO][5190] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.778302 env[1484]: 2025-11-01 00:20:55.777 [INFO][5183] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32" Nov 1 00:20:55.778828 env[1484]: time="2025-11-01T00:20:55.778787040Z" level=info msg="TearDown network for sandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\" successfully" Nov 1 00:20:55.787085 env[1484]: time="2025-11-01T00:20:55.787040010Z" level=info msg="RemovePodSandbox \"822d9140f343529eb0c0b073df33d506e5226f43e6c3ce8d28eac6b79ed86f32\" returns successfully" Nov 1 00:20:55.787669 env[1484]: time="2025-11-01T00:20:55.787648491Z" level=info msg="StopPodSandbox for \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\"" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.822 [WARNING][5205] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"325cca53-bb7c-48f5-b2f1-432375aa7e1f", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff", Pod:"calico-apiserver-856fdb46cd-xbgdv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4778568a2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.823 [INFO][5205] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.823 [INFO][5205] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" iface="eth0" netns="" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.823 [INFO][5205] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.823 [INFO][5205] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.843 [INFO][5212] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.843 [INFO][5212] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.843 [INFO][5212] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.852 [WARNING][5212] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.852 [INFO][5212] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.853 [INFO][5212] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.856144 env[1484]: 2025-11-01 00:20:55.854 [INFO][5205] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.856683 env[1484]: time="2025-11-01T00:20:55.856637937Z" level=info msg="TearDown network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\" successfully" Nov 1 00:20:55.856762 env[1484]: time="2025-11-01T00:20:55.856742297Z" level=info msg="StopPodSandbox for \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\" returns successfully" Nov 1 00:20:55.857401 env[1484]: time="2025-11-01T00:20:55.857372258Z" level=info msg="RemovePodSandbox for \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\"" Nov 1 00:20:55.857482 env[1484]: time="2025-11-01T00:20:55.857407658Z" level=info msg="Forcibly stopping sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\"" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.889 [WARNING][5226] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"325cca53-bb7c-48f5-b2f1-432375aa7e1f", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"fd7248ea0530d4d0c2bd24e3c29df4b7bb65d9079f77f75ddee920ac3af249ff", Pod:"calico-apiserver-856fdb46cd-xbgdv", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid4778568a2e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.890 [INFO][5226] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.890 [INFO][5226] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" iface="eth0" netns="" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.890 [INFO][5226] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.890 [INFO][5226] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.908 [INFO][5233] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.908 [INFO][5233] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.908 [INFO][5233] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.917 [WARNING][5233] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.917 [INFO][5233] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" HandleID="k8s-pod-network.6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--xbgdv-eth0" Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.918 [INFO][5233] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.921325 env[1484]: 2025-11-01 00:20:55.920 [INFO][5226] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017" Nov 1 00:20:55.921853 env[1484]: time="2025-11-01T00:20:55.921810979Z" level=info msg="TearDown network for sandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\" successfully" Nov 1 00:20:55.933001 env[1484]: time="2025-11-01T00:20:55.932934353Z" level=info msg="RemovePodSandbox \"6f716e82172675bb67ac2e878178383339664df50d8453dbcedebf7c1af9a017\" returns successfully" Nov 1 00:20:55.933730 env[1484]: time="2025-11-01T00:20:55.933703354Z" level=info msg="StopPodSandbox for \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\"" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.965 [WARNING][5248] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.965 [INFO][5248] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.965 [INFO][5248] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" iface="eth0" netns="" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.965 [INFO][5248] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.965 [INFO][5248] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.983 [INFO][5255] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.983 [INFO][5255] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.983 [INFO][5255] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.991 [WARNING][5255] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.991 [INFO][5255] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.992 [INFO][5255] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:55.995422 env[1484]: 2025-11-01 00:20:55.994 [INFO][5248] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:55.996131 env[1484]: time="2025-11-01T00:20:55.996090232Z" level=info msg="TearDown network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\" successfully" Nov 1 00:20:55.996282 env[1484]: time="2025-11-01T00:20:55.996262632Z" level=info msg="StopPodSandbox for \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\" returns successfully" Nov 1 00:20:55.996932 env[1484]: time="2025-11-01T00:20:55.996855033Z" level=info msg="RemovePodSandbox for \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\"" Nov 1 00:20:55.997227 env[1484]: time="2025-11-01T00:20:55.997166593Z" level=info msg="Forcibly stopping sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\"" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.031 [WARNING][5270] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" WorkloadEndpoint="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.031 [INFO][5270] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.031 [INFO][5270] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" iface="eth0" netns="" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.031 [INFO][5270] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.031 [INFO][5270] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.055 [INFO][5277] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.055 [INFO][5277] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.055 [INFO][5277] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.063 [WARNING][5277] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.063 [INFO][5277] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" HandleID="k8s-pod-network.84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-whisker--7b847b84bd--qg6bc-eth0" Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.064 [INFO][5277] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:56.067357 env[1484]: 2025-11-01 00:20:56.066 [INFO][5270] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d" Nov 1 00:20:56.067819 env[1484]: time="2025-11-01T00:20:56.067787761Z" level=info msg="TearDown network for sandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\" successfully" Nov 1 00:20:56.078342 env[1484]: time="2025-11-01T00:20:56.078296734Z" level=info msg="RemovePodSandbox \"84ef0425206be5f14641c95439a4d13b12a9f10d76835704429ea02d8ad3771d\" returns successfully" Nov 1 00:20:56.079021 env[1484]: time="2025-11-01T00:20:56.078998815Z" level=info msg="StopPodSandbox for \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\"" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.115 [WARNING][5291] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5", ResourceVersion:"1077", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba", Pod:"coredns-668d6bf9bc-bkqtt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.9/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9be8049d47f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.116 [INFO][5291] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.116 [INFO][5291] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" iface="eth0" netns="" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.116 [INFO][5291] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.116 [INFO][5291] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.134 [INFO][5298] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.134 [INFO][5298] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.134 [INFO][5298] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.143 [WARNING][5298] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.143 [INFO][5298] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.144 [INFO][5298] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:56.148923 env[1484]: 2025-11-01 00:20:56.146 [INFO][5291] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.149441 env[1484]: time="2025-11-01T00:20:56.149405622Z" level=info msg="TearDown network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\" successfully" Nov 1 00:20:56.149514 env[1484]: time="2025-11-01T00:20:56.149499262Z" level=info msg="StopPodSandbox for \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\" returns successfully" Nov 1 00:20:56.150102 env[1484]: time="2025-11-01T00:20:56.150070143Z" level=info msg="RemovePodSandbox for \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\"" Nov 1 00:20:56.150251 env[1484]: time="2025-11-01T00:20:56.150212823Z" level=info msg="Forcibly stopping sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\"" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.183 [WARNING][5312] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"b9c5ad65-eebf-4378-95c7-c8e53c9b03d5", ResourceVersion:"1077", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"c33ec5c0eb9f30862ff0717ae4489eb244f89fc1bbb7497f7b0dfc7b2b3c18ba", Pod:"coredns-668d6bf9bc-bkqtt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.103.9/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali9be8049d47f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.184 [INFO][5312] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.184 [INFO][5312] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" iface="eth0" netns="" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.184 [INFO][5312] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.184 [INFO][5312] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.203 [INFO][5319] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.203 [INFO][5319] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.203 [INFO][5319] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.211 [WARNING][5319] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.212 [INFO][5319] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" HandleID="k8s-pod-network.3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Workload="ci--3510.3.8--n--2788c77bd2-k8s-coredns--668d6bf9bc--bkqtt-eth0" Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.213 [INFO][5319] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:56.215936 env[1484]: 2025-11-01 00:20:56.214 [INFO][5312] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616" Nov 1 00:20:56.216405 env[1484]: time="2025-11-01T00:20:56.215971584Z" level=info msg="TearDown network for sandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\" successfully" Nov 1 00:20:56.223206 env[1484]: time="2025-11-01T00:20:56.223158993Z" level=info msg="RemovePodSandbox \"3cc7e90ae05f5fdb67769cb698fb6f2fb1e0899ef474d988d41367fbc43cd616\" returns successfully" Nov 1 00:20:56.223632 env[1484]: time="2025-11-01T00:20:56.223595554Z" level=info msg="StopPodSandbox for \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\"" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.262 [WARNING][5334] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"2e8a69dd-776a-4945-85af-d19c382f23d2", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a", Pod:"calico-apiserver-856fdb46cd-n8gjk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali49e3d08b070", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.263 [INFO][5334] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.263 [INFO][5334] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" iface="eth0" netns="" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.263 [INFO][5334] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.263 [INFO][5334] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.280 [INFO][5341] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.280 [INFO][5341] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.281 [INFO][5341] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.289 [WARNING][5341] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.289 [INFO][5341] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.290 [INFO][5341] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:56.293069 env[1484]: 2025-11-01 00:20:56.291 [INFO][5334] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.293644 env[1484]: time="2025-11-01T00:20:56.293098759Z" level=info msg="TearDown network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\" successfully" Nov 1 00:20:56.293644 env[1484]: time="2025-11-01T00:20:56.293129160Z" level=info msg="StopPodSandbox for \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\" returns successfully" Nov 1 00:20:56.294001 env[1484]: time="2025-11-01T00:20:56.293961441Z" level=info msg="RemovePodSandbox for \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\"" Nov 1 00:20:56.294163 env[1484]: time="2025-11-01T00:20:56.294110921Z" level=info msg="Forcibly stopping sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\"" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.327 [WARNING][5355] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0", GenerateName:"calico-apiserver-856fdb46cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"2e8a69dd-776a-4945-85af-d19c382f23d2", ResourceVersion:"1007", Generation:0, CreationTimestamp:time.Date(2025, time.November, 1, 0, 20, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"856fdb46cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510.3.8-n-2788c77bd2", ContainerID:"e89025b6f380f6acea87e33fb3067a1e84eb790cdb0e6ae9f5c65036f1788b0a", Pod:"calico-apiserver-856fdb46cd-n8gjk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.103.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali49e3d08b070", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.328 [INFO][5355] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.328 [INFO][5355] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" iface="eth0" netns="" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.328 [INFO][5355] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.328 [INFO][5355] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.350 [INFO][5362] ipam/ipam_plugin.go 436: Releasing address using handleID ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.350 [INFO][5362] ipam/ipam_plugin.go 377: About to acquire host-wide IPAM lock. Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.350 [INFO][5362] ipam/ipam_plugin.go 392: Acquired host-wide IPAM lock. Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.360 [WARNING][5362] ipam/ipam_plugin.go 453: Asked to release address but it doesn't exist. Ignoring ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.360 [INFO][5362] ipam/ipam_plugin.go 464: Releasing address using workloadID ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" HandleID="k8s-pod-network.c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Workload="ci--3510.3.8--n--2788c77bd2-k8s-calico--apiserver--856fdb46cd--n8gjk-eth0" Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.361 [INFO][5362] ipam/ipam_plugin.go 398: Released host-wide IPAM lock. Nov 1 00:20:56.364216 env[1484]: 2025-11-01 00:20:56.362 [INFO][5355] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d" Nov 1 00:20:56.364733 env[1484]: time="2025-11-01T00:20:56.364691088Z" level=info msg="TearDown network for sandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\" successfully" Nov 1 00:20:56.374168 env[1484]: time="2025-11-01T00:20:56.374119300Z" level=info msg="RemovePodSandbox \"c2d01d53ab8daa06df9b84882485585d3b4e46bff840a3dd1ad4888ee759871d\" returns successfully" Nov 1 00:20:58.677000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.683303 kernel: kauditd_printk_skb: 289 callbacks suppressed Nov 1 00:20:58.683439 kernel: audit: type=1400 audit(1761956458.677:1367): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.677000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002197fa0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:58.732676 kernel: audit: type=1300 audit(1761956458.677:1367): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002197fa0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:58.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:58.756454 kernel: audit: type=1327 audit(1761956458.677:1367): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:58.756571 kernel: audit: type=1400 audit(1761956458.677:1368): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.677000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.677000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c5efc0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:58.806778 kernel: audit: type=1300 audit(1761956458.677:1368): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c5efc0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:58.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:58.830793 kernel: audit: type=1327 audit(1761956458.677:1368): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:58.830932 kernel: audit: type=1400 audit(1761956458.678:1369): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.678000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.678000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c5f300 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:58.881457 kernel: audit: type=1300 audit(1761956458.678:1369): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c5f300 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:58.678000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:58.906201 kernel: audit: type=1327 audit(1761956458.678:1369): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:58.689000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.927576 kernel: audit: type=1400 audit(1761956458.689:1370): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:20:58.689000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002197fc0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:20:58.