### Test report for 4593.2.2+nightly-20260604-2100 / arm64 **Platforms tested** : azure 🟢 ok **bpf.ig**; Succeeded: azure (1) 🟢 ok **cl.basic**; Succeeded: azure (1) 🟢 ok **cl.cloudinit.basic**; Succeeded: azure (1) 🟢 ok **cl.cloudinit.multipart-mime**; Succeeded: azure (1) 🟢 ok **cl.cloudinit.script**; Succeeded: azure (1) 🟢 ok **cl.etcd-member.discovery # SKIP**; Succeeded: azure (1) 🟢 ok **cl.etcd-member.etcdctlv3**; Succeeded: azure (1) 🟢 ok **cl.etcd-member.v2-backup-restore # SKIP**; Succeeded: azure (1) 🟢 ok **cl.flannel.vxlan # SKIP**; Succeeded: azure (1) 🟢 ok **cl.ignition.kargs**; Succeeded: azure (1) 🟢 ok **cl.ignition.luks**; Succeeded: azure (1) 🟢 ok **cl.ignition.misc.empty**; Succeeded: azure (1) 🟢 ok **cl.ignition.symlink**; Succeeded: azure (1) 🟢 ok **cl.ignition.translation**; Succeeded: azure (1) 🟢 ok **cl.ignition.v1.btrfsroot**; Succeeded: azure (1) 🟢 ok **cl.ignition.v1.ext4root**; Succeeded: azure (1) 🟢 ok **cl.ignition.v1.groups**; Succeeded: azure (1) 🟢 ok **cl.ignition.v1.noop**; Succeeded: azure (1) 🟢 ok **cl.ignition.v1.once**; Succeeded: azure (1) 🟢 ok **cl.ignition.v1.users**; Succeeded: azure (1) 🟢 ok **cl.ignition.v1.xfsroot**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2.btrfsroot**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2.ext4root**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2.noop**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2.users**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2.xfsroot**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2_1.ext4checkexisting**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2_1.swap**; Succeeded: azure (1) 🟢 ok **cl.ignition.v2_1.vfat**; Succeeded: azure (1) 🟢 ok **cl.internet**; Succeeded: azure (1) 🟢 ok **cl.locksmith.cluster # SKIP**; Succeeded: azure (1) 🟢 ok **cl.metadata.azure**; Succeeded: azure (1) 🟢 ok **cl.network.initramfs.second-boot**; Succeeded: azure (1) 🟢 ok **cl.network.iptables**; Succeeded: azure (1) 🟢 ok **cl.network.nftables**; Succeeded: azure (1) 🟢 ok **cl.network.wireguard**; Succeeded: azure (1) 🟢 ok **cl.osreset.ignition-rerun**; Succeeded: azure (1) 🟢 ok **cl.overlay.cleanup**; Succeeded: azure (1) 🟢 ok **cl.swap_activation**; Succeeded: azure (1) 🟢 ok **cl.toolbox.dnf-install**; Succeeded: azure (1) 🟢 ok **cl.update.badverity**; Succeeded: azure (1) 🟢 ok **cl.update.reboot**; Succeeded: azure (1) 🟢 ok **cl.users.shells**; Succeeded: azure (1) 🟢 ok **cl.verity**; Succeeded: azure (1) 🟢 ok **coreos.auth.verify**; Succeeded: azure (1) 🟢 ok **coreos.ignition.groups**; Succeeded: azure (1) 🟢 ok **coreos.ignition.once**; Succeeded: azure (1) 🟢 ok **coreos.ignition.resource.local**; Succeeded: azure (1) 🟢 ok **coreos.ignition.resource.remote**; Succeeded: azure (1) 🟢 ok **coreos.ignition.security.tls**; Succeeded: azure (1) 🟢 ok **coreos.ignition.ssh.key**; Succeeded: azure (1) 🟢 ok **coreos.ignition.systemd.enable-service**; Succeeded: azure (1) 🟢 ok **coreos.locksmith.reboot**; Succeeded: azure (1) 🟢 ok **coreos.locksmith.tls**; Succeeded: azure (1) 🟢 ok **coreos.selinux.boolean**; Succeeded: azure (1) 🟢 ok **coreos.selinux.enforce**; Succeeded: azure (1) 🟢 ok **coreos.tls.fetch-urls**; Succeeded: azure (1) 🟢 ok **coreos.update.badusr**; Succeeded: azure (1) 🟢 ok **docker.base**; Succeeded: azure (1) 🟢 ok **docker.btrfs-storage**; Succeeded: azure (1) 🟢 ok **docker.containerd-restart**; Succeeded: azure (1) 🟢 ok **docker.enable-service.sysext**; Succeeded: azure (1) 🟢 ok **docker.lib-coreos-dockerd-compat**; Succeeded: azure (1) 🟢 ok **docker.network-openbsd-nc**; Succeeded: azure (1) 🟢 ok **docker.selinux**; Succeeded: azure (1) 🟢 ok **docker.userns**; Succeeded: azure (1) 🟢 ok **kubeadm.v1.34.4.calico.base**; Succeeded: azure (1) 🟢 ok **kubeadm.v1.34.4.cilium.base**; Succeeded: azure (3); Failed: azure (1, 2)
                Diagnostic output for azure, run 2 ``` L1: " Error: _cluster.go:125: I0604 23:36:03.912283 2935 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.34" L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.34.8" L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.34.8" L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.34.8" L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.34.8" L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.12.1" L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1" L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.5-0" L9: "cluster.go:125: I0604 23:36:14.781958 3153 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.34" L10: "cluster.go:125: [init] Using Kubernetes version: v1.34.8" L11: "cluster.go:125: [preflight] Running pre-flight checks" L12: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-f5d3e2bfd9__ could not be reached" L13: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-f5d3e2bfd9__: lookup ci-4593.2.2-n-f5d3e2bfd9 on 168.63.129.16:53: no such host" L14: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L15: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster" L16: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection" L17: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_" L18: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__" L19: "cluster.go:125: [certs] Generating __ca__ certificate and key" L20: "cluster.go:125: [certs] Generating __apiserver__ certificate and key" L21: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4593.2.2-n-f5d3e2bfd9 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.?96.0.1 10.0.0.6]" L22: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key" L23: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key" L24: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key" L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation" L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation" L27: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation" L28: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation" L29: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation" L30: "cluster.go:125: [certs] Generating __sa__ key and public key" L31: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__" L32: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file" L33: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file" L34: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file" L35: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file" L36: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file" L37: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__" L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__" L39: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__" L40: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__" L41: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__" L42: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__" L43: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__" L44: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__" L45: "cluster.go:125: [kubelet-start] Starting the kubelet" L46: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__" L47: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s" L48: "cluster.go:125: [kubelet-check] The kubelet is healthy after 1.001414374s" L49: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s" L50: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.6:6443/livez" L51: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz" L52: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez" L53: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 2.512592094s" L54: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 2.991709638s" L55: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 5.001590631s" L56: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace" L57: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster" L58: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs" L59: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-f5d3e2bfd9 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-lo?ad-balancers]" L60: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-f5d3e2bfd9 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]" L61: "cluster.go:125: [bootstrap-token] Using token: ygxgiq.bgix0eo8fk1w6cl1" L62: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles" L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes" L64: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials" L65: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token" L66: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster" L67: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace" L68: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key" L69: "cluster.go:125: [addons] Applied essential addon: CoreDNS" L70: "cluster.go:125: [addons] Applied essential addon: kube-proxy" L71: "cluster.go:125: " L72: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!" L73: "cluster.go:125: " L74: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:" L75: "cluster.go:125: " L76: "cluster.go:125: mkdir -p $HOME/.kube" L77: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config" L78: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config" L79: "cluster.go:125: " L80: "cluster.go:125: Alternatively, if you are the root user, you can run:" L81: "cluster.go:125: " L82: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf" L83: "cluster.go:125: " L84: "cluster.go:125: You should now deploy a pod network to the cluster." L85: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:" L86: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/" L87: "cluster.go:125: " L88: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:" L89: "cluster.go:125: " L90: "cluster.go:125: kubeadm join 10.0.0.6:6443 --token ygxgiq.bgix0eo8fk1w6cl1 _" L91: "cluster.go:125: --discovery-token-ca-cert-hash sha256:d8efc6e4d33ad7a276da6e6e2ae47b021be7d3f654419e39c5bc4d0853a54f05 " L92: "cluster.go:125: i Using Cilium version 1.12.5" L93: "cluster.go:125: ? Auto-detected cluster name: kubernetes" L94: "cluster.go:125: ? Auto-detected datapath mode: tunnel" L95: "cluster.go:125: ? Auto-detected kube-proxy has been installed" L96: "cluster.go:125: i helm template --namespace kube-system cilium cilium/cilium --version 1.12.5 --set cluster.id=0,cluster.name=kubernetes,encryption.nodeEncryption=false,extraConfig.cluster-pool-ipv4-?cidr=192.168.0.0/17,extraConfig.enable-endpoint-routes=true,kubeProxyReplacement=disabled,operator.replicas=1,serviceAccounts.cilium.name=cilium,serviceAccounts.operator.name=cilium-operator,tunnel=vx?lan" L97: "cluster.go:125: i Storing helm values file in kube-system/cilium-cli-helm-values Secret" L98: "cluster.go:125: ? Created CA in secret cilium-ca" L99: "cluster.go:125: ? Generating certificates for Hubble..." L100: "cluster.go:125: ? Creating Service accounts..." L101: "cluster.go:125: ? Creating Cluster roles..." L102: "cluster.go:125: ? Creating ConfigMap for Cilium version 1.12.5..." L103: "cluster.go:125: i Manual overwrite in ConfigMap: enable-endpoint-routes=true" L104: "cluster.go:125: i Manual overwrite in ConfigMap: cluster-pool-ipv4-cidr=192.168.0.0/17" L105: "cluster.go:125: ? Creating Agent DaemonSet..." L106: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog" L107: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the ___appArmorProfile___ fi?eld instead__ subsys=klog" L108: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the ___appArmorProfile___ field i?nstead__ subsys=klog" L109: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog" L110: "cluster.go:125: ? Creating Operator Deployment..." L111: "cluster.go:125: ? Waiting for Cilium to be installed and ready..." L112: "cluster.go:125: ? Cilium was successfully installed! Run _cilium status_ to view installation health" L113: "cluster.go:125: ?[33m /??_" L114: "cluster.go:125: ?[36m /???[33m___/?[32m??_?[0m Cilium: ?[32mOK?[0m" L115: "cluster.go:125: ?[36m ___?[31m/??_?[32m__/?[0m Operator: ?[32mOK?[0m" L116: "cluster.go:125: ?[32m /???[31m___/?[35m??_?[0m Hubble: ?[36mdisabled?[0m" L117: "cluster.go:125: ?[32m ___?[34m/??_?[35m__/?[0m ClusterMesh: ?[36mdisabled?[0m" L118: "cluster.go:125: ?[34m ___/" L119: "cluster.go:125: ?[0m" L120: "cluster.go:125: DaemonSet cilium " L121: "cluster.go:125: Deployment cilium-operator " L122: "cluster.go:125: Containers: cilium " L123: "cluster.go:125: cilium-operator " L124: "cluster.go:125: Cluster Pods: 0/0 managed by Cilium" L125: "cluster.go:125: W0604 23:37:58.688623 2594 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration" L126: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L127: "--- FAIL: kubeadm.v1.34.4.cilium.base/NFS_deployment (1373.38s)" L128: "cluster.go:125: jq: error (at                 Diagnostic output for azure, run 1 ``` L1: " Error: _cluster.go:125: I0604 23:26:04.639677 2812 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.34" L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.34.8" L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.34.8" L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.34.8" L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.34.8" L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.12.1" L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1" L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.5-0" L9: "cluster.go:125: I0604 23:26:14.312100 3025 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.34" L10: "cluster.go:125: [init] Using Kubernetes version: v1.34.8" L11: "cluster.go:125: [preflight] Running pre-flight checks" L12: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-9da887dd77__ could not be reached" L13: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-9da887dd77__: lookup ci-4593.2.2-n-9da887dd77 on 168.63.129.16:53: no such host" L14: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L15: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster" L16: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection" L17: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_" L18: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__" L19: "cluster.go:125: [certs] Generating __ca__ certificate and key" L20: "cluster.go:125: [certs] Generating __apiserver__ certificate and key" L21: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4593.2.2-n-9da887dd77 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.?96.0.1 10.0.0.11]" L22: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key" L23: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key" L24: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key" L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation" L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation" L27: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation" L28: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation" L29: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation" L30: "cluster.go:125: [certs] Generating __sa__ key and public key" L31: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__" L32: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file" L33: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file" L34: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file" L35: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file" L36: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file" L37: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__" L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__" L39: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__" L40: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__" L41: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__" L42: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__" L43: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__" L44: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__" L45: "cluster.go:125: [kubelet-start] Starting the kubelet" L46: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__" L47: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s" L48: "cluster.go:125: [kubelet-check] The kubelet is healthy after 1.001946075s" L49: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s" L50: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.11:6443/livez" L51: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz" L52: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez" L53: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 2.170826921s" L54: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 2.614821315s" L55: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 4.501626068s" L56: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace" L57: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster" L58: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs" L59: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-9da887dd77 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-lo?ad-balancers]" L60: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-9da887dd77 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]" L61: "cluster.go:125: [bootstrap-token] Using token: ve3vwj.q469mlw9fnaj4tho" L62: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles" L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes" L64: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials" L65: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token" L66: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster" L67: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace" L68: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key" L69: "cluster.go:125: [addons] Applied essential addon: CoreDNS" L70: "cluster.go:125: [addons] Applied essential addon: kube-proxy" L71: "cluster.go:125: " L72: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!" L73: "cluster.go:125: " L74: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:" L75: "cluster.go:125: " L76: "cluster.go:125: mkdir -p $HOME/.kube" L77: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config" L78: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config" L79: "cluster.go:125: " L80: "cluster.go:125: Alternatively, if you are the root user, you can run:" L81: "cluster.go:125: " L82: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf" L83: "cluster.go:125: " L84: "cluster.go:125: You should now deploy a pod network to the cluster." L85: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:" L86: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/" L87: "cluster.go:125: " L88: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:" L89: "cluster.go:125: " L90: "cluster.go:125: kubeadm join 10.0.0.11:6443 --token ve3vwj.q469mlw9fnaj4tho _" L91: "cluster.go:125: --discovery-token-ca-cert-hash sha256:d6bc370c9f74b435f1ceb28915a71c7e21ddf837837d469f5dfeab615e0f2b07 " L92: "cluster.go:125: i Using Cilium version 1.12.5" L93: "cluster.go:125: ? Auto-detected cluster name: kubernetes" L94: "cluster.go:125: ? Auto-detected datapath mode: tunnel" L95: "cluster.go:125: ? Auto-detected kube-proxy has been installed" L96: "cluster.go:125: i helm template --namespace kube-system cilium cilium/cilium --version 1.12.5 --set cluster.id=0,cluster.name=kubernetes,encryption.nodeEncryption=false,extraConfig.cluster-pool-ipv4-?cidr=192.168.0.0/17,extraConfig.enable-endpoint-routes=true,kubeProxyReplacement=disabled,operator.replicas=1,serviceAccounts.cilium.name=cilium,serviceAccounts.operator.name=cilium-operator,tunnel=vx?lan" L97: "cluster.go:125: i Storing helm values file in kube-system/cilium-cli-helm-values Secret" L98: "cluster.go:125: ? Created CA in secret cilium-ca" L99: "cluster.go:125: ? Generating certificates for Hubble..." L100: "cluster.go:125: ? Creating Service accounts..." L101: "cluster.go:125: ? Creating Cluster roles..." L102: "cluster.go:125: ? Creating ConfigMap for Cilium version 1.12.5..." L103: "cluster.go:125: i Manual overwrite in ConfigMap: enable-endpoint-routes=true" L104: "cluster.go:125: i Manual overwrite in ConfigMap: cluster-pool-ipv4-cidr=192.168.0.0/17" L105: "cluster.go:125: ? Creating Agent DaemonSet..." L106: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog" L107: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the ___appArmorProfile___ fi?eld instead__ subsys=klog" L108: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the ___appArmorProfile___ field i?nstead__ subsys=klog" L109: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog" L110: "cluster.go:125: ? Creating Operator Deployment..." L111: "cluster.go:125: ? Waiting for Cilium to be installed and ready..." L112: "cluster.go:125: ? Cilium was successfully installed! Run _cilium status_ to view installation health" L113: "cluster.go:125: ?[33m /??_" L114: "cluster.go:125: ?[36m /???[33m___/?[32m??_?[0m Cilium: ?[32mOK?[0m" L115: "cluster.go:125: ?[36m ___?[31m/??_?[32m__/?[0m Operator: ?[32mOK?[0m" L116: "cluster.go:125: ?[32m /???[31m___/?[35m??_?[0m Hubble: ?[36mdisabled?[0m" L117: "cluster.go:125: ?[32m ___?[34m/??_?[35m__/?[0m ClusterMesh: ?[36mdisabled?[0m" L118: "cluster.go:125: ?[34m ___/" L119: "cluster.go:125: ?[0m" L120: "cluster.go:125: DaemonSet cilium " L121: "cluster.go:125: Deployment cilium-operator " L122: "cluster.go:125: Containers: cilium " L123: "cluster.go:125: cilium-operator " L124: "cluster.go:125: Cluster Pods: 0/0 managed by Cilium" L125: "cluster.go:125: W0604 23:27:26.746243 2580 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration" L126: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L127: "cluster.go:125: jq: error (at 🟢 ok **kubeadm.v1.34.4.flannel.base**; Succeeded: azure (1) 🟢 ok **kubeadm.v1.35.1.calico.base**; Succeeded: azure (3); Failed: azure (1, 2)
