### Test report for 4628.1.2+nightly-20260603-2100 / amd64
**Platforms tested** : qemu_uefi_secure
🟢 ok **bpf.ig**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.basic**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.cloudinit.basic**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.cloudinit.multipart-mime**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.cloudinit.script**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.disk.raid0.data**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.disk.raid0.root**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.disk.raid1.data**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.disk.raid1.root**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _raid.go:223: machine __7bd6496f-14fd-4bda-a901-33f5577416ee__ failed to start: ssh journalctl failed: time limit exceeded: dial tcp 10.0.0.104:22: connect: no route to host"
L2: "harness.go:616: Found emergency shell on machine 7bd6496f-14fd-4bda-a901-33f5577416ee console"
L3: "harness.go:616: Found systemd unit failed to start (?[0;1;39mignition-disks.service?[0m - Ignition (disks). ) on machine 7bd6496f-14fd-4bda-a901-33f5577416ee console"
L4: "harness.go:616: Found systemd dependency unit failed to start (?[0;1;39msystemd-fsck????[0mm Check on /dev/disk/by-label/ROOT. ) on machine 7bd6496f-14fd-4bda-a901-33f5577416ee console_"
L5: " "
```
🟢 ok **cl.etcd-member.discovery**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.etcd-member.etcdctlv3**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.etcd-member.v2-backup-restore**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.filesystem**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.flannel.udp**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _harness.go:646: Cluster failed starting machines: machine __2d11ea91-be26-443f-89a0-85dd1a897fa1__ failed to start: ssh journalctl failed: time limit exceeded: dial tcp 10.0.0.51:22: connect: ?connection refused"
L2: "harness.go:616: Found systemd unit failed to start (?[0;1;39msystemd-hwdb-updat???ervice?[0m - Rebuild Hardware Database. ) on machine 2d11ea91-be26-443f-89a0-85dd1a897fa1 console"
L3: "harness.go:616: Found systemd dependency unit failed to start (?[0;1;39msystemd-fsck????[0mem Check on /dev/disk/by-label/OEM. ) on machine 2d11ea91-be26-443f-89a0-85dd1a897fa1 console_"
L4: " "
```
🟢 ok **cl.flannel.vxlan**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.instantiated.enable-unit**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.kargs**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.luks**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.oem.indirect**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.oem.indirect.new**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.oem.regular**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.oem.regular.new**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.oem.reuse**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.oem.wipe**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.partition_on_boot_disk**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.symlink**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.translation**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v1.btrfsroot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v1.ext4root**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v1.groups**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v1.once**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v1.sethostname**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v1.users**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v1.xfsroot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v2.btrfsroot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v2.ext4root**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v2.users**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v2.xfsroot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v2_1.ext4checkexisting**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v2_1.swap**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.ignition.v2_1.vfat**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.install.cloudinit**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.internet**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.locksmith.cluster**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _harness.go:646: Cluster failed starting machines: machine __fba4a255-a581-4f25-b6d0-6118a8f23467__ failed to start: ssh journalctl failed: time limit exceeded: dial tcp 10.0.0.11:22: connect: ?no route to host_"
L2: " "
```