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:20:58.975620 env[1484]: time="2025-11-01T00:20:58.975513348Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:59.211866 env[1484]: time="2025-11-01T00:20:59.211813109Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:59.215984 env[1484]: time="2025-11-01T00:20:59.215925674Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:59.216261 kubelet[2472]: E1101 00:20:59.216220 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:59.216558 kubelet[2472]: E1101 00:20:59.216275 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:59.216639 env[1484]: time="2025-11-01T00:20:59.216608275Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:20:59.217030 kubelet[2472]: E1101 00:20:59.216974 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9pxrj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-n8gjk_calico-apiserver(2e8a69dd-776a-4945-85af-d19c382f23d2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:59.218374 kubelet[2472]: E1101 00:20:59.218313 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:20:59.466360 env[1484]: time="2025-11-01T00:20:59.466101691Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:59.475111 env[1484]: time="2025-11-01T00:20:59.475009742Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:20:59.475487 kubelet[2472]: E1101 00:20:59.475432 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:59.475557 kubelet[2472]: E1101 00:20:59.475496 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:20:59.475829 kubelet[2472]: E1101 00:20:59.475786 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5mbsm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-xbgdv_calico-apiserver(325cca53-bb7c-48f5-b2f1-432375aa7e1f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:59.475975 env[1484]: time="2025-11-01T00:20:59.475915143Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:20:59.477576 kubelet[2472]: E1101 00:20:59.477543 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:20:59.694181 env[1484]: time="2025-11-01T00:20:59.694124562Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:59.698108 env[1484]: time="2025-11-01T00:20:59.698051127Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:20:59.698497 kubelet[2472]: E1101 00:20:59.698298 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:59.698497 kubelet[2472]: E1101 00:20:59.698345 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:20:59.698908 env[1484]: time="2025-11-01T00:20:59.698657807Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:20:59.699127 kubelet[2472]: E1101 00:20:59.698930 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:59.915667 env[1484]: time="2025-11-01T00:20:59.915610745Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:20:59.921978 env[1484]: time="2025-11-01T00:20:59.921922913Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:20:59.923446 kubelet[2472]: E1101 00:20:59.922296 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:59.923446 kubelet[2472]: E1101 00:20:59.922344 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:20:59.923446 kubelet[2472]: E1101 00:20:59.923078 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nkq4j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-6fknv_calico-system(e9955b10-5b47-461a-b3ab-955ce4c39730): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:20:59.923672 env[1484]: time="2025-11-01T00:20:59.922804754Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:20:59.924665 kubelet[2472]: E1101 00:20:59.924550 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:21:00.174208 env[1484]: time="2025-11-01T00:21:00.174085530Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:00.186086 env[1484]: time="2025-11-01T00:21:00.186007983Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:21:00.186507 kubelet[2472]: E1101 00:21:00.186466 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:21:00.186631 kubelet[2472]: E1101 00:21:00.186612 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:21:00.186835 kubelet[2472]: E1101 00:21:00.186797 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:00.188343 kubelet[2472]: E1101 00:21:00.188274 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:21:01.973859 env[1484]: time="2025-11-01T00:21:01.973815866Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:21:01.975005 kubelet[2472]: E1101 00:21:01.974963 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:21:02.209917 env[1484]: time="2025-11-01T00:21:02.209792496Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:02.213958 env[1484]: time="2025-11-01T00:21:02.213895421Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:21:02.214210 kubelet[2472]: E1101 00:21:02.214146 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:21:02.214282 kubelet[2472]: E1101 00:21:02.214216 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:21:02.214404 kubelet[2472]: E1101 00:21:02.214342 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-w4q4m,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-65fdfb6775-jq5nz_calico-system(d0c030a0-2978-427b-aeca-01939df97b98): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:02.215947 kubelet[2472]: E1101 00:21:02.215910 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:21:02.973816 env[1484]: time="2025-11-01T00:21:02.973565450Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:21:03.332715 env[1484]: time="2025-11-01T00:21:03.332667776Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:03.336970 env[1484]: time="2025-11-01T00:21:03.336905101Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:21:03.337250 kubelet[2472]: E1101 00:21:03.337214 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:03.337547 kubelet[2472]: E1101 00:21:03.337527 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:03.337790 kubelet[2472]: E1101 00:21:03.337729 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-bxzq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d574c4f5b-j8zsj_calico-apiserver(06d0dc32-8772-475c-a553-c9602f03c588): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:03.339094 kubelet[2472]: E1101 00:21:03.339051 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:21:09.622278 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.4rltXr.mount: Deactivated successfully. Nov 1 00:21:11.974383 kubelet[2472]: E1101 00:21:11.974324 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:21:11.974936 kubelet[2472]: E1101 00:21:11.974406 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:21:12.976814 kubelet[2472]: E1101 00:21:12.976751 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:21:13.974097 env[1484]: time="2025-11-01T00:21:13.974038812Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:21:14.227955 env[1484]: time="2025-11-01T00:21:14.227810427Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:14.231929 env[1484]: time="2025-11-01T00:21:14.231849631Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:21:14.232167 kubelet[2472]: E1101 00:21:14.232112 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:21:14.232414 kubelet[2472]: E1101 00:21:14.232177 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:21:14.232414 kubelet[2472]: E1101 00:21:14.232283 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a5df3952c76546deb3fcde5c311cc6b2,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:14.234913 env[1484]: time="2025-11-01T00:21:14.234678793Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:21:14.484475 env[1484]: time="2025-11-01T00:21:14.484363324Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:14.487515 env[1484]: time="2025-11-01T00:21:14.487446127Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:21:14.487788 kubelet[2472]: E1101 00:21:14.487719 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:21:14.487858 kubelet[2472]: E1101 00:21:14.487799 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:21:14.487991 kubelet[2472]: E1101 00:21:14.487943 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:14.489297 kubelet[2472]: E1101 00:21:14.489242 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:21:14.974506 kubelet[2472]: E1101 00:21:14.974451 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:21:14.975437 kubelet[2472]: E1101 00:21:14.975400 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:21:15.973877 kubelet[2472]: E1101 00:21:15.973837 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:21:22.974622 env[1484]: time="2025-11-01T00:21:22.974553490Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:21:23.202748 env[1484]: time="2025-11-01T00:21:23.202552782Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:23.206647 env[1484]: time="2025-11-01T00:21:23.206537546Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:21:23.208247 kubelet[2472]: E1101 00:21:23.208199 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:23.208547 kubelet[2472]: E1101 00:21:23.208270 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:23.208547 kubelet[2472]: E1101 00:21:23.208419 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5mbsm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-xbgdv_calico-apiserver(325cca53-bb7c-48f5-b2f1-432375aa7e1f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:23.209833 kubelet[2472]: E1101 00:21:23.209798 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:21:25.974620 env[1484]: time="2025-11-01T00:21:25.974562295Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:21:26.251856 env[1484]: time="2025-11-01T00:21:26.251608627Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:26.255294 env[1484]: time="2025-11-01T00:21:26.255164510Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:21:26.255596 kubelet[2472]: E1101 00:21:26.255562 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:21:26.255929 kubelet[2472]: E1101 00:21:26.255908 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:21:26.256161 kubelet[2472]: E1101 00:21:26.256115 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nkq4j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-6fknv_calico-system(e9955b10-5b47-461a-b3ab-955ce4c39730): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:26.257729 kubelet[2472]: E1101 00:21:26.257664 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:21:26.975234 env[1484]: time="2025-11-01T00:21:26.974845563Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:21:27.209648 env[1484]: time="2025-11-01T00:21:27.209595175Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:27.212949 env[1484]: time="2025-11-01T00:21:27.212900138Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:21:27.213183 kubelet[2472]: E1101 00:21:27.213147 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:27.213298 kubelet[2472]: E1101 00:21:27.213282 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:27.214087 kubelet[2472]: E1101 00:21:27.213624 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9pxrj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-n8gjk_calico-apiserver(2e8a69dd-776a-4945-85af-d19c382f23d2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:27.214215 env[1484]: time="2025-11-01T00:21:27.213692459Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:21:27.215080 kubelet[2472]: E1101 00:21:27.215041 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:21:27.465418 env[1484]: time="2025-11-01T00:21:27.465359766Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:27.468743 env[1484]: time="2025-11-01T00:21:27.468665009Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:21:27.468984 kubelet[2472]: E1101 00:21:27.468938 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:21:27.469257 kubelet[2472]: E1101 00:21:27.468992 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:21:27.469257 kubelet[2472]: E1101 00:21:27.469111 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:27.471530 env[1484]: time="2025-11-01T00:21:27.471459091Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:21:27.726951 env[1484]: time="2025-11-01T00:21:27.726710441Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:27.730544 env[1484]: time="2025-11-01T00:21:27.730421525Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:21:27.730864 kubelet[2472]: E1101 00:21:27.730817 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:21:27.730957 kubelet[2472]: E1101 00:21:27.730874 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:21:27.731039 kubelet[2472]: E1101 00:21:27.730991 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:27.732345 kubelet[2472]: E1101 00:21:27.732297 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:21:29.975529 kubelet[2472]: E1101 00:21:29.975488 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:21:29.975984 env[1484]: time="2025-11-01T00:21:29.975496850Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:21:30.216923 env[1484]: time="2025-11-01T00:21:30.216852223Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:30.220589 env[1484]: time="2025-11-01T00:21:30.220527946Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:21:30.220876 kubelet[2472]: E1101 00:21:30.220845 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:30.221014 kubelet[2472]: E1101 00:21:30.220994 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:21:30.221802 env[1484]: time="2025-11-01T00:21:30.221578107Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:21:30.222009 kubelet[2472]: E1101 00:21:30.221333 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-bxzq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d574c4f5b-j8zsj_calico-apiserver(06d0dc32-8772-475c-a553-c9602f03c588): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:30.223348 kubelet[2472]: E1101 00:21:30.223297 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:21:30.469062 env[1484]: time="2025-11-01T00:21:30.468865326Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:21:30.474227 env[1484]: time="2025-11-01T00:21:30.474079490Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:21:30.474371 kubelet[2472]: E1101 00:21:30.474332 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:21:30.474439 kubelet[2472]: E1101 00:21:30.474376 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:21:30.474537 kubelet[2472]: E1101 00:21:30.474487 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-w4q4m,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-65fdfb6775-jq5nz_calico-system(d0c030a0-2978-427b-aeca-01939df97b98): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:21:30.475835 kubelet[2472]: E1101 00:21:30.475783 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:21:36.973983 kubelet[2472]: E1101 00:21:36.973877 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:21:37.974104 kubelet[2472]: E1101 00:21:37.974066 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:21:37.974525 kubelet[2472]: E1101 00:21:37.974363 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:21:38.977017 kubelet[2472]: E1101 00:21:38.976966 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:21:39.620303 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.F7Q1lE.mount: Deactivated successfully. Nov 1 00:21:41.974727 kubelet[2472]: E1101 00:21:41.974678 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:21:44.974951 kubelet[2472]: E1101 00:21:44.974904 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:21:44.975415 kubelet[2472]: E1101 00:21:44.975338 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:21:49.973436 kubelet[2472]: E1101 00:21:49.973395 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:21:50.377000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.383495 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:21:50.383587 kernel: audit: type=1400 audit(1761956510.377:1371): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.377000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4011e10f30 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.432922 kernel: audit: type=1300 audit(1761956510.377:1371): arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4011e10f30 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.457951 kernel: audit: type=1327 audit(1761956510.377:1371): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.377000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.480811 kernel: audit: type=1400 audit(1761956510.377:1372): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.377000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4011e10f60 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.511340 kernel: audit: type=1300 audit(1761956510.377:1372): arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4011e10f60 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.538487 kernel: audit: type=1327 audit(1761956510.377:1372): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.393000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.561969 kernel: audit: type=1400 audit(1761956510.393:1373): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.393000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4011e11110 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.589596 kernel: audit: type=1300 audit(1761956510.393:1373): arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4011e11110 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.614627 kernel: audit: type=1327 audit(1761956510.393:1373): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.398000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.638013 kernel: audit: type=1400 audit(1761956510.398:1374): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.398000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4011e11200 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.398000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.398000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4007bc7540 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:50.398000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:50.398000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=71 a1=4007bc7560 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:21:50.398000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:21:51.048000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:51.048000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:51.048000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002826660 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:51.048000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:51.048000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40010da5a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:51.048000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:51.974514 kubelet[2472]: E1101 00:21:51.974477 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:21:52.974900 kubelet[2472]: E1101 00:21:52.974845 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:21:52.975422 kubelet[2472]: E1101 00:21:52.975394 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:21:53.974516 kubelet[2472]: E1101 00:21:53.974470 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:21:55.973572 kubelet[2472]: E1101 00:21:55.973531 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:21:56.973605 kubelet[2472]: E1101 00:21:56.973566 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:21:58.679000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.685200 kernel: kauditd_printk_skb: 14 callbacks suppressed Nov 1 00:21:58.685330 kernel: audit: type=1400 audit(1761956518.679:1379): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.679000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027faf80 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:58.740587 kernel: audit: type=1300 audit(1761956518.679:1379): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027faf80 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:58.679000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:58.766133 kernel: audit: type=1327 audit(1761956518.679:1379): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:58.682000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.789488 kernel: audit: type=1400 audit(1761956518.682:1380): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.682000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027fafa0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:58.822804 kernel: audit: type=1300 audit(1761956518.682:1380): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027fafa0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:58.