                Diagnostic output for azure, run 2 ``` L1: " Error: _cluster.go:125: I0604 23:36:03.801898 2920 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.35" L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.35.5" L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.35.5" L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.35.5" L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.35.5" L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.13.1" L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1" L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.6-0" L9: "cluster.go:125: I0604 23:36:14.345151 3133 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.35" L10: "cluster.go:125: [init] Using Kubernetes version: v1.35.5" L11: "cluster.go:125: [preflight] Running pre-flight checks" L12: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-45c99985f5__ could not be reached" L13: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-45c99985f5__: lookup ci-4593.2.2-n-45c99985f5 on 168.63.129.16:53: no such host" L14: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L15: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster" L16: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection" L17: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_" L18: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__" L19: "cluster.go:125: [certs] Generating __ca__ certificate and key" L20: "cluster.go:125: [certs] Generating __apiserver__ certificate and key" L21: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4593.2.2-n-45c99985f5 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.?96.0.1 10.0.0.7]" L22: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key" L23: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key" L24: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key" L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation" L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation" L27: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation" L28: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation" L29: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation" L30: "cluster.go:125: [certs] Generating __sa__ key and public key" L31: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__" L32: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file" L33: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file" L34: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file" L35: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file" L36: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file" L37: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__" L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__" L39: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__" L40: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__" L41: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__" L42: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__" L43: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__" L44: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__" L45: "cluster.go:125: [kubelet-start] Starting the kubelet" L46: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__" L47: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s" L48: "cluster.go:125: [kubelet-check] The kubelet is healthy after 501.452037ms" L49: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s" L50: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.7:6443/livez" L51: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz" L52: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez" L53: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 2.006070078s" L54: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 2.506234145s" L55: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 4.001076609s" L56: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace" L57: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster" L58: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs" L59: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-45c99985f5 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-lo?ad-balancers]" L60: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-45c99985f5 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]" L61: "cluster.go:125: [bootstrap-token] Using token: dq4u3u.68yw11mog5xo54o3" L62: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles" L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes" L64: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials" L65: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token" L66: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster" L67: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace" L68: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key" L69: "cluster.go:125: [addons] Applied essential addon: CoreDNS" L70: "cluster.go:125: [addons] Applied essential addon: kube-proxy" L71: "cluster.go:125: " L72: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!" L73: "cluster.go:125: " L74: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:" L75: "cluster.go:125: " L76: "cluster.go:125: mkdir -p $HOME/.kube" L77: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config" L78: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config" L79: "cluster.go:125: " L80: "cluster.go:125: Alternatively, if you are the root user, you can run:" L81: "cluster.go:125: " L82: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf" L83: "cluster.go:125: " L84: "cluster.go:125: You should now deploy a pod network to the cluster." L85: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:" L86: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/" L87: "cluster.go:125: " L88: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:" L89: "cluster.go:125: " L90: "cluster.go:125: kubeadm join 10.0.0.7:6443 --token dq4u3u.68yw11mog5xo54o3 _" L91: "cluster.go:125: --discovery-token-ca-cert-hash sha256:30799debc36bddc989264c7151a8e6379071c399a1062f443044961c69492c31 " L92: "cluster.go:125: namespace/tigera-operator created" L93: "cluster.go:125: serviceaccount/tigera-operator created" L94: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator-secrets created" L95: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator created" L96: "cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created" L97: "cluster.go:125: rolebinding.rbac.authorization.k8s.io/tigera-operator-secrets created" L98: "cluster.go:125: deployment.apps/tigera-operator created" L99: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met" L100: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met" L101: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met" L102: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met" L103: "cluster.go:125: installation.operator.tigera.io/default created" L104: "cluster.go:125: apiserver.operator.tigera.io/default created" L105: "cluster.go:125: goldmane.operator.tigera.io/default created" L106: "cluster.go:125: whisker.operator.tigera.io/default created" L107: "cluster.go:125: W0604 23:38:08.465588 2571 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration" L108: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L109: "--- FAIL: kubeadm.v1.35.1.calico.base/nginx_deployment (8.13s)" L110: "cluster.go:145: __kubectl get deployments -o json | jq _.items | .[] | .status.readyReplicas___ failed: output , status ssh: handshake failed: read tcp 10.200.1.4:36480-_20.57.153.118:22: read: connec?tion reset by peer" L111: "--- FAIL: kubeadm.v1.35.1.calico.base/NFS_deployment (1.02s)" L112: "kubeadm.go:238: unable to add helm NFS repo: dial tcp 20.57.153.118:22: connect: connection refused_" L113: " " ```                 Diagnostic output for azure, run 1 ``` L1: " Error: _cluster.go:125: I0604 23:20:05.016579 2762 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.35" L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.35.5" L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.35.5" L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.35.5" L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.35.5" L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.13.1" L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1" L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.6-0" L9: "cluster.go:125: I0604 23:20:16.110882 2973 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.35" L10: "cluster.go:125: [init] Using Kubernetes version: v1.35.5" L11: "cluster.go:125: [preflight] Running pre-flight checks" L12: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-9cba401af6__ could not be reached" L13: "cluster.go:125: [WARNING Hostname]: hostname __ci-4593.2.2-n-9cba401af6__: lookup ci-4593.2.2-n-9cba401af6 on 168.63.129.16:53: no such host" L14: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L15: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster" L16: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection" L17: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_" L18: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__" L19: "cluster.go:125: [certs] Generating __ca__ certificate and key" L20: "cluster.go:125: [certs] Generating __apiserver__ certificate and key" L21: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4593.2.2-n-9cba401af6 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.?96.0.1 10.0.0.23]" L22: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key" L23: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key" L24: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key" L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation" L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation" L27: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation" L28: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation" L29: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation" L30: "cluster.go:125: [certs] Generating __sa__ key and public