### Test report for 4593.1.0+nightly-20260415-2100 / arm64 **Platforms tested** : aws 🟢 ok **cl.basic**; Succeeded: aws (1) 🟢 ok **cl.cloudinit.basic**; Succeeded: aws (1) 🟢 ok **cl.etcd-member.discovery**; Succeeded: aws (1) 🟢 ok **cl.flannel.vxlan**; Succeeded: aws (1) 🟢 ok **cl.ignition.kargs**; Succeeded: aws (1) 🟢 ok **cl.ignition.misc.empty**; Succeeded: aws (1) 🟢 ok **cl.ignition.v1.noop**; Succeeded: aws (1) 🟢 ok **cl.ignition.v2.btrfsroot**; Succeeded: aws (1) 🟢 ok **cl.ignition.v2.noop**; Succeeded: aws (1) 🟢 ok **cl.install.cloudinit**; Succeeded: aws (1) 🟢 ok **cl.internet**; Succeeded: aws (1) 🟢 ok **cl.metadata.aws**; Succeeded: aws (1) 🟢 ok **cl.network.initramfs.second-boot**; Succeeded: aws (1) 🟢 ok **coreos.ignition.once**; Succeeded: aws (1) 🟢 ok **coreos.ignition.resource.local**; Succeeded: aws (1) 🟢 ok **coreos.ignition.resource.remote**; Succeeded: aws (1) 🟢 ok **coreos.ignition.resource.s3**; Succeeded: aws (1) 🟢 ok **coreos.ignition.security.tls**; Succeeded: aws (1) 🟢 ok **coreos.ignition.sethostname**; Succeeded: aws (1) 🟢 ok **coreos.ignition.ssh.key**; Succeeded: aws (1) 🟢 ok **coreos.misc.aws.diskfriendlyname**; Succeeded: aws (1) 🟢 ok **docker.network-openbsd-nc**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.33.8.calico.base**; Succeeded: aws (3); Failed: aws (1, 2)
                Diagnostic output for aws, run 2 ``` L1: " Error: _cluster.go:125: I0416 00:37:18.260655 2601 version.go:261] remote version is much newer: v1.35.4; falling back to: stable-1.33" L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.33.11" L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.33.11" L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.33.11" L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.33.11" L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.12.0" L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10" L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.5.24-0" L9: "cluster.go:125: I0416 00:37:31.621127 3012 version.go:261] remote version is much newer: v1.35.4; falling back to: stable-1.33" L10: "cluster.go:125: [init] Using Kubernetes version: v1.33.11" L11: "cluster.go:125: [preflight] Running pre-flight checks" L12: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L13: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster" L14: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection" L15: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_" L16: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__" L17: "cluster.go:125: [certs] Generating __ca__ certificate and key" L18: "cluster.go:125: [certs] Generating __apiserver__ certificate and key" L19: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ip-172-31-26-34 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 17?2.31.26.34]" L20: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key" L21: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key" L22: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key" L23: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation" L24: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation" L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation" L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation" L27: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation" L28: "cluster.go:125: [certs] Generating __sa__ key and public key" L29: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__" L30: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file" L31: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file" L32: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file" L33: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file" L34: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file" L35: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__" L36: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__" L37: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__" L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__" L39: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__" L40: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__" L41: "cluster.go:125: [kubelet-start] Starting the kubelet" L42: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__" L43: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s" L44: "cluster.go:125: [kubelet-check] The kubelet is healthy after 1.010292836s" L45: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s" L46: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://172.31.26.34:6443/livez" L47: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz" L48: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez" L49: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 2.377216936s" L50: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 4.439720295s" L51: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 6.501621434s" L52: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace" L53: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster" L54: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs" L55: "cluster.go:125: [mark-control-plane] Marking the node ip-172-31-26-34 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balanc?ers]" L56: "cluster.go:125: [mark-control-plane] Marking the node ip-172-31-26-34 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]" L57: "cluster.go:125: [bootstrap-token] Using token: 91slcp.sc2cga2a67yvqo49" L58: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles" L59: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes" L60: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials" L61: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token" L62: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster" L63: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace" L64: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key" L65: "cluster.go:125: [addons] Applied essential addon: CoreDNS" L66: "cluster.go:125: [addons] Applied essential addon: kube-proxy" L67: "cluster.go:125: " L68: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!" L69: "cluster.go:125: " L70: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:" L71: "cluster.go:125: " L72: "cluster.go:125: mkdir -p $HOME/.kube" L73: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config" L74: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config" L75: "cluster.go:125: " L76: "cluster.go:125: Alternatively, if you are the root user, you can run:" L77: "cluster.go:125: " L78: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf" L79: "cluster.go:125: " L80: "cluster.go:125: You should now deploy a pod network to the cluster." L81: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:" L82: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/" L83: "cluster.go:125: " L84: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:" L85: "cluster.go:125: " L86: "cluster.go:125: kubeadm join 172.31.26.34:6443 --token 91slcp.sc2cga2a67yvqo49 _" L87: "cluster.go:125: --discovery-token-ca-cert-hash sha256:fdd264b096c614e492bac2fcf1f44e612c5ad5bb30fa6b5960dca55fa73e670f " L88: "cluster.go:125: namespace/tigera-operator created" L89: "cluster.go:125: serviceaccount/tigera-operator created" L90: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator-secrets created" L91: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator created" L92: "cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created" L93: "cluster.go:125: rolebinding.rbac.authorization.k8s.io/tigera-operator-secrets created" L94: "cluster.go:125: deployment.apps/tigera-operator created" L95: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met" L96: "cluster.go:125: error: .status.conditions accessor error:                 Diagnostic output for aws, run 1 ``` L1: " Error: _cluster.go:125: I0416 00:14:12.017647 2586 version.go:261] remote version is much newer: v1.35.4; falling back to: stable-1.33" L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.33.11" L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.33.11" L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.33.11" L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.33.11" L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.12.0" L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10" L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.5.24-0" L9: "cluster.go:125: I0416 00:14:24.103422 2804 version.go:261] remote version is much newer: v1.35.4; falling back to: stable-1.33" L10: "cluster.go:125: [init] Using Kubernetes version: v1.33.11" L11: "cluster.go:125: [preflight] Running pre-flight checks" L12: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L13: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster" L14: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection" L15: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_" L16: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__" L17: "cluster.go:125: [certs] Generating __ca__ certificate and key" L18: "cluster.go:125: [certs] Generating __apiserver__ certificate and key" L19: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ip-172-31-18-6 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 172?.31.18.6]" L20: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key" L21: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key" L22: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key" L23: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation" L24: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation" L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation" L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation" L27: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation" L28: "cluster.go:125: [certs] Generating __sa__ key and public key" L29: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__" L30: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file" L31: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file" L32: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file" L33: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file" L34: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file" L35: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__" L36: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__" L37: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__" L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__" L39: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__" L40: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__" L41: "cluster.go:125: [kubelet-start] Starting the kubelet" L42: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__" L43: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s" L44: "cluster.go:125: [kubelet-check] The kubelet is healthy after 1.501669602s" L45: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s" L46: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://172.31.18.6:6443/livez" L47: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz" L48: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez" L49: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 3.044063524s" L50: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 5.26526138s" L51: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 7.002109311s" L52: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace" L53: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster" L54: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs" L55: "cluster.go:125: [mark-control-plane] Marking the node ip-172-31-18-6 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balance?rs]" L56: "cluster.go:125: [mark-control-plane] Marking the node ip-172-31-18-6 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]" L57: "cluster.go:125: [bootstrap-token] Using token: hu4tp1.6qd2b15f2jtypgrt" L58: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles" L59: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes" L60: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials" L61: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token" L62: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster" L63: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace" L64: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key" L65: "cluster.go:125: [addons] Applied essential addon: CoreDNS" L66: "cluster.go:125: [addons] Applied essential addon: kube-proxy" L67: "cluster.go:125: " L68: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!" L69: "cluster.go:125: " L70: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:" L71: "cluster.go:125: " L72: "cluster.go:125: mkdir -p $HOME/.kube" L73: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config" L74: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config" L75: "cluster.go:125: " L76: "cluster.go:125: Alternatively, if you are the root user, you can run:" L77: "cluster.go:125: " L78: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf" L79: "cluster.go:125: " L80: "cluster.go:125: You should now deploy a pod network to the cluster." L81: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:" L82: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/" L83: "cluster.go:125: " L84: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:" L85: "cluster.go:125: " L86: "cluster.go:125: kubeadm join 172.31.18.6:6443 --token hu4tp1.6qd2b15f2jtypgrt _" L87: "cluster.go:125: --discovery-token-ca-cert-hash sha256:fc29dcd3ed9073946dfbab286815ac6ec03a0fd0ae7f2e3c33ca187f035dd818 " L88: "cluster.go:125: namespace/tigera-operator created" L89: "cluster.go:125: serviceaccount/tigera-operator created" L90: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator-secrets created" L91: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator created" L92: "cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created" L93: "cluster.go:125: rolebinding.rbac.authorization.k8s.io/tigera-operator-secrets created" L94: "cluster.go:125: deployment.apps/tigera-operator created" L95: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met" L96: "cluster.go:125: error: .status.conditions accessor error: 🟢 ok **kubeadm.v1.33.8.cilium.base**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.33.8.flannel.base**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.34.4.calico.base**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.34.4.cilium.base**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.34.4.flannel.base**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.35.1.calico.base**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.35.1.cilium.base**; Succeeded: aws (1) 🟢 ok **kubeadm.v1.35.1.flannel.base**; Succeeded: aws (1) 🟢 ok **linux.nfs.v3**; Succeeded: aws (1) 🟢 ok **linux.nfs.v4**; Succeeded: aws (1)