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:58.851492 kernel: audit: type=1327 audit(1761956518.682:1380): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:58.682000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.876945 kernel: audit: type=1400 audit(1761956518.682:1381): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.682000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027fb140 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:58.910955 kernel: audit: type=1300 audit(1761956518.682:1381): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027fb140 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:58.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:58.936813 kernel: audit: type=1327 audit(1761956518.682:1381): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:21:58.690000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.961078 kernel: audit: type=1400 audit(1761956518.690:1382): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:21:58.690000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40027fb460 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:21:58.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:00.973687 kubelet[2472]: E1101 00:22:00.973651 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:22:04.975037 kubelet[2472]: E1101 00:22:04.974995 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:22:05.975150 kubelet[2472]: E1101 00:22:05.975109 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:22:05.976061 kubelet[2472]: E1101 00:22:05.975911 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:22:07.974599 env[1484]: time="2025-11-01T00:22:07.974354357Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:22:08.253402 env[1484]: time="2025-11-01T00:22:08.253109956Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:08.257043 env[1484]: time="2025-11-01T00:22:08.256903070Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:22:08.257204 kubelet[2472]: E1101 00:22:08.257152 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:22:08.257444 kubelet[2472]: E1101 00:22:08.257212 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:22:08.257444 kubelet[2472]: E1101 00:22:08.257313 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a5df3952c76546deb3fcde5c311cc6b2,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:08.259659 env[1484]: time="2025-11-01T00:22:08.259621226Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:22:08.485655 env[1484]: time="2025-11-01T00:22:08.485457989Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:08.490814 env[1484]: time="2025-11-01T00:22:08.490689541Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:22:08.491081 kubelet[2472]: E1101 00:22:08.491038 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:22:08.491151 kubelet[2472]: E1101 00:22:08.491094 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:22:08.491244 kubelet[2472]: E1101 00:22:08.491198 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:08.492832 kubelet[2472]: E1101 00:22:08.492751 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:22:08.976480 kubelet[2472]: E1101 00:22:08.976271 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:22:09.620859 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.Kf76yx.mount: Deactivated successfully. Nov 1 00:22:10.974550 env[1484]: time="2025-11-01T00:22:10.974508389Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:22:11.225356 env[1484]: time="2025-11-01T00:22:11.225235375Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:11.228460 env[1484]: time="2025-11-01T00:22:11.228399050Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:22:11.228668 kubelet[2472]: E1101 00:22:11.228631 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:11.228993 kubelet[2472]: E1101 00:22:11.228973 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:11.230932 kubelet[2472]: E1101 00:22:11.230858 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-bxzq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d574c4f5b-j8zsj_calico-apiserver(06d0dc32-8772-475c-a553-c9602f03c588): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:11.232254 kubelet[2472]: E1101 00:22:11.232216 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:22:13.974277 env[1484]: time="2025-11-01T00:22:13.974058408Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:22:14.215677 env[1484]: time="2025-11-01T00:22:14.215618269Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:14.218904 env[1484]: time="2025-11-01T00:22:14.218813864Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:22:14.219096 kubelet[2472]: E1101 00:22:14.219038 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:14.219329 kubelet[2472]: E1101 00:22:14.219103 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:14.219329 kubelet[2472]: E1101 00:22:14.219208 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5mbsm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-xbgdv_calico-apiserver(325cca53-bb7c-48f5-b2f1-432375aa7e1f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:14.220538 kubelet[2472]: E1101 00:22:14.220493 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:22:16.974277 env[1484]: time="2025-11-01T00:22:16.974237401Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:22:17.237008 env[1484]: time="2025-11-01T00:22:17.236856093Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:17.240072 env[1484]: time="2025-11-01T00:22:17.240015289Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:22:17.240342 kubelet[2472]: E1101 00:22:17.240289 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:17.240629 kubelet[2472]: E1101 00:22:17.240351 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:22:17.240629 kubelet[2472]: E1101 00:22:17.240485 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9pxrj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-n8gjk_calico-apiserver(2e8a69dd-776a-4945-85af-d19c382f23d2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:17.241942 kubelet[2472]: E1101 00:22:17.241909 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:22:17.974092 env[1484]: time="2025-11-01T00:22:17.974039440Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:22:18.218292 env[1484]: time="2025-11-01T00:22:18.218233083Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:18.221980 env[1484]: time="2025-11-01T00:22:18.221906399Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:22:18.222296 kubelet[2472]: E1101 00:22:18.222255 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:22:18.222402 kubelet[2472]: E1101 00:22:18.222386 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:22:18.222583 kubelet[2472]: E1101 00:22:18.222547 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:18.225357 env[1484]: time="2025-11-01T00:22:18.225250514Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:22:18.460238 env[1484]: time="2025-11-01T00:22:18.460175850Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:18.463763 env[1484]: time="2025-11-01T00:22:18.463682726Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:22:18.464058 kubelet[2472]: E1101 00:22:18.464026 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:22:18.464360 kubelet[2472]: E1101 00:22:18.464340 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:22:18.464557 kubelet[2472]: E1101 00:22:18.464514 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:18.466069 kubelet[2472]: E1101 00:22:18.466034 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:22:19.975062 env[1484]: time="2025-11-01T00:22:19.974938236Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:22:20.217449 env[1484]: time="2025-11-01T00:22:20.217248854Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:20.221665 env[1484]: time="2025-11-01T00:22:20.221518929Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:22:20.221836 kubelet[2472]: E1101 00:22:20.221790 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:22:20.222128 kubelet[2472]: E1101 00:22:20.221855 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:22:20.222128 kubelet[2472]: E1101 00:22:20.222008 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nkq4j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-6fknv_calico-system(e9955b10-5b47-461a-b3ab-955ce4c39730): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:20.223437 kubelet[2472]: E1101 00:22:20.223405 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:22:21.974285 env[1484]: time="2025-11-01T00:22:21.974239696Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:22:22.335325 env[1484]: time="2025-11-01T00:22:22.335275825Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:22:22.340161 env[1484]: time="2025-11-01T00:22:22.340101059Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:22:22.340535 kubelet[2472]: E1101 00:22:22.340474 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:22:22.340848 kubelet[2472]: E1101 00:22:22.340550 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:22:22.340848 kubelet[2472]: E1101 00:22:22.340683 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-w4q4m,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-65fdfb6775-jq5nz_calico-system(d0c030a0-2978-427b-aeca-01939df97b98): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:22:22.342175 kubelet[2472]: E1101 00:22:22.342144 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:22:22.975085 kubelet[2472]: E1101 00:22:22.975049 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:22:24.973903 kubelet[2472]: E1101 00:22:24.973849 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:22:27.973286 kubelet[2472]: E1101 00:22:27.973239 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:22:30.974184 kubelet[2472]: E1101 00:22:30.974131 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:22:31.974267 kubelet[2472]: E1101 00:22:31.974218 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:22:32.974309 kubelet[2472]: E1101 00:22:32.974260 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:22:34.974310 kubelet[2472]: E1101 00:22:34.974273 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:22:37.974927 kubelet[2472]: E1101 00:22:37.974855 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:22:38.974460 kubelet[2472]: E1101 00:22:38.974421 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:22:39.627272 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.LRBTrJ.mount: Deactivated successfully. Nov 1 00:22:41.973321 kubelet[2472]: E1101 00:22:41.973275 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:22:44.974676 kubelet[2472]: E1101 00:22:44.974617 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:22:45.973997 kubelet[2472]: E1101 00:22:45.973955 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:22:45.974694 kubelet[2472]: E1101 00:22:45.974661 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:22:47.973947 kubelet[2472]: E1101 00:22:47.973906 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:22:49.974239 kubelet[2472]: E1101 00:22:49.974203 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:22:50.378000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.384060 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:22:50.384216 kernel: audit: type=1400 audit(1761956570.378:1384): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.378000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.429457 kernel: audit: type=1400 audit(1761956570.378:1383): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.429593 kernel: audit: type=1300 audit(1761956570.378:1383): arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=40113b1710 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.378000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=40113b1710 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.481677 kernel: audit: type=1327 audit(1761956570.378:1383): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.378000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400a4bb140 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.509047 kernel: audit: type=1300 audit(1761956570.378:1384): arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400a4bb140 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.509218 kernel: audit: type=1327 audit(1761956570.378:1384): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.393000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.554965 kernel: audit: type=1400 audit(1761956570.393:1385): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.393000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400a4bbbf0 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.582862 kernel: audit: type=1300 audit(1761956570.393:1385): arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400a4bbbf0 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.607158 kernel: audit: type=1327 audit(1761956570.393:1385): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.607319 kernel: audit: type=1400 audit(1761956570.400:1386): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.400000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.400000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400a4bbe60 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.400000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.400000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=4005480440 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:50.400000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:50.400000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=4005480460 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:22:50.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:22:51.049000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:51.049000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:51.049000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002fa2ae0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:51.049000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:51.049000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002868630 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:51.049000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:52.975144 kubelet[2472]: E1101 00:22:52.975098 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:22:53.974257 kubelet[2472]: E1101 00:22:53.974210 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:22:56.973749 kubelet[2472]: E1101 00:22:56.973703 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:22:58.682000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.688755 kernel: kauditd_printk_skb: 14 callbacks suppressed Nov 1 00:22:58.688958 kernel: audit: type=1400 audit(1761956578.682:1391): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.682000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.733252 kernel: audit: type=1400 audit(1761956578.682:1392): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.682000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ea1900 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:58.763501 kernel: audit: type=1300 audit(1761956578.682:1392): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ea1900 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:58.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:58.790492 kernel: audit: type=1327 audit(1761956578.682:1392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:58.683000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.813530 kernel: audit: type=1400 audit(1761956578.683:1393): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.683000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ea1aa0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:58.683000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:58.873663 kernel: audit: type=1300 audit(1761956578.683:1393): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ea1aa0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:58.873771 kernel: audit: type=1327 audit(1761956578.683:1393): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:58.691000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.897084 kernel: audit: type=1400 audit(1761956578.691:1394): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:22:58.691000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ea1dc0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:58.928138 kernel: audit: type=1300 audit(1761956578.691:1394): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ea1dc0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:58.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:58.953745 kernel: audit: type=1327 audit(1761956578.691:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:58.682000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002fa3d00 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:22:58.