🟢 ok **cl.network.initramfs.second-boot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.network.iptables**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.network.listeners**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.network.nftables**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.network.wireguard**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.omaha.ping**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.osreset.ignition-rerun**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.overlay.cleanup**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.swap_activation**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.sysext.boot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.sysext.fallbackdownload**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tang.nonroot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tang.root**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.toolbox.dnf-install**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tpm.eventlog**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tpm.nonroot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tpm.root**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tpm.root-cryptenroll**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tpm.root-cryptenroll-pcr-noupdate**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.tpm.root-cryptenroll-pcr-withupdate**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.update.badverity**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _harness.go:646: Cluster failed starting machines: machine __5843d5c8-687a-4a95-89b8-226d74db4f3d__ failed to start: ssh journalctl failed: time limit exceeded: dial tcp 10.0.0.7:22: connect: c?onnection refused_"
L2: " "
```
🟢 ok **cl.update.reboot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.users.shells**; Succeeded: qemu_uefi_secure (1)
🟢 ok **cl.verity**; Succeeded: qemu_uefi_secure (1)
🟢 ok **confext.skiprefresh**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _harness.go:616: Found systemd dependency unit failed to start (?[0;1;39mserial-getty???S0.service?[0m - Serial Getty on ttyS0. ) on machine b8f5e9ca-a07a-4bc8-9c79-f5d50daa188f console_"
L2: " "
```
🟢 ok **coreos.auth.verify**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.groups**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.once**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.resource.local**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.resource.remote**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.resource.s3.versioned**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.security.tls**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.sethostname**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.ignition.systemd.enable-service**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.locksmith.reboot**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.locksmith.tls**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.selinux.boolean**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.selinux.enforce**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _selinux.go:115: failed to reboot machine: machine __2b9f4ae2-2295-43f9-af0e-3d37ef58e77a__ failed basic checks: some systemd units failed:"
L2: "??? systemd-hwdb-update.service loaded failed failed Rebuild Hardware Database"
L3: "status: "
L4: "journal:-- No entries --"
L5: "harness.go:616: Found systemd unit failed to start (?[0;1;39msystemd-hwdb-updat???ervice?[0m - Rebuild Hardware Database. ) on machine 2b9f4ae2-2295-43f9-af0e-3d37ef58e77a console"
L6: "harness.go:616: Found systemd dependency unit failed to start (?[0;1;39msystemd-fsck????[0mem Check on /dev/disk/by-label/OEM. ) on machine 2b9f4ae2-2295-43f9-af0e-3d37ef58e77a console_"
L7: " "
```
🟢 ok **coreos.tls.fetch-urls**; Succeeded: qemu_uefi_secure (1)
🟢 ok **coreos.update.badusr**; Succeeded: qemu_uefi_secure (1)
🟢 ok **devcontainer.docker**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _devcontainer.go:228: creating a machine failed: machine __09676876-7627-45b3-b1e2-4bb4c6b81597__ failed to start: ssh journalctl failed: time limit exceeded: dial tcp 10.0.0.10:22: connect: no? route to host_"
L2: " "
```
🟢 ok **devcontainer.systemd-nspawn**; Succeeded: qemu_uefi_secure (1)
🟢 ok **docker.base**; Succeeded: qemu_uefi_secure (1)
🟢 ok **docker.btrfs-storage**; Succeeded: qemu_uefi_secure (1)
🟢 ok **docker.containerd-restart**; Succeeded: qemu_uefi_secure (1)
🟢 ok **docker.enable-service.sysext**; Succeeded: qemu_uefi_secure (1)
🟢 ok **docker.lib-coreos-dockerd-compat**; Succeeded: qemu_uefi_secure (1)
🟢 ok **docker.network-openbsd-nc**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _docker.go:413: creating netcat containers"
L2: "cluster.go:125: #0 building with __default__ instance using docker driver"
L3: "cluster.go:125: "