key" L31: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__" L32: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file" L33: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file" L34: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file" L35: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file" L36: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file" L37: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__" L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__" L39: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__" L40: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__" L41: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__" L42: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__" L43: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__" L44: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__" L45: "cluster.go:125: [kubelet-start] Starting the kubelet" L46: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__" L47: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s" L48: "cluster.go:125: [kubelet-check] The kubelet is healthy after 503.70358ms" L49: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s" L50: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.23:6443/livez" L51: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz" L52: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez" L53: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 2.010966844s" L54: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 2.455358464s" L55: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 4.503007913s" L56: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace" L57: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster" L58: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs" L59: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-9cba401af6 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-lo?ad-balancers]" L60: "cluster.go:125: [mark-control-plane] Marking the node ci-4593.2.2-n-9cba401af6 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]" L61: "cluster.go:125: [bootstrap-token] Using token: upjq40.wy744ztxt24fl9dv" L62: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles" L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes" L64: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials" L65: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token" L66: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster" L67: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace" L68: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key" L69: "cluster.go:125: [addons] Applied essential addon: CoreDNS" L70: "cluster.go:125: [addons] Applied essential addon: kube-proxy" L71: "cluster.go:125: " L72: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!" L73: "cluster.go:125: " L74: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:" L75: "cluster.go:125: " L76: "cluster.go:125: mkdir -p $HOME/.kube" L77: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config" L78: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config" L79: "cluster.go:125: " L80: "cluster.go:125: Alternatively, if you are the root user, you can run:" L81: "cluster.go:125: " L82: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf" L83: "cluster.go:125: " L84: "cluster.go:125: You should now deploy a pod network to the cluster." L85: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:" L86: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/" L87: "cluster.go:125: " L88: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:" L89: "cluster.go:125: " L90: "cluster.go:125: kubeadm join 10.0.0.23:6443 --token upjq40.wy744ztxt24fl9dv _" L91: "cluster.go:125: --discovery-token-ca-cert-hash sha256:c1404a1e6265a1fd1afdfe3a29a9271fd556cb6bb32c70058240d7bfe84710f7 " L92: "cluster.go:125: namespace/tigera-operator created" L93: "cluster.go:125: serviceaccount/tigera-operator created" L94: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator-secrets created" L95: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator created" L96: "cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created" L97: "cluster.go:125: rolebinding.rbac.authorization.k8s.io/tigera-operator-secrets created" L98: "cluster.go:125: deployment.apps/tigera-operator created" L99: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met" L100: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met" L101: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met" L102: "cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met" L103: "cluster.go:125: installation.operator.tigera.io/default created" L104: "cluster.go:125: apiserver.operator.tigera.io/default created" L105: "cluster.go:125: goldmane.operator.tigera.io/default created" L106: "cluster.go:125: whisker.operator.tigera.io/default created" L107: "cluster.go:125: W0604 23:22:11.188315 2595 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration" L108: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_" L109: "cluster.go:125: jq: error (at 🟢 ok **kubeadm.v1.35.1.cilium.base**; Succeeded: azure (1) 🟢 ok **kubeadm.v1.35.1.flannel.base**; Succeeded: azure (1) 🟢 ok **kubeadm.v1.36.1.calico.base**; Succeeded: azure (1) 🟢 ok **kubeadm.v1.36.1.cilium.base**; Succeeded: azure (1) 🟢 ok **kubeadm.v1.36.1.flannel.base**; Succeeded: azure (1) 🟢 ok **sysext.custom-docker.sysext**; Succeeded: azure (1) 🟢 ok **sysext.disable-containerd**; Succeeded: azure (1) 🟢 ok **sysext.disable-docker**; Succeeded: azure (1) 🟢 ok **sysext.simple**; Succeeded: azure (1) 🟢 ok **systemd.journal.user**; Succeeded: azure (1) 🟢 ok **systemd.sysusers.gshadow**; Succeeded: azure (1)