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:22:58.974264 kubelet[2472]: E1101 00:22:58.974233 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:22:58.975007 kubelet[2472]: E1101 00:22:58.974976 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:23:02.974178 kubelet[2472]: E1101 00:23:02.973902 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:23:02.975769 kubelet[2472]: E1101 00:23:02.975728 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:23:03.974425 kubelet[2472]: E1101 00:23:03.974383 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:23:07.973922 kubelet[2472]: E1101 00:23:07.973874 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:23:08.974713 kubelet[2472]: E1101 00:23:08.974521 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:23:09.621398 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.BKvtR1.mount: Deactivated successfully. Nov 1 00:23:11.973415 kubelet[2472]: E1101 00:23:11.973370 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:23:12.974411 kubelet[2472]: E1101 00:23:12.974365 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:23:13.973778 kubelet[2472]: E1101 00:23:13.973737 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:23:14.975207 kubelet[2472]: E1101 00:23:14.975160 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:23:17.974476 kubelet[2472]: E1101 00:23:17.974407 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:23:22.974555 kubelet[2472]: E1101 00:23:22.974505 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:23:22.974972 kubelet[2472]: E1101 00:23:22.974607 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:23:22.975165 kubelet[2472]: E1101 00:23:22.975136 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:23:23.974529 kubelet[2472]: E1101 00:23:23.974480 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:23:25.973760 kubelet[2472]: E1101 00:23:25.973715 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:23:28.974012 kubelet[2472]: E1101 00:23:28.973964 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:23:30.973730 kubelet[2472]: E1101 00:23:30.973669 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:23:33.973652 kubelet[2472]: E1101 00:23:33.973612 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:23:34.975108 kubelet[2472]: E1101 00:23:34.975070 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:23:34.980167 kubelet[2472]: E1101 00:23:34.975539 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:23:36.975790 env[1484]: time="2025-11-01T00:23:36.975364901Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\"" Nov 1 00:23:36.976168 kubelet[2472]: E1101 00:23:36.976128 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:23:37.250795 env[1484]: time="2025-11-01T00:23:37.250666872Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:37.254425 env[1484]: time="2025-11-01T00:23:37.254358431Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" Nov 1 00:23:37.254701 kubelet[2472]: E1101 00:23:37.254664 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:23:37.254809 kubelet[2472]: E1101 00:23:37.254793 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker:v3.30.4" Nov 1 00:23:37.255029 kubelet[2472]: E1101 00:23:37.254993 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.4,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:a5df3952c76546deb3fcde5c311cc6b2,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.4\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:37.257362 env[1484]: time="2025-11-01T00:23:37.257174031Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\"" Nov 1 00:23:37.497318 env[1484]: time="2025-11-01T00:23:37.497260166Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:37.501243 env[1484]: time="2025-11-01T00:23:37.501122725Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" Nov 1 00:23:37.501763 kubelet[2472]: E1101 00:23:37.501391 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:23:37.501763 kubelet[2472]: E1101 00:23:37.501457 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.4" Nov 1 00:23:37.501763 kubelet[2472]: E1101 00:23:37.501581 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-dtpvt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-699c84b798-wfdq5_calico-system(b3f59ccf-7740-48c7-b885-21ec60ac189d): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:37.502997 kubelet[2472]: E1101 00:23:37.502944 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:23:39.621531 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.8g3LuA.mount: Deactivated successfully. Nov 1 00:23:42.974100 env[1484]: time="2025-11-01T00:23:42.974052822Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\"" Nov 1 00:23:43.196411 env[1484]: time="2025-11-01T00:23:43.196355208Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:43.201416 env[1484]: time="2025-11-01T00:23:43.201341527Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" Nov 1 00:23:43.201710 kubelet[2472]: E1101 00:23:43.201673 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:23:43.202084 kubelet[2472]: E1101 00:23:43.202060 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" image="ghcr.io/flatcar/calico/kube-controllers:v3.30.4" Nov 1 00:23:43.202362 kubelet[2472]: E1101 00:23:43.202311 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-kube-controllers,Image:ghcr.io/flatcar/calico/kube-controllers:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:KUBE_CONTROLLERS_CONFIG_NAME,Value:default,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:ENABLED_CONTROLLERS,Value:node,loadbalancer,ValueFrom:nil,},EnvVar{Name:DISABLE_KUBE_CONTROLLERS_CONFIG_API,Value:false,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:CA_CRT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:tigera-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/cert.pem,SubPath:ca-bundle.crt,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-w4q4m,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:10,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*999,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-kube-controllers-65fdfb6775-jq5nz_calico-system(d0c030a0-2978-427b-aeca-01939df97b98): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:43.203764 kubelet[2472]: E1101 00:23:43.203720 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:23:43.974104 env[1484]: time="2025-11-01T00:23:43.974052360Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:23:44.229247 env[1484]: time="2025-11-01T00:23:44.228981426Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:44.232467 env[1484]: time="2025-11-01T00:23:44.232338026Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:23:44.232810 kubelet[2472]: E1101 00:23:44.232759 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:44.233119 kubelet[2472]: E1101 00:23:44.232816 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:44.233119 kubelet[2472]: E1101 00:23:44.232954 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-bxzq8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-6d574c4f5b-j8zsj_calico-apiserver(06d0dc32-8772-475c-a553-c9602f03c588): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:44.234411 kubelet[2472]: E1101 00:23:44.234353 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:23:44.974388 env[1484]: time="2025-11-01T00:23:44.974350465Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:23:45.204511 env[1484]: time="2025-11-01T00:23:45.204451174Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:45.207925 env[1484]: time="2025-11-01T00:23:45.207826334Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:23:45.208197 kubelet[2472]: E1101 00:23:45.208155 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:45.208309 kubelet[2472]: E1101 00:23:45.208291 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:45.208537 kubelet[2472]: E1101 00:23:45.208495 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5mbsm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-xbgdv_calico-apiserver(325cca53-bb7c-48f5-b2f1-432375aa7e1f): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:45.209969 kubelet[2472]: E1101 00:23:45.209915 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:23:45.974000 env[1484]: time="2025-11-01T00:23:45.973946177Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\"" Nov 1 00:23:46.211844 env[1484]: time="2025-11-01T00:23:46.211794688Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:46.215506 env[1484]: time="2025-11-01T00:23:46.215425847Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" Nov 1 00:23:46.216441 kubelet[2472]: E1101 00:23:46.215853 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:23:46.216441 kubelet[2472]: E1101 00:23:46.215944 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" image="ghcr.io/flatcar/calico/goldmane:v3.30.4" Nov 1 00:23:46.216441 kubelet[2472]: E1101 00:23:46.216075 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-nkq4j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-666569f655-6fknv_calico-system(e9955b10-5b47-461a-b3ab-955ce4c39730): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.4\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:46.217591 kubelet[2472]: E1101 00:23:46.217539 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:23:47.974446 kubelet[2472]: E1101 00:23:47.974238 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:23:48.975399 env[1484]: time="2025-11-01T00:23:48.975135873Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\"" Nov 1 00:23:49.205835 env[1484]: time="2025-11-01T00:23:49.205779908Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:49.215696 env[1484]: time="2025-11-01T00:23:49.215640108Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" Nov 1 00:23:49.216102 kubelet[2472]: E1101 00:23:49.216048 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:23:49.216377 kubelet[2472]: E1101 00:23:49.216111 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" image="ghcr.io/flatcar/calico/csi:v3.30.4" Nov 1 00:23:49.216377 kubelet[2472]: E1101 00:23:49.216245 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-csi,Image:ghcr.io/flatcar/calico/csi:v3.30.4,Command:[],Args:[--nodeid=$(KUBE_NODE_NAME) --loglevel=$(LOG_LEVEL)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:warn,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubelet-dir,ReadOnly:false,MountPath:/var/lib/kubelet,SubPath:,MountPropagation:*Bidirectional,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:varrun,ReadOnly:false,MountPath:/var/run,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/csi:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/csi:v3.30.4\": ghcr.io/flatcar/calico/csi:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:49.218430 env[1484]: time="2025-11-01T00:23:49.218396228Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\"" Nov 1 00:23:49.450221 env[1484]: time="2025-11-01T00:23:49.450168222Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:49.453474 env[1484]: time="2025-11-01T00:23:49.453430342Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" Nov 1 00:23:49.453712 kubelet[2472]: E1101 00:23:49.453674 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:23:49.453820 kubelet[2472]: E1101 00:23:49.453804 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" image="ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4" Nov 1 00:23:49.454027 kubelet[2472]: E1101 00:23:49.453988 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:csi-node-driver-registrar,Image:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4,Command:[],Args:[--v=5 --csi-address=$(ADDRESS) --kubelet-registration-path=$(DRIVER_REG_SOCK_PATH)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ADDRESS,Value:/csi/csi.sock,ValueFrom:nil,},EnvVar{Name:DRIVER_REG_SOCK_PATH,Value:/var/lib/kubelet/plugins/csi.tigera.io/csi.sock,ValueFrom:nil,},EnvVar{Name:KUBE_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:registration-dir,ReadOnly:false,MountPath:/registration,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:socket-dir,ReadOnly:false,MountPath:/csi,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-c579n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*true,SELinuxOptions:nil,RunAsUser:*0,RunAsNonRoot:*false,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*true,RunAsGroup:*0,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod csi-node-driver-fns4p_calico-system(864706af-b74b-4daa-9415-eca81f18da43): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:49.455310 kubelet[2472]: E1101 00:23:49.455272 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:23:49.974424 env[1484]: time="2025-11-01T00:23:49.974385291Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\"" Nov 1 00:23:50.205213 env[1484]: time="2025-11-01T00:23:50.205155807Z" level=info msg="trying next host - response was http.StatusNotFound" host=ghcr.io Nov 1 00:23:50.209952 env[1484]: time="2025-11-01T00:23:50.209877127Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.4\" failed" error="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" Nov 1 00:23:50.210184 kubelet[2472]: E1101 00:23:50.210144 2472 log.go:32] "PullImage from image service failed" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:50.210243 kubelet[2472]: E1101 00:23:50.210206 2472 kuberuntime_image.go:55] "Failed to pull image" err="rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" image="ghcr.io/flatcar/calico/apiserver:v3.30.4" Nov 1 00:23:50.210742 kubelet[2472]: E1101 00:23:50.210334 2472 kuberuntime_manager.go:1341] "Unhandled Error" err="container &Container{Name:calico-apiserver,Image:ghcr.io/flatcar/calico/apiserver:v3.30.4,Command:[],Args:[--secure-port=5443 --tls-private-key-file=/calico-apiserver-certs/tls.key --tls-cert-file=/calico-apiserver-certs/tls.crt],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_HOST,Value:10.96.0.1,ValueFrom:nil,},EnvVar{Name:KUBERNETES_SERVICE_PORT,Value:443,ValueFrom:nil,},EnvVar{Name:LOG_LEVEL,Value:info,ValueFrom:nil,},EnvVar{Name:MULTI_INTERFACE_MODE,Value:none,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:calico-apiserver-certs,ReadOnly:true,MountPath:/calico-apiserver-certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-9pxrj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{0 5443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod calico-apiserver-856fdb46cd-n8gjk_calico-apiserver(2e8a69dd-776a-4945-85af-d19c382f23d2): ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": failed to resolve reference \"ghcr.io/flatcar/calico/apiserver:v3.30.4\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found" logger="UnhandledError" Nov 1 00:23:50.212036 kubelet[2472]: E1101 00:23:50.212007 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ErrImagePull: \"rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:23:50.378000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.384520 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:23:50.384643 kernel: audit: type=1400 audit(1761956630.378:1395): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.378000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400eee41e0 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.434282 kernel: audit: type=1300 audit(1761956630.378:1395): arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400eee41e0 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.458399 kernel: audit: type=1327 audit(1761956630.378:1395): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.378000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.481531 kernel: audit: type=1400 audit(1761956630.378:1396): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.481710 kernel: audit: type=1300 audit(1761956630.378:1396): arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400eee4450 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.378000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400eee4450 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.536700 kernel: audit: type=1327 audit(1761956630.378:1396): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.536844 kernel: audit: type=1400 audit(1761956630.394:1397): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.394000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.394000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=4009d90000 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.594548 kernel: audit: type=1300 audit(1761956630.394:1397): arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=4009d90000 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.394000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.399000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.641918 kernel: audit: type=1327 audit(1761956630.394:1397): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.642099 kernel: audit: type=1400 audit(1761956630.399:1398): avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.399000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400e2bd080 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.399000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.399000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=4009d90510 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:50.399000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:50.399000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=66 a1=400e2bd0a0 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:23:50.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:23:51.050000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:51.050000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:51.050000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400222a500 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:51.050000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:51.050000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40020700c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:51.050000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:54.974359 kubelet[2472]: E1101 00:23:54.974321 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:23:57.973920 kubelet[2472]: E1101 00:23:57.973861 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:23:58.684000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.690225 kernel: kauditd_printk_skb: 14 callbacks suppressed Nov 1 00:23:58.690376 kernel: audit: type=1400 audit(1761956638.684:1403): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.684000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400222b480 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:58.745139 kernel: audit: type=1300 audit(1761956638.684:1403): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400222b480 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:58.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:58.770589 kernel: audit: type=1327 audit(1761956638.684:1403): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:58.684000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.793644 kernel: audit: type=1400 audit(1761956638.684:1404): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.793826 kernel: audit: type=1300 audit(1761956638.684:1404): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40003d6760 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:58.684000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40003d6760 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:58.