L4: "cluster.go:125: #1 [internal] load build definition from Dockerfile"
L5: "cluster.go:125: #1 transferring dockerfile:"
L6: "cluster.go:125: #1 transferring dockerfile: 108B 0.6s done"
L7: "cluster.go:125: #1 DONE 2.8s"
L8: "cluster.go:125: "
L9: "cluster.go:125: #2 [internal] load .dockerignore"
L10: "cluster.go:125: #2 transferring context:"
L11: "cluster.go:125: #2 transferring context: 2B 0.6s done"
L12: "cluster.go:125: #2 DONE 1.8s"
L13: "cluster.go:125: "
L14: "cluster.go:125: #3 [internal] load build context"
L15: "cluster.go:125: #3 transferring context: 3.13MB 2.9s"
L16: "cluster.go:125: #3 transferring context: 3.70MB 3.5s done"
L17: "cluster.go:125: #3 DONE 4.4s"
L18: "cluster.go:125: "
L19: "cluster.go:125: #4 [1/1] COPY . /"
L20: "cluster.go:125: #4 DONE 2.0s"
L21: "cluster.go:125: "
L22: "cluster.go:125: #5 exporting to image"
L23: "cluster.go:125: #5 exporting layers"
L24: "cluster.go:125: #5 exporting layers 2.1s done"
L25: "cluster.go:125: #5 writing image sha256:352adabd541df8ba4bf3722297ea6e8e0ed5539737340b4e7c98918d18ef268e 0.0s done"
L26: "cluster.go:125: #5 naming to docker.io/library/netcat"
L27: "cluster.go:125: #5 naming to docker.io/library/netcat 0.4s done"
L28: "cluster.go:125: #5 DONE 3.4s"
L29: "cluster.go:125: #0 building with __default__ instance using docker driver"
L30: "cluster.go:125: "
L31: "cluster.go:125: #1 [internal] load build definition from Dockerfile"
L32: "cluster.go:125: #1 transferring dockerfile:"
L33: "cluster.go:125: #1 transferring dockerfile: 108B 0.5s done"
L34: "cluster.go:125: #1 DONE 2.2s"
L35: "cluster.go:125: "
L36: "cluster.go:125: #2 [internal] load .dockerignore"
L37: "cluster.go:125: #2 transferring context:"
L38: "cluster.go:125: #2 transferring context: 2B 0.2s done"
L39: "cluster.go:125: #2 DONE 1.1s"
L40: "cluster.go:125: "
L41: "cluster.go:125: #3 [internal] load build context"
L42: "cluster.go:125: #3 transferring context: 3.70MB 2.0s"
L43: "cluster.go:125: #3 transferring context: 3.70MB 2.0s done"
L44: "cluster.go:125: #3 DONE 3.6s"
L45: "cluster.go:125: "
L46: "cluster.go:125: #4 [1/1] COPY . /"
L47: "cluster.go:125: #4 DONE 1.4s"
L48: "cluster.go:125: "
L49: "cluster.go:125: #5 exporting to image"
L50: "cluster.go:125: #5 exporting layers"
L51: "cluster.go:125: #5 exporting layers 1.7s done"
L52: "cluster.go:125: #5 writing image sha256:5859e5f61ac5f6575b044a816a4843dab8b6a197234fb618fc48e8a9b646f4fd 0.1s done"
L53: "cluster.go:125: #5 naming to docker.io/library/netcat"
L54: "cluster.go:125: #5 naming to docker.io/library/netcat 0.3s done"
L55: "cluster.go:125: #5 DONE 2.9s"
L56: "docker.go:471: [0] Process exited with status 124 [1] Process exited with status 1_"
L57: " "
```
🟢 ok **docker.selinux**; Succeeded: qemu_uefi_secure (1)
🟢 ok **docker.userns**; Succeeded: qemu_uefi_secure (1)
🟢 ok **kubeadm.v1.34.4.calico.base**; Succeeded: qemu_uefi_secure (1)
🟢 ok **kubeadm.v1.34.4.cilium.base**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _cluster.go:125: I0604 03:56:28.121181 2095 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.34"
L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.34.8"
L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.34.8"
L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.34.8"
L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.34.8"
L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.12.1"
L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1"
L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.5-0"
L9: "cluster.go:125: I0604 03:57:23.027120 2387 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.34"
L10: "cluster.go:125: [init] Using Kubernetes version: v1.34.8"
L11: "cluster.go:125: [preflight] Running pre-flight checks"
L12: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_"
L13: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster"
L14: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection"
L15: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_"
L16: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__"
L17: "cluster.go:125: [certs] Generating __ca__ certificate and key"
L18: "cluster.go:125: [certs] Generating __apiserver__ certificate and key"
L19: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local localhost] and IPs [10.96.0.1 10.0.0.1?15]"
L20: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key"
L21: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key"
L22: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key"
L23: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation"
L24: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation"
L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation"
L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation"
L27: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation"