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:58.849964 kernel: audit: type=1327 audit(1761956638.684:1404): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:58.692000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.873909 kernel: audit: type=1400 audit(1761956638.692:1405): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.874081 kernel: audit: type=1300 audit(1761956638.692:1405): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400222ba40 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:58.692000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400222ba40 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:58.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:58.930352 kernel: audit: type=1327 audit(1761956638.692:1405): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:58.930498 kernel: audit: type=1400 audit(1761956638.699:1406): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.699000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:23:58.699000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400222bbe0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:23:58.699000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:23:59.973937 kubelet[2472]: E1101 00:23:59.973901 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:24:00.976852 kubelet[2472]: E1101 00:24:00.976814 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:24:00.977661 kubelet[2472]: E1101 00:24:00.977621 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:24:02.975738 kubelet[2472]: E1101 00:24:02.975696 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:24:02.977010 kubelet[2472]: E1101 00:24:02.976979 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:24:08.974166 kubelet[2472]: E1101 00:24:08.974127 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:24:09.628332 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.FygIGl.mount: Deactivated successfully. Nov 1 00:24:11.974531 kubelet[2472]: E1101 00:24:11.974494 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:24:12.975740 kubelet[2472]: E1101 00:24:12.975702 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:24:13.974476 kubelet[2472]: E1101 00:24:13.974424 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:24:14.978338 kubelet[2472]: E1101 00:24:14.978283 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:24:15.224362 systemd[1]: Started sshd@7-10.200.20.24:22-10.200.16.10:59014.service. Nov 1 00:24:15.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.24:22-10.200.16.10:59014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:15.230692 kernel: kauditd_printk_skb: 2 callbacks suppressed Nov 1 00:24:15.230842 kernel: audit: type=1130 audit(1761956655.224:1407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.24:22-10.200.16.10:59014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:15.668044 sshd[5647]: Accepted publickey for core from 10.200.16.10 port 59014 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:15.667000 audit[5647]: USER_ACCT pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.692545 sshd[5647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:15.698450 systemd-logind[1464]: New session 10 of user core. Nov 1 00:24:15.699526 systemd[1]: Started session-10.scope. Nov 1 00:24:15.691000 audit[5647]: CRED_ACQ pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.727239 kernel: audit: type=1101 audit(1761956655.667:1408): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.727397 kernel: audit: type=1103 audit(1761956655.691:1409): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.748627 kernel: audit: type=1006 audit(1761956655.691:1410): pid=5647 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Nov 1 00:24:15.691000 audit[5647]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccbc18b0 a2=3 a3=1 items=0 ppid=1 pid=5647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:15.772403 kernel: audit: type=1300 audit(1761956655.691:1410): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccbc18b0 a2=3 a3=1 items=0 ppid=1 pid=5647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:15.691000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:15.781938 kernel: audit: type=1327 audit(1761956655.691:1410): proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:15.704000 audit[5647]: USER_START pid=5647 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.808556 kernel: audit: type=1105 audit(1761956655.704:1411): pid=5647 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.727000 audit[5649]: CRED_ACQ pid=5649 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.836083 kernel: audit: type=1103 audit(1761956655.727:1412): pid=5649 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:15.974319 kubelet[2472]: E1101 00:24:15.974209 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:24:15.980668 kubelet[2472]: E1101 00:24:15.980354 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:24:16.123189 sshd[5647]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:16.124000 audit[5647]: USER_END pid=5647 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:16.127180 systemd-logind[1464]: Session 10 logged out. Waiting for processes to exit. Nov 1 00:24:16.153747 systemd[1]: sshd@7-10.200.20.24:22-10.200.16.10:59014.service: Deactivated successfully. Nov 1 00:24:16.154648 systemd[1]: session-10.scope: Deactivated successfully. Nov 1 00:24:16.156279 systemd-logind[1464]: Removed session 10. Nov 1 00:24:16.124000 audit[5647]: CRED_DISP pid=5647 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:16.185634 kernel: audit: type=1106 audit(1761956656.124:1413): pid=5647 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:16.185792 kernel: audit: type=1104 audit(1761956656.124:1414): pid=5647 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:16.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.24:22-10.200.16.10:59014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:19.974261 kubelet[2472]: E1101 00:24:19.974212 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:24:21.193640 systemd[1]: Started sshd@8-10.200.20.24:22-10.200.16.10:53356.service. Nov 1 00:24:21.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.24:22-10.200.16.10:53356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:21.204158 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:24:21.204296 kernel: audit: type=1130 audit(1761956661.198:1416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.24:22-10.200.16.10:53356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:21.629000 audit[5661]: USER_ACCT pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:21.630814 sshd[5661]: Accepted publickey for core from 10.200.16.10 port 53356 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:21.632761 sshd[5661]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:21.631000 audit[5661]: CRED_ACQ pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:21.681899 kernel: audit: type=1101 audit(1761956661.629:1417): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:21.682043 kernel: audit: type=1103 audit(1761956661.631:1418): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:21.697711 kernel: audit: type=1006 audit(1761956661.631:1419): pid=5661 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Nov 1 00:24:21.631000 audit[5661]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeba62b80 a2=3 a3=1 items=0 ppid=1 pid=5661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:21.701599 systemd[1]: Started session-11.scope. Nov 1 00:24:21.703768 systemd-logind[1464]: New session 11 of user core. Nov 1 00:24:21.721322 kernel: audit: type=1300 audit(1761956661.631:1419): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeba62b80 a2=3 a3=1 items=0 ppid=1 pid=5661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:21.631000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:21.733294 kernel: audit: type=1327 audit(1761956661.631:1419): proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:21.710000 audit[5661]: USER_START pid=5661 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:21.761341 kernel: audit: type=1105 audit(1761956661.710:1420): pid=5661 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:21.722000 audit[5663]: CRED_ACQ pid=5663 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:21.784777 kernel: audit: type=1103 audit(1761956661.722:1421): pid=5663 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:22.103291 sshd[5661]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:22.103000 audit[5661]: USER_END pid=5661 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:22.111274 systemd[1]: sshd@8-10.200.20.24:22-10.200.16.10:53356.service: Deactivated successfully. Nov 1 00:24:22.112992 systemd[1]: session-11.scope: Deactivated successfully. Nov 1 00:24:22.113995 systemd-logind[1464]: Session 11 logged out. Waiting for processes to exit. Nov 1 00:24:22.115013 systemd-logind[1464]: Removed session 11. Nov 1 00:24:22.136922 kernel: audit: type=1106 audit(1761956662.103:1422): pid=5661 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:22.137072 kernel: audit: type=1104 audit(1761956662.103:1423): pid=5661 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:22.103000 audit[5661]: CRED_DISP pid=5661 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:22.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.24:22-10.200.16.10:53356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:24.976610 kubelet[2472]: E1101 00:24:24.976566 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:24:24.977096 kubelet[2472]: E1101 00:24:24.976756 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:24:25.973593 kubelet[2472]: E1101 00:24:25.973538 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:24:27.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.24:22-10.200.16.10:53364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:27.175514 systemd[1]: Started sshd@9-10.200.20.24:22-10.200.16.10:53364.service. Nov 1 00:24:27.181208 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:24:27.181334 kernel: audit: type=1130 audit(1761956667.174:1425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.24:22-10.200.16.10:53364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:27.593114 sshd[5675]: Accepted publickey for core from 10.200.16.10 port 53364 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:27.592000 audit[5675]: USER_ACCT pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.620477 sshd[5675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:27.625186 systemd[1]: Started session-12.scope. Nov 1 00:24:27.626804 systemd-logind[1464]: New session 12 of user core. Nov 1 00:24:27.619000 audit[5675]: CRED_ACQ pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.664206 kernel: audit: type=1101 audit(1761956667.592:1426): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.664319 kernel: audit: type=1103 audit(1761956667.619:1427): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.694047 kernel: audit: type=1006 audit(1761956667.619:1428): pid=5675 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Nov 1 00:24:27.619000 audit[5675]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea3181b0 a2=3 a3=1 items=0 ppid=1 pid=5675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:27.726134 kernel: audit: type=1300 audit(1761956667.619:1428): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea3181b0 a2=3 a3=1 items=0 ppid=1 pid=5675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:27.619000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:27.737510 kernel: audit: type=1327 audit(1761956667.619:1428): proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:27.632000 audit[5675]: USER_START pid=5675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.634000 audit[5677]: CRED_ACQ pid=5677 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.793878 kernel: audit: type=1105 audit(1761956667.632:1429): pid=5675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.794007 kernel: audit: type=1103 audit(1761956667.634:1430): pid=5677 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:27.976001 kubelet[2472]: E1101 00:24:27.975845 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:24:27.976648 kubelet[2472]: E1101 00:24:27.976463 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:24:28.009947 sshd[5675]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:28.010000 audit[5675]: USER_END pid=5675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:28.015751 systemd[1]: sshd@9-10.200.20.24:22-10.200.16.10:53364.service: Deactivated successfully. Nov 1 00:24:28.017317 systemd[1]: session-12.scope: Deactivated successfully. Nov 1 00:24:28.017870 systemd-logind[1464]: Session 12 logged out. Waiting for processes to exit. Nov 1 00:24:28.018989 systemd-logind[1464]: Removed session 12. Nov 1 00:24:28.010000 audit[5675]: CRED_DISP pid=5675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:28.064028 kernel: audit: type=1106 audit(1761956668.010:1431): pid=5675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:28.064189 kernel: audit: type=1104 audit(1761956668.010:1432): pid=5675 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:28.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.24:22-10.200.16.10:53364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:30.973996 kubelet[2472]: E1101 00:24:30.973927 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:24:32.973900 kubelet[2472]: E1101 00:24:32.973841 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:24:33.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.24:22-10.200.16.10:43184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:33.080431 systemd[1]: Started sshd@10-10.200.20.24:22-10.200.16.10:43184.service. Nov 1 00:24:33.086273 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:24:33.086397 kernel: audit: type=1130 audit(1761956673.079:1434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.24:22-10.200.16.10:43184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:33.515000 audit[5690]: USER_ACCT pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:33.516380 sshd[5690]: Accepted publickey for core from 10.200.16.10 port 43184 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:33.518240 sshd[5690]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:33.515000 audit[5690]: CRED_ACQ pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:33.562245 kernel: audit: type=1101 audit(1761956673.515:1435): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:33.562400 kernel: audit: type=1103 audit(1761956673.515:1436): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:33.576572 kernel: audit: type=1006 audit(1761956673.515:1437): pid=5690 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Nov 1 00:24:33.515000 audit[5690]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed3791f0 a2=3 a3=1 items=0 ppid=1 pid=5690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:33.602147 kernel: audit: type=1300 audit(1761956673.515:1437): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed3791f0 a2=3 a3=1 items=0 ppid=1 pid=5690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:33.580497 systemd[1]: Started session-13.scope. Nov 1 00:24:33.602429 systemd-logind[1464]: New session 13 of user core. Nov 1 00:24:33.515000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:33.611154 kernel: audit: type=1327 audit(1761956673.515:1437): proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:33.614000 audit[5690]: USER_START pid=5690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:33.641000 audit[5692]: CRED_ACQ pid=5692 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:33.642990 kernel: audit: type=1105 audit(1761956673.614:1438): pid=5690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:33.663952 kernel: audit: type=1103 audit(1761956673.641:1439): pid=5692 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.010701 sshd[5690]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:34.011000 audit[5690]: USER_END pid=5690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.014254 systemd[1]: sshd@10-10.200.20.24:22-10.200.16.10:43184.service: Deactivated successfully. Nov 1 00:24:34.015116 systemd[1]: session-13.scope: Deactivated successfully. Nov 1 00:24:34.038514 systemd-logind[1464]: Session 13 logged out. Waiting for processes to exit. Nov 1 00:24:34.011000 audit[5690]: CRED_DISP pid=5690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.059715 kernel: audit: type=1106 audit(1761956674.011:1440): pid=5690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.059847 kernel: audit: type=1104 audit(1761956674.011:1441): pid=5690 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.059821 systemd-logind[1464]: Removed session 13. Nov 1 00:24:34.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.24:22-10.200.16.10:43184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:34.081086 systemd[1]: Started sshd@11-10.200.20.24:22-10.200.16.10:43198.service. Nov 1 00:24:34.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.24:22-10.200.16.10:43198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:34.495000 audit[5703]: USER_ACCT pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.497202 sshd[5703]: Accepted publickey for core from 10.200.16.10 port 43198 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:34.496000 audit[5703]: CRED_ACQ pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.496000 audit[5703]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff630d4c0 a2=3 a3=1 items=0 ppid=1 pid=5703 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:34.496000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:34.497964 sshd[5703]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:34.503104 systemd[1]: Started session-14.scope. Nov 1 00:24:34.503634 systemd-logind[1464]: New session 14 of user core. Nov 1 00:24:34.507000 audit[5703]: USER_START pid=5703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.509000 audit[5705]: CRED_ACQ pid=5705 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.974828 sshd[5703]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:34.975000 audit[5703]: USER_END pid=5703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.975000 audit[5703]: CRED_DISP pid=5703 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:34.977603 systemd[1]: session-14.scope: Deactivated successfully. Nov 1 00:24:34.978729 systemd-logind[1464]: Session 14 logged out. Waiting for processes to exit. Nov 1 00:24:34.978820 systemd[1]: sshd@11-10.200.20.24:22-10.200.16.10:43198.service: Deactivated successfully. Nov 1 00:24:34.979992 systemd-logind[1464]: Removed session 14. Nov 1 00:24:34.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.24:22-10.200.16.10:43198 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:35.041890 systemd[1]: Started sshd@12-10.200.20.24:22-10.200.16.10:43212.service. Nov 1 00:24:35.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.24:22-10.200.16.10:43212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:35.456157 sshd[5713]: Accepted publickey for core from 10.200.16.10 port 43212 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:35.455000 audit[5713]: USER_ACCT pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:35.457805 sshd[5713]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:35.456000 audit[5713]: CRED_ACQ pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:35.456000 audit[5713]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1e77060 a2=3 a3=1 items=0 ppid=1 pid=5713 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:35.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:35.463248 systemd-logind[1464]: New session 15 of user core. Nov 1 00:24:35.463877 systemd[1]: Started session-15.scope. Nov 1 00:24:35.469000 audit[5713]: USER_START pid=5713 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:35.471000 audit[5715]: CRED_ACQ pid=5715 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:35.853661 sshd[5713]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:35.853000 audit[5713]: USER_END pid=5713 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:35.853000 audit[5713]: CRED_DISP pid=5713 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:35.856707 systemd-logind[1464]: Session 15 logged out. Waiting for processes to exit. Nov 1 00:24:35.856963 systemd[1]: sshd@12-10.200.20.24:22-10.200.16.10:43212.service: Deactivated successfully. Nov 1 00:24:35.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.24:22-10.200.16.10:43212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:35.857701 systemd[1]: session-15.scope: Deactivated successfully. Nov 1 00:24:35.858409 systemd-logind[1464]: Removed session 15. Nov 1 00:24:35.974020 kubelet[2472]: E1101 00:24:35.973973 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:24:38.975877 kubelet[2472]: E1101 00:24:38.975807 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:24:38.976890 kubelet[2472]: E1101 00:24:38.976829 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:24:39.973850 kubelet[2472]: E1101 00:24:39.973812 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:24:40.921798 systemd[1]: Started sshd@13-10.200.20.24:22-10.200.16.10:35510.service. Nov 1 00:24:40.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.24:22-10.200.16.10:35510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:40.927979 kernel: kauditd_printk_skb: 23 callbacks suppressed Nov 1 00:24:40.928127 kernel: audit: type=1130 audit(1761956680.921:1461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.24:22-10.200.16.10:35510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:41.356000 audit[5751]: USER_ACCT pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.362141 sshd[5751]: Accepted publickey for core from 10.200.16.10 port 35510 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:41.362000 audit[5751]: CRED_ACQ pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.383545 sshd[5751]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:41.403188 kernel: audit: type=1101 audit(1761956681.356:1462): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.403347 kernel: audit: type=1103 audit(1761956681.362:1463): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.409784 systemd-logind[1464]: New session 16 of user core. Nov 1 00:24:41.410282 systemd[1]: Started session-16.scope. Nov 1 00:24:41.424844 kernel: audit: type=1006 audit(1761956681.362:1464): pid=5751 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Nov 1 00:24:41.362000 audit[5751]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff45d9090 a2=3 a3=1 items=0 ppid=1 pid=5751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:41.456955 kernel: audit: type=1300 audit(1761956681.362:1464): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff45d9090 a2=3 a3=1 items=0 ppid=1 pid=5751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:41.362000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:41.474234 kernel: audit: type=1327 audit(1761956681.362:1464): proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:41.428000 audit[5751]: USER_START pid=5751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.509503 kernel: audit: type=1105 audit(1761956681.428:1465): pid=5751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.429000 audit[5753]: CRED_ACQ pid=5753 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.546466 kernel: audit: type=1103 audit(1761956681.429:1466): pid=5753 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.785115 sshd[5751]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:41.785000 audit[5751]: USER_END pid=5751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.815209 systemd-logind[1464]: Session 16 logged out. Waiting for processes to exit. Nov 1 00:24:41.816105 systemd[1]: sshd@13-10.200.20.24:22-10.200.16.10:35510.service: Deactivated successfully. Nov 1 00:24:41.816932 systemd[1]: session-16.scope: Deactivated successfully. Nov 1 00:24:41.785000 audit[5751]: CRED_DISP pid=5751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.839935 kernel: audit: type=1106 audit(1761956681.785:1467): pid=5751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.840030 kernel: audit: type=1104 audit(1761956681.785:1468): pid=5751 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:41.839633 systemd-logind[1464]: Removed session 16. Nov 1 00:24:41.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.24:22-10.200.16.10:35510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:41.974228 kubelet[2472]: E1101 00:24:41.974163 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:24:43.974866 kubelet[2472]: E1101 00:24:43.974810 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:24:44.976049 kubelet[2472]: E1101 00:24:44.975960 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:24:46.855604 systemd[1]: Started sshd@14-10.200.20.24:22-10.200.16.10:35524.service. Nov 1 00:24:46.884924 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:24:46.885059 kernel: audit: type=1130 audit(1761956686.854:1470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.24:22-10.200.16.10:35524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:46.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.24:22-10.200.16.10:35524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:46.975892 kubelet[2472]: E1101 00:24:46.975835 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:24:47.263000 audit[5763]: USER_ACCT pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.265228 sshd[5763]: Accepted publickey for core from 10.200.16.10 port 35524 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:47.292000 audit[5763]: CRED_ACQ pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.293776 sshd[5763]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:47.316912 kernel: audit: type=1101 audit(1761956687.263:1471): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.317121 kernel: audit: type=1103 audit(1761956687.292:1472): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.332075 kernel: audit: type=1006 audit(1761956687.292:1473): pid=5763 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Nov 1 00:24:47.292000 audit[5763]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdb6b740 a2=3 a3=1 items=0 ppid=1 pid=5763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:47.358190 kernel: audit: type=1300 audit(1761956687.292:1473): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdb6b740 a2=3 a3=1 items=0 ppid=1 pid=5763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:47.292000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:47.367137 kernel: audit: type=1327 audit(1761956687.292:1473): proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:47.371043 systemd-logind[1464]: New session 17 of user core. Nov 1 00:24:47.371666 systemd[1]: Started session-17.scope. Nov 1 00:24:47.375000 audit[5763]: USER_START pid=5763 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.378000 audit[5765]: CRED_ACQ pid=5765 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.426997 kernel: audit: type=1105 audit(1761956687.375:1474): pid=5763 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.427122 kernel: audit: type=1103 audit(1761956687.378:1475): pid=5765 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.710475 sshd[5763]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:47.710000 audit[5763]: USER_END pid=5763 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.713526 systemd[1]: session-17.scope: Deactivated successfully. Nov 1 00:24:47.714213 systemd[1]: sshd@14-10.200.20.24:22-10.200.16.10:35524.service: Deactivated successfully. Nov 1 00:24:47.710000 audit[5763]: CRED_DISP pid=5763 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.739547 systemd-logind[1464]: Session 17 logged out. Waiting for processes to exit. Nov 1 00:24:47.762052 kernel: audit: type=1106 audit(1761956687.710:1476): pid=5763 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.762210 kernel: audit: type=1104 audit(1761956687.710:1477): pid=5763 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:47.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.24:22-10.200.16.10:35524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:47.762822 systemd-logind[1464]: Removed session 17. Nov 1 00:24:50.379000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=522487 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:50.379000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400a745e00 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:24:50.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:24:50.381000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:50.381000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4005985f80 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:24:50.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:24:50.396000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=522493 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:50.396000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400a684240 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:24:50.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:24:50.401000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:50.401000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400a9b5420 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:24:50.401000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:24:50.401000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:50.401000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=400a9b5440 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:24:50.401000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:24:50.401000 audit[2299]: AVC avc: denied { watch } for pid=2299 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:50.401000 audit[2299]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4003164d50 a2=fc6 a3=0 items=0 ppid=2158 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c141,c914 key=(null) Nov 1 00:24:50.401000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3234002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Nov 1 00:24:51.050000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:51.050000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002ab9080 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:51.050000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:51.051000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=522491 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:51.051000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001f2d800 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:51.051000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:51.973682 kubelet[2472]: E1101 00:24:51.973627 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:24:51.975722 kubelet[2472]: E1101 00:24:51.975663 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:24:52.777521 systemd[1]: Started sshd@15-10.200.20.24:22-10.200.16.10:57978.service. Nov 1 00:24:52.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.24:22-10.200.16.10:57978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:52.782978 kernel: kauditd_printk_skb: 25 callbacks suppressed Nov 1 00:24:52.783134 kernel: audit: type=1130 audit(1761956692.776:1487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.24:22-10.200.16.10:57978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:53.210000 audit[5774]: USER_ACCT pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.213221 sshd[5774]: Accepted publickey for core from 10.200.16.10 port 57978 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:53.238819 sshd[5774]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:53.237000 audit[5774]: CRED_ACQ pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.260991 kernel: audit: type=1101 audit(1761956693.210:1488): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.261188 kernel: audit: type=1103 audit(1761956693.237:1489): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.275982 kernel: audit: type=1006 audit(1761956693.237:1490): pid=5774 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Nov 1 00:24:53.237000 audit[5774]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4c995e0 a2=3 a3=1 items=0 ppid=1 pid=5774 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:53.300706 kernel: audit: type=1300 audit(1761956693.237:1490): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4c995e0 a2=3 a3=1 items=0 ppid=1 pid=5774 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:53.302085 systemd[1]: Started session-18.scope. Nov 1 00:24:53.302783 systemd-logind[1464]: New session 18 of user core. Nov 1 00:24:53.237000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:53.311934 kernel: audit: type=1327 audit(1761956693.237:1490): proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:53.317000 audit[5774]: USER_START pid=5774 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.317000 audit[5776]: CRED_ACQ pid=5776 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.366654 kernel: audit: type=1105 audit(1761956693.317:1491): pid=5774 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.366758 kernel: audit: type=1103 audit(1761956693.317:1492): pid=5776 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.654226 sshd[5774]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:53.654000 audit[5774]: USER_END pid=5774 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.658266 systemd[1]: sshd@15-10.200.20.24:22-10.200.16.10:57978.service: Deactivated successfully. Nov 1 00:24:53.659306 systemd[1]: session-18.scope: Deactivated successfully. Nov 1 00:24:53.660731 systemd-logind[1464]: Session 18 logged out. Waiting for processes to exit. Nov 1 00:24:53.661656 systemd-logind[1464]: Removed session 18. Nov 1 00:24:53.654000 audit[5774]: CRED_DISP pid=5774 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.708244 kernel: audit: type=1106 audit(1761956693.654:1493): pid=5774 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.708386 kernel: audit: type=1104 audit(1761956693.654:1494): pid=5774 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:53.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.24:22-10.200.16.10:57978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:53.975173 kubelet[2472]: E1101 00:24:53.974570 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:24:54.974518 kubelet[2472]: E1101 00:24:54.974470 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:24:57.973994 kubelet[2472]: E1101 00:24:57.973917 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:24:57.974465 kubelet[2472]: E1101 00:24:57.974410 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:24:57.975181 kubelet[2472]: E1101 00:24:57.975144 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:24:58.684000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.690433 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:24:58.690584 kernel: audit: type=1400 audit(1761956698.684:1496): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.684000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6b480 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:58.742893 kernel: audit: type=1300 audit(1761956698.684:1496): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6b480 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:58.743336 systemd[1]: Started sshd@16-10.200.20.24:22-10.200.16.10:57994.service. Nov 1 00:24:58.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:58.777730 kernel: audit: type=1327 audit(1761956698.684:1496): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:58.685000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.809041 kernel: audit: type=1400 audit(1761956698.685:1497): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.685000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ab98c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:58.848913 kernel: audit: type=1300 audit(1761956698.685:1497): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002ab98c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:58.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:58.695000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.906966 kernel: audit: type=1327 audit(1761956698.685:1497): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:58.907123 kernel: audit: type=1400 audit(1761956698.695:1498): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.695000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002ab9be0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:58.944134 kernel: audit: type=1300 audit(1761956698.695:1498): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002ab9be0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:58.695000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:58.971687 kernel: audit: type=1327 audit(1761956698.695:1498): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:58.701000 audit[2339]: AVC avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.995796 kernel: audit: type=1400 audit(1761956698.701:1499): avc: denied { watch } for pid=2339 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=522485 scontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Nov 1 00:24:58.701000 audit[2339]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a6b4a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c399,c936 key=(null) Nov 1 00:24:58.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Nov 1 00:24:58.