L28: "cluster.go:125: [certs] Generating __sa__ key and public key"
L29: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__"
L30: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file"
L31: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file"
L32: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file"
L33: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file"
L34: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file"
L35: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__"
L36: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__"
L37: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__"
L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__"
L39: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__"
L40: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__"
L41: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__"
L42: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__"
L43: "cluster.go:125: [kubelet-start] Starting the kubelet"
L44: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__"
L45: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s"
L46: "cluster.go:125: [kubelet-check] The kubelet is healthy after 1.00427494s"
L47: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s"
L48: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.115:6443/livez"
L49: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz"
L50: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez"
L51: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 1.516242437s"
L52: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 2.252897047s"
L53: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 5.003591607s"
L54: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace"
L55: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster"
L56: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs"
L57: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]"
L58: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]"
L59: "cluster.go:125: [bootstrap-token] Using token: h0ex0t.z5kc859nzdja71az"
L60: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles"
L61: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes"
L62: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials"
L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token"
L64: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster"
L65: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace"
L66: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key"
L67: "cluster.go:125: [addons] Applied essential addon: CoreDNS"
L68: "cluster.go:125: [addons] Applied essential addon: kube-proxy"
L69: "cluster.go:125: "
L70: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!"
L71: "cluster.go:125: "
L72: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:"
L73: "cluster.go:125: "
L74: "cluster.go:125: mkdir -p $HOME/.kube"
L75: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config"
L76: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config"
L77: "cluster.go:125: "
L78: "cluster.go:125: Alternatively, if you are the root user, you can run:"
L79: "cluster.go:125: "
L80: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf"
L81: "cluster.go:125: "
L82: "cluster.go:125: You should now deploy a pod network to the cluster."
L83: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:"
L84: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/"
L85: "cluster.go:125: "
L86: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:"
L87: "cluster.go:125: "
L88: "cluster.go:125: kubeadm join 10.0.0.115:6443 --token h0ex0t.z5kc859nzdja71az _"
L89: "cluster.go:125: --discovery-token-ca-cert-hash sha256:03018b171abee44dd7d3a3182b1e8fae92a9cc8a818906d60f39b28a8604416e "
L90: "cluster.go:125: i Using Cilium version 1.12.5"
L91: "cluster.go:125: ? Auto-detected cluster name: kubernetes"
L92: "cluster.go:125: ? Auto-detected datapath mode: tunnel"
L93: "cluster.go:125: ? Auto-detected kube-proxy has been installed"
L94: "cluster.go:125: i helm template --namespace kube-system cilium cilium/cilium --version 1.12.5 --set cluster.id=0,cluster.name=kubernetes,encryption.nodeEncryption=false,extraConfig.cluster-pool-ipv4-?cidr=192.168.0.0/17,extraConfig.enable-endpoint-routes=true,kubeProxyReplacement=disabled,operator.replicas=1,serviceAccounts.cilium.name=cilium,serviceAccounts.operator.name=cilium-operator,tunnel=vx?lan"
L95: "cluster.go:125: i Storing helm values file in kube-system/cilium-cli-helm-values Secret"
L96: "cluster.go:125: ? Created CA in secret cilium-ca"
L97: "cluster.go:125: ? Generating certificates for Hubble..."
L98: "cluster.go:125: ? Creating Service accounts..."
L99: "cluster.go:125: ? Creating Cluster roles..."
L100: "cluster.go:125: ? Creating ConfigMap for Cilium version 1.12.5..."