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.24:22-10.200.16.10:57994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:59.215000 audit[5788]: USER_ACCT pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:59.216255 sshd[5788]: Accepted publickey for core from 10.200.16.10 port 57994 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:24:59.216000 audit[5788]: CRED_ACQ pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:59.216000 audit[5788]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb1ad5c0 a2=3 a3=1 items=0 ppid=1 pid=5788 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:24:59.216000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:24:59.218119 sshd[5788]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:24:59.222957 systemd[1]: Started session-19.scope. Nov 1 00:24:59.223999 systemd-logind[1464]: New session 19 of user core. Nov 1 00:24:59.229000 audit[5788]: USER_START pid=5788 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:59.231000 audit[5790]: CRED_ACQ pid=5790 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:59.631564 sshd[5788]: pam_unix(sshd:session): session closed for user core Nov 1 00:24:59.631000 audit[5788]: USER_END pid=5788 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:59.631000 audit[5788]: CRED_DISP pid=5788 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:24:59.634502 systemd[1]: sshd@16-10.200.20.24:22-10.200.16.10:57994.service: Deactivated successfully. Nov 1 00:24:59.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.24:22-10.200.16.10:57994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:59.635383 systemd[1]: session-19.scope: Deactivated successfully. Nov 1 00:24:59.635982 systemd-logind[1464]: Session 19 logged out. Waiting for processes to exit. Nov 1 00:24:59.636820 systemd-logind[1464]: Removed session 19. Nov 1 00:24:59.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.24:22-10.200.16.10:58004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:24:59.703232 systemd[1]: Started sshd@17-10.200.20.24:22-10.200.16.10:58004.service. Nov 1 00:25:00.118056 sshd[5800]: Accepted publickey for core from 10.200.16.10 port 58004 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:00.117000 audit[5800]: USER_ACCT pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:00.118000 audit[5800]: CRED_ACQ pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:00.118000 audit[5800]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd457cfc0 a2=3 a3=1 items=0 ppid=1 pid=5800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:00.118000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:00.119865 sshd[5800]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:00.125956 systemd-logind[1464]: New session 20 of user core. Nov 1 00:25:00.126299 systemd[1]: Started session-20.scope. Nov 1 00:25:00.131000 audit[5800]: USER_START pid=5800 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:00.133000 audit[5802]: CRED_ACQ pid=5802 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:00.692021 sshd[5800]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:00.692000 audit[5800]: USER_END pid=5800 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:00.692000 audit[5800]: CRED_DISP pid=5800 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:00.695280 systemd-logind[1464]: Session 20 logged out. Waiting for processes to exit. Nov 1 00:25:00.695541 systemd[1]: sshd@17-10.200.20.24:22-10.200.16.10:58004.service: Deactivated successfully. Nov 1 00:25:00.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.24:22-10.200.16.10:58004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:00.696363 systemd[1]: session-20.scope: Deactivated successfully. Nov 1 00:25:00.697096 systemd-logind[1464]: Removed session 20. Nov 1 00:25:00.760538 systemd[1]: Started sshd@18-10.200.20.24:22-10.200.16.10:48156.service. Nov 1 00:25:00.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.24:22-10.200.16.10:48156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:01.173412 sshd[5810]: Accepted publickey for core from 10.200.16.10 port 48156 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:01.172000 audit[5810]: USER_ACCT pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:01.174000 audit[5810]: CRED_ACQ pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:01.174000 audit[5810]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe612b3d0 a2=3 a3=1 items=0 ppid=1 pid=5810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:01.174000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:01.175795 sshd[5810]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:01.180072 systemd-logind[1464]: New session 21 of user core. Nov 1 00:25:01.180619 systemd[1]: Started session-21.scope. Nov 1 00:25:01.185000 audit[5810]: USER_START pid=5810 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:01.186000 audit[5814]: CRED_ACQ pid=5814 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:02.110000 audit[5826]: NETFILTER_CFG table=filter:133 family=2 entries=26 op=nft_register_rule pid=5826 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:25:02.110000 audit[5826]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffce8295a0 a2=0 a3=1 items=0 ppid=2575 pid=5826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:02.110000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:25:02.118000 audit[5826]: NETFILTER_CFG table=nat:134 family=2 entries=20 op=nft_register_rule pid=5826 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:25:02.118000 audit[5826]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffce8295a0 a2=0 a3=1 items=0 ppid=2575 pid=5826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:02.118000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:25:02.167138 sshd[5810]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:02.167000 audit[5810]: USER_END pid=5810 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:02.167000 audit[5810]: CRED_DISP pid=5810 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:02.170354 systemd-logind[1464]: Session 21 logged out. Waiting for processes to exit. Nov 1 00:25:02.170612 systemd[1]: sshd@18-10.200.20.24:22-10.200.16.10:48156.service: Deactivated successfully. Nov 1 00:25:02.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.24:22-10.200.16.10:48156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:02.171426 systemd[1]: session-21.scope: Deactivated successfully. Nov 1 00:25:02.172554 systemd-logind[1464]: Removed session 21. Nov 1 00:25:02.236163 systemd[1]: Started sshd@19-10.200.20.24:22-10.200.16.10:48168.service. Nov 1 00:25:02.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.24:22-10.200.16.10:48168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:02.252000 audit[5831]: NETFILTER_CFG table=filter:135 family=2 entries=38 op=nft_register_rule pid=5831 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:25:02.252000 audit[5831]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14176 a0=3 a1=ffffdd4dac40 a2=0 a3=1 items=0 ppid=2575 pid=5831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:02.252000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:25:02.255000 audit[5831]: NETFILTER_CFG table=nat:136 family=2 entries=20 op=nft_register_rule pid=5831 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:25:02.255000 audit[5831]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5772 a0=3 a1=ffffdd4dac40 a2=0 a3=1 items=0 ppid=2575 pid=5831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:02.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:25:02.654000 audit[5830]: USER_ACCT pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:02.655773 sshd[5830]: Accepted publickey for core from 10.200.16.10 port 48168 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:02.655000 audit[5830]: CRED_ACQ pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:02.656000 audit[5830]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeaae6e50 a2=3 a3=1 items=0 ppid=1 pid=5830 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:02.656000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:02.657289 sshd[5830]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:02.661624 systemd-logind[1464]: New session 22 of user core. Nov 1 00:25:02.662172 systemd[1]: Started session-22.scope. Nov 1 00:25:02.666000 audit[5830]: USER_START pid=5830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:02.668000 audit[5833]: CRED_ACQ pid=5833 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:02.974483 kubelet[2472]: E1101 00:25:02.974008 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:25:03.252015 sshd[5830]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:03.253000 audit[5830]: USER_END pid=5830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.253000 audit[5830]: CRED_DISP pid=5830 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.255985 systemd[1]: sshd@19-10.200.20.24:22-10.200.16.10:48168.service: Deactivated successfully. Nov 1 00:25:03.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.24:22-10.200.16.10:48168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:03.256866 systemd[1]: session-22.scope: Deactivated successfully. Nov 1 00:25:03.257544 systemd-logind[1464]: Session 22 logged out. Waiting for processes to exit. Nov 1 00:25:03.258537 systemd-logind[1464]: Removed session 22. Nov 1 00:25:03.323863 systemd[1]: Started sshd@20-10.200.20.24:22-10.200.16.10:48174.service. Nov 1 00:25:03.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.24:22-10.200.16.10:48174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:03.733000 audit[5841]: USER_ACCT pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.735675 sshd[5841]: Accepted publickey for core from 10.200.16.10 port 48174 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:03.739806 kernel: kauditd_printk_skb: 59 callbacks suppressed Nov 1 00:25:03.739985 kernel: audit: type=1101 audit(1761956703.733:1541): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.754153 sshd[5841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:03.748000 audit[5841]: CRED_ACQ pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.785008 kernel: audit: type=1103 audit(1761956703.748:1542): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.799806 kernel: audit: type=1006 audit(1761956703.748:1543): pid=5841 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Nov 1 00:25:03.748000 audit[5841]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc50fcea0 a2=3 a3=1 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:03.824474 kernel: audit: type=1300 audit(1761956703.748:1543): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc50fcea0 a2=3 a3=1 items=0 ppid=1 pid=5841 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:03.825803 systemd-logind[1464]: New session 23 of user core. Nov 1 00:25:03.826205 systemd[1]: Started session-23.scope. Nov 1 00:25:03.748000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:03.835848 kernel: audit: type=1327 audit(1761956703.748:1543): proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:03.839000 audit[5841]: USER_START pid=5841 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.840000 audit[5843]: CRED_ACQ pid=5843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.888700 kernel: audit: type=1105 audit(1761956703.839:1544): pid=5841 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:03.888886 kernel: audit: type=1103 audit(1761956703.840:1545): pid=5843 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:04.220760 sshd[5841]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:04.221000 audit[5841]: USER_END pid=5841 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:04.223832 systemd[1]: session-23.scope: Deactivated successfully. Nov 1 00:25:04.224622 systemd[1]: sshd@20-10.200.20.24:22-10.200.16.10:48174.service: Deactivated successfully. Nov 1 00:25:04.221000 audit[5841]: CRED_DISP pid=5841 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:04.270853 kernel: audit: type=1106 audit(1761956704.221:1546): pid=5841 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:04.271032 kernel: audit: type=1104 audit(1761956704.221:1547): pid=5841 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:04.273224 systemd-logind[1464]: Session 23 logged out. Waiting for processes to exit. Nov 1 00:25:04.274270 systemd-logind[1464]: Removed session 23. Nov 1 00:25:04.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.24:22-10.200.16.10:48174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:04.302913 kernel: audit: type=1131 audit(1761956704.223:1548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.24:22-10.200.16.10:48174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:05.974863 kubelet[2472]: E1101 00:25:05.974814 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:25:05.975821 kubelet[2472]: E1101 00:25:05.975473 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:25:07.799000 audit[5853]: NETFILTER_CFG table=filter:137 family=2 entries=26 op=nft_register_rule pid=5853 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:25:07.799000 audit[5853]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd7d338c0 a2=0 a3=1 items=0 ppid=2575 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:07.799000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:25:07.804000 audit[5853]: NETFILTER_CFG table=nat:138 family=2 entries=104 op=nft_register_chain pid=5853 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Nov 1 00:25:07.804000 audit[5853]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=48684 a0=3 a1=ffffd7d338c0 a2=0 a3=1 items=0 ppid=2575 pid=5853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:07.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Nov 1 00:25:07.974068 kubelet[2472]: E1101 00:25:07.974027 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:25:09.296472 systemd[1]: Started sshd@21-10.200.20.24:22-10.200.16.10:48176.service. Nov 1 00:25:09.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.24:22-10.200.16.10:48176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:09.304680 kernel: kauditd_printk_skb: 6 callbacks suppressed Nov 1 00:25:09.304851 kernel: audit: type=1130 audit(1761956709.297:1551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.24:22-10.200.16.10:48176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:09.626599 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.s3CNGe.mount: Deactivated successfully. Nov 1 00:25:09.747794 sshd[5855]: Accepted publickey for core from 10.200.16.10 port 48176 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:09.746000 audit[5855]: USER_ACCT pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.772000 audit[5855]: CRED_ACQ pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.773487 sshd[5855]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:09.796065 kernel: audit: type=1101 audit(1761956709.746:1552): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.796218 kernel: audit: type=1103 audit(1761956709.772:1553): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.811601 kernel: audit: type=1006 audit(1761956709.772:1554): pid=5855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Nov 1 00:25:09.772000 audit[5855]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcee9b750 a2=3 a3=1 items=0 ppid=1 pid=5855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:09.836538 kernel: audit: type=1300 audit(1761956709.772:1554): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcee9b750 a2=3 a3=1 items=0 ppid=1 pid=5855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:09.772000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:09.840618 systemd-logind[1464]: New session 24 of user core. Nov 1 00:25:09.841415 systemd[1]: Started session-24.scope. Nov 1 00:25:09.849628 kernel: audit: type=1327 audit(1761956709.772:1554): proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:09.844000 audit[5855]: USER_START pid=5855 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.881454 kernel: audit: type=1105 audit(1761956709.844:1555): pid=5855 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.881691 kernel: audit: type=1103 audit(1761956709.848:1556): pid=5877 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.848000 audit[5877]: CRED_ACQ pid=5877 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:09.974581 kubelet[2472]: E1101 00:25:09.974139 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:25:09.975564 kubelet[2472]: E1101 00:25:09.975434 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:25:10.244215 sshd[5855]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:10.245000 audit[5855]: USER_END pid=5855 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:10.249201 systemd-logind[1464]: Session 24 logged out. Waiting for processes to exit. Nov 1 00:25:10.250624 systemd[1]: session-24.scope: Deactivated successfully. Nov 1 00:25:10.251844 systemd-logind[1464]: Removed session 24. Nov 1 00:25:10.252399 systemd[1]: sshd@21-10.200.20.24:22-10.200.16.10:48176.service: Deactivated successfully. Nov 1 00:25:10.245000 audit[5855]: CRED_DISP pid=5855 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:10.295755 kernel: audit: type=1106 audit(1761956710.245:1557): pid=5855 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:10.295999 kernel: audit: type=1104 audit(1761956710.245:1558): pid=5855 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:10.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.24:22-10.200.16.10:48176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:11.974079 kubelet[2472]: E1101 00:25:11.974040 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:25:15.313995 systemd[1]: Started sshd@22-10.200.20.24:22-10.200.16.10:41270.service. Nov 1 00:25:15.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.24:22-10.200.16.10:41270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:15.320666 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:25:15.320749 kernel: audit: type=1130 audit(1761956715.313:1560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.24:22-10.200.16.10:41270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:15.751015 sshd[5888]: Accepted publickey for core from 10.200.16.10 port 41270 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:15.750000 audit[5888]: USER_ACCT pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:15.775505 sshd[5888]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:15.774000 audit[5888]: CRED_ACQ pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:15.800428 kernel: audit: type=1101 audit(1761956715.750:1561): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:15.800592 kernel: audit: type=1103 audit(1761956715.774:1562): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:15.804854 systemd-logind[1464]: New session 25 of user core. Nov 1 00:25:15.817471 kernel: audit: type=1006 audit(1761956715.774:1563): pid=5888 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Nov 1 00:25:15.818077 systemd[1]: Started session-25.scope. Nov 1 00:25:15.774000 audit[5888]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcce3e230 a2=3 a3=1 items=0 ppid=1 pid=5888 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:15.846284 kernel: audit: type=1300 audit(1761956715.774:1563): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcce3e230 a2=3 a3=1 items=0 ppid=1 pid=5888 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:15.774000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:15.854787 kernel: audit: type=1327 audit(1761956715.774:1563): proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:15.854000 audit[5888]: USER_START pid=5888 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:15.883080 kernel: audit: type=1105 audit(1761956715.854:1564): pid=5888 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:15.854000 audit[5890]: CRED_ACQ pid=5890 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:15.904715 kernel: audit: type=1103 audit(1761956715.854:1565): pid=5890 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:16.179109 sshd[5888]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:16.179000 audit[5888]: USER_END pid=5888 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:16.186039 systemd[1]: sshd@22-10.200.20.24:22-10.200.16.10:41270.service: Deactivated successfully. Nov 1 00:25:16.186893 systemd[1]: session-25.scope: Deactivated successfully. Nov 1 00:25:16.188416 systemd-logind[1464]: Session 25 logged out. Waiting for processes to exit. Nov 1 00:25:16.189622 systemd-logind[1464]: Removed session 25. Nov 1 00:25:16.179000 audit[5888]: CRED_DISP pid=5888 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:16.235032 kernel: audit: type=1106 audit(1761956716.179:1566): pid=5888 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:16.235208 kernel: audit: type=1104 audit(1761956716.179:1567): pid=5888 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:16.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.24:22-10.200.16.10:41270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:16.976702 kubelet[2472]: E1101 00:25:16.976659 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:25:17.975162 kubelet[2472]: E1101 00:25:17.974894 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:25:17.975162 kubelet[2472]: E1101 00:25:17.974959 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:25:20.975048 kubelet[2472]: E1101 00:25:20.975005 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:25:21.249665 systemd[1]: Started sshd@23-10.200.20.24:22-10.200.16.10:35684.service. Nov 1 00:25:21.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.24:22-10.200.16.10:35684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:21.256063 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:25:21.256181 kernel: audit: type=1130 audit(1761956721.248:1569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.24:22-10.200.16.10:35684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:21.686130 sshd[5900]: Accepted publickey for core from 10.200.16.10 port 35684 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:21.685000 audit[5900]: USER_ACCT pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:21.715270 sshd[5900]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:21.713000 audit[5900]: CRED_ACQ pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:21.742730 kernel: audit: type=1101 audit(1761956721.685:1570): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:21.742894 kernel: audit: type=1103 audit(1761956721.713:1571): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:21.760336 kernel: audit: type=1006 audit(1761956721.713:1572): pid=5900 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Nov 1 00:25:21.749137 systemd-logind[1464]: New session 26 of user core. Nov 1 00:25:21.784726 kernel: audit: type=1300 audit(1761956721.713:1572): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd985f2a0 a2=3 a3=1 items=0 ppid=1 pid=5900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:21.713000 audit[5900]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd985f2a0 a2=3 a3=1 items=0 ppid=1 pid=5900 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:21.767910 systemd[1]: Started session-26.scope. Nov 1 00:25:21.713000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:21.795370 kernel: audit: type=1327 audit(1761956721.713:1572): proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:21.785000 audit[5900]: USER_START pid=5900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:21.821617 kernel: audit: type=1105 audit(1761956721.785:1573): pid=5900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:21.786000 audit[5902]: CRED_ACQ pid=5902 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:21.845304 kernel: audit: type=1103 audit(1761956721.786:1574): pid=5902 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:22.123133 sshd[5900]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:22.124000 audit[5900]: USER_END pid=5900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:22.126763 systemd-logind[1464]: Session 26 logged out. Waiting for processes to exit. Nov 1 00:25:22.131736 systemd[1]: sshd@23-10.200.20.24:22-10.200.16.10:35684.service: Deactivated successfully. Nov 1 00:25:22.132697 systemd[1]: session-26.scope: Deactivated successfully. Nov 1 00:25:22.134403 systemd-logind[1464]: Removed session 26. Nov 1 00:25:22.124000 audit[5900]: CRED_DISP pid=5900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:22.178849 kernel: audit: type=1106 audit(1761956722.124:1575): pid=5900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:22.179020 kernel: audit: type=1104 audit(1761956722.124:1576): pid=5900 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:22.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.24:22-10.200.16.10:35684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:22.974140 kubelet[2472]: E1101 00:25:22.974095 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:25:24.974310 kubelet[2472]: E1101 00:25:24.974273 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:25:24.976167 kubelet[2472]: E1101 00:25:24.976111 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:25:27.196149 systemd[1]: Started sshd@24-10.200.20.24:22-10.200.16.10:35698.service. Nov 1 00:25:27.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.24:22-10.200.16.10:35698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:27.205143 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:25:27.205211 kernel: audit: type=1130 audit(1761956727.199:1578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.24:22-10.200.16.10:35698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:27.611596 sshd[5919]: Accepted publickey for core from 10.200.16.10 port 35698 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:27.610000 audit[5919]: USER_ACCT pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:27.640805 sshd[5919]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:27.639000 audit[5919]: CRED_ACQ pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:27.665030 kernel: audit: type=1101 audit(1761956727.610:1579): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:27.665149 kernel: audit: type=1103 audit(1761956727.639:1580): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:27.679577 kernel: audit: type=1006 audit(1761956727.639:1581): pid=5919 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Nov 1 00:25:27.639000 audit[5919]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0637720 a2=3 a3=1 items=0 ppid=1 pid=5919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:27.639000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:27.713395 kernel: audit: type=1300 audit(1761956727.639:1581): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0637720 a2=3 a3=1 items=0 ppid=1 pid=5919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:27.713492 kernel: audit: type=1327 audit(1761956727.639:1581): proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:27.713054 systemd-logind[1464]: New session 27 of user core. Nov 1 00:25:27.714740 systemd[1]: Started session-27.scope. Nov 1 00:25:27.720000 audit[5919]: USER_START pid=5919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:27.747000 audit[5921]: CRED_ACQ pid=5921 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:27.769188 kernel: audit: type=1105 audit(1761956727.720:1582): pid=5919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:27.769298 kernel: audit: type=1103 audit(1761956727.747:1583): pid=5921 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:28.125294 sshd[5919]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:28.125000 audit[5919]: USER_END pid=5919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:28.134770 systemd-logind[1464]: Session 27 logged out. Waiting for processes to exit. Nov 1 00:25:28.136446 systemd[1]: sshd@24-10.200.20.24:22-10.200.16.10:35698.service: Deactivated successfully. Nov 1 00:25:28.137253 systemd[1]: session-27.scope: Deactivated successfully. Nov 1 00:25:28.138741 systemd-logind[1464]: Removed session 27. Nov 1 00:25:28.125000 audit[5919]: CRED_DISP pid=5919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:28.179634 kernel: audit: type=1106 audit(1761956728.125:1584): pid=5919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:28.179840 kernel: audit: type=1104 audit(1761956728.125:1585): pid=5919 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:28.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.24:22-10.200.16.10:35698 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:31.974896 kubelet[2472]: E1101 00:25:31.974840 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-kube-controllers\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.4\\\": ghcr.io/flatcar/calico/kube-controllers:v3.30.4: not found\"" pod="calico-system/calico-kube-controllers-65fdfb6775-jq5nz" podUID="d0c030a0-2978-427b-aeca-01939df97b98" Nov 1 00:25:31.975367 kubelet[2472]: E1101 00:25:31.975321 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-n8gjk" podUID="2e8a69dd-776a-4945-85af-d19c382f23d2" Nov 1 00:25:31.975825 kubelet[2472]: E1101 00:25:31.975773 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.4\\\": ghcr.io/flatcar/calico/whisker:v3.30.4: not found\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.4\\\": ghcr.io/flatcar/calico/whisker-backend:v3.30.4: not found\"]" pod="calico-system/whisker-699c84b798-wfdq5" podUID="b3f59ccf-7740-48c7-b885-21ec60ac189d" Nov 1 00:25:32.974799 kubelet[2472]: E1101 00:25:32.974738 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"calico-csi\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/csi:v3.30.4\\\": ghcr.io/flatcar/calico/csi:v3.30.4: not found\", failed to \"StartContainer\" for \"csi-node-driver-registrar\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4\\\": ghcr.io/flatcar/calico/node-driver-registrar:v3.30.4: not found\"]" pod="calico-system/csi-node-driver-fns4p" podUID="864706af-b74b-4daa-9415-eca81f18da43" Nov 1 00:25:33.195660 systemd[1]: Started sshd@25-10.200.20.24:22-10.200.16.10:37538.service. Nov 1 00:25:33.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.24:22-10.200.16.10:37538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:33.202792 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:25:33.202958 kernel: audit: type=1130 audit(1761956733.194:1587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.24:22-10.200.16.10:37538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:33.639249 sshd[5932]: Accepted publickey for core from 10.200.16.10 port 37538 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:33.638000 audit[5932]: USER_ACCT pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:33.663937 kernel: audit: type=1101 audit(1761956733.638:1588): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:33.664286 sshd[5932]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:33.662000 audit[5932]: CRED_ACQ pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:33.703702 kernel: audit: type=1103 audit(1761956733.662:1589): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:33.703849 kernel: audit: type=1006 audit(1761956733.662:1590): pid=5932 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Nov 1 00:25:33.662000 audit[5932]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7c2f9d0 a2=3 a3=1 items=0 ppid=1 pid=5932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:33.707950 systemd-logind[1464]: New session 28 of user core. Nov 1 00:25:33.708614 systemd[1]: Started session-28.scope. Nov 1 00:25:33.732658 kernel: audit: type=1300 audit(1761956733.662:1590): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7c2f9d0 a2=3 a3=1 items=0 ppid=1 pid=5932 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:33.662000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:33.741705 kernel: audit: type=1327 audit(1761956733.662:1590): proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:33.733000 audit[5932]: USER_START pid=5932 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:33.771003 kernel: audit: type=1105 audit(1761956733.733:1591): pid=5932 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:33.742000 audit[5934]: CRED_ACQ pid=5934 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:33.794238 kernel: audit: type=1103 audit(1761956733.742:1592): pid=5934 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:34.080183 sshd[5932]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:34.080000 audit[5932]: USER_END pid=5932 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:34.083595 systemd-logind[1464]: Session 28 logged out. Waiting for processes to exit. Nov 1 00:25:34.084549 systemd[1]: sshd@25-10.200.20.24:22-10.200.16.10:37538.service: Deactivated successfully. Nov 1 00:25:34.085468 systemd[1]: session-28.scope: Deactivated successfully. Nov 1 00:25:34.087011 systemd-logind[1464]: Removed session 28. Nov 1 00:25:34.080000 audit[5932]: CRED_DISP pid=5932 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:34.135267 kernel: audit: type=1106 audit(1761956734.080:1593): pid=5932 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:34.135413 kernel: audit: type=1104 audit(1761956734.080:1594): pid=5932 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:34.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.24:22-10.200.16.10:37538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:35.973729 kubelet[2472]: E1101 00:25:35.973648 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-6d574c4f5b-j8zsj" podUID="06d0dc32-8772-475c-a553-c9602f03c588" Nov 1 00:25:36.975608 kubelet[2472]: E1101 00:25:36.975569 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"calico-apiserver\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/apiserver:v3.30.4\\\": ghcr.io/flatcar/calico/apiserver:v3.30.4: not found\"" pod="calico-apiserver/calico-apiserver-856fdb46cd-xbgdv" podUID="325cca53-bb7c-48f5-b2f1-432375aa7e1f" Nov 1 00:25:36.976163 kubelet[2472]: E1101 00:25:36.976126 2472 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ErrImagePull: rpc error: code = NotFound desc = failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.4\\\": ghcr.io/flatcar/calico/goldmane:v3.30.4: not found\"" pod="calico-system/goldmane-666569f655-6fknv" podUID="e9955b10-5b47-461a-b3ab-955ce4c39730" Nov 1 00:25:39.157102 systemd[1]: Started sshd@26-10.200.20.24:22-10.200.16.10:37552.service. Nov 1 00:25:39.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.24:22-10.200.16.10:37552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:39.164327 kernel: kauditd_printk_skb: 1 callbacks suppressed Nov 1 00:25:39.164426 kernel: audit: type=1130 audit(1761956739.156:1596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.24:22-10.200.16.10:37552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Nov 1 00:25:39.597914 sshd[5959]: Accepted publickey for core from 10.200.16.10 port 37552 ssh2: RSA SHA256:JyxYDfrWcSc3T/AgB8prmyzM4mqcWmvKVj9wIAiMWXI Nov 1 00:25:39.596000 audit[5959]: USER_ACCT pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:39.627253 sshd[5959]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Nov 1 00:25:39.626000 audit[5959]: CRED_ACQ pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:39.633598 systemd[1]: Started session-29.scope. Nov 1 00:25:39.635017 systemd-logind[1464]: New session 29 of user core. Nov 1 00:25:39.661989 kernel: audit: type=1101 audit(1761956739.596:1597): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:39.662339 kernel: audit: type=1103 audit(1761956739.626:1598): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:39.662543 kernel: audit: type=1006 audit(1761956739.626:1599): pid=5959 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Nov 1 00:25:39.682617 kernel: audit: type=1300 audit(1761956739.626:1599): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd11a5800 a2=3 a3=1 items=0 ppid=1 pid=5959 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:39.626000 audit[5959]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd11a5800 a2=3 a3=1 items=0 ppid=1 pid=5959 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Nov 1 00:25:39.681806 systemd[1]: run-containerd-runc-k8s.io-0cfd836859667ebcf888009064cffd0ec77bc29359185d5b3ad055d9d9d92458-runc.edRzgO.mount: Deactivated successfully. Nov 1 00:25:39.626000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:39.716415 kernel: audit: type=1327 audit(1761956739.626:1599): proctitle=737368643A20636F7265205B707269765D Nov 1 00:25:39.716618 kernel: audit: type=1105 audit(1761956739.638:1600): pid=5959 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:39.638000 audit[5959]: USER_START pid=5959 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:39.638000 audit[5962]: CRED_ACQ pid=5962 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:39.768780 kernel: audit: type=1103 audit(1761956739.638:1601): pid=5962 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:40.033353 sshd[5959]: pam_unix(sshd:session): session closed for user core Nov 1 00:25:40.034000 audit[5959]: USER_END pid=5959 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:40.038812 systemd-logind[1464]: Session 29 logged out. Waiting for processes to exit. Nov 1 00:25:40.040460 systemd[1]: session-29.scope: Deactivated successfully. Nov 1 00:25:40.041805 systemd-logind[1464]: Removed session 29. Nov 1 00:25:40.042696 systemd[1]: sshd@26-10.200.20.24:22-10.200.16.10:37552.service: Deactivated successfully. Nov 1 00:25:40.034000 audit[5959]: CRED_DISP pid=5959 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:40.097229 kernel: audit: type=1106 audit(1761956740.034:1602): pid=5959 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:40.097395 kernel: audit: type=1104 audit(1761956740.034:1603): pid=5959 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.16.10 addr=10.200.16.10 terminal=ssh res=success' Nov 1 00:25:40.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.24:22-10.200.16.10:37552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'