L101: "cluster.go:125: i Manual overwrite in ConfigMap: enable-endpoint-routes=true"
L102: "cluster.go:125: i Manual overwrite in ConfigMap: cluster-pool-ipv4-cidr=192.168.0.0/17"
L103: "cluster.go:125: ? Creating Agent DaemonSet..."
L104: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L105: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the ___appArmorProfile___ fi?eld instead__ subsys=klog"
L106: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the ___appArmorProfile___ field i?nstead__ subsys=klog"
L107: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L108: "cluster.go:125: ? Creating Operator Deployment..."
L109: "cluster.go:125: ? Waiting for Cilium to be installed and ready..."
L110: "cluster.go:125: ? Cilium was successfully installed! Run _cilium status_ to view installation health"
L111: "cluster.go:125: ?[33m /??_"
L112: "cluster.go:125: ?[36m /???[33m___/?[32m??_?[0m Cilium: ?[32mOK?[0m"
L113: "cluster.go:125: ?[36m ___?[31m/??_?[32m__/?[0m Operator: ?[32mOK?[0m"
L114: "cluster.go:125: ?[32m /???[31m___/?[35m??_?[0m Hubble: ?[36mdisabled?[0m"
L115: "cluster.go:125: ?[32m ___?[34m/??_?[35m__/?[0m ClusterMesh: ?[36mdisabled?[0m"
L116: "cluster.go:125: ?[34m ___/"
L117: "cluster.go:125: ?[0m"
L118: "cluster.go:125: Deployment cilium-operator "
L119: "cluster.go:125: DaemonSet cilium "
L120: "cluster.go:125: Containers: cilium-operator "
L121: "cluster.go:125: cilium "
L122: "cluster.go:125: Cluster Pods: 0/0 managed by Cilium"
L123: "cluster.go:125: W0604 03:58:22.038959 1828 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration"
L124: "cluster.go:125: [WARNING Service-Kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_"
L125: "--- FAIL: kubeadm.v1.34.4.cilium.base/IPSec_encryption (89.30s)"
L126: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L127: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the ___appArmorProfile___ fi?eld instead__ subsys=klog"
L128: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the ___appArmorProfile___ field i?nstead__ subsys=klog"
L129: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L130: "cluster.go:125: Error: Unable to determine status: timeout while waiting for status to become successful: context deadline exceeded"
L131: "cluster.go:145: __/opt/bin/cilium status --wait --wait-duration 1m__ failed: output ?[33m /????_"
L132: "?[36m /?????[33m___/?[32m????_?[0m Cilium: ?[31m2 errors?[0m"
L133: "?[36m ___?[31m/????_?[32m__/?[0m Operator: ?[32mOK?[0m"
L134: "?[32m /?????[31m___/?[35m????_?[0m Hubble: ?[36mdisabled?[0m"
L135: "?[32m ___?[34m/????_?[35m__/?[0m ClusterMesh: ?[36mdisabled?[0m"
L136: "?[34m ___/"
L137: "?[0m"
L138: "Deployment cilium-operator Desired: 1, Ready: ?[32m1/1?[0m, Available: ?[32m1/1?[0m"
L139: "DaemonSet cilium Desired: 2, Unavailable: ?[31m2/2?[0m"
L140: "Containers: cilium Running: ?[32m2?[0m"
L141: "cilium-operator Running: ?[32m1?[0m"
L142: "Cluster Pods: 3/5 managed by Cilium"
L143: "Image versions cilium quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5: 2"
L144: "cilium-operator quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e: 1"
L145: "Errors: cilium cilium 2 pods of DaemonSet cilium are not ready"
L146: "cilium cilium-hdvpv unable to retrieve cilium status: command terminated with exit code 1, status Process exited with status 1_"
L147: " "
```
🟢 ok **kubeadm.v1.34.4.flannel.base**; Succeeded: qemu_uefi_secure (1)
🟢 ok **kubeadm.v1.35.1.calico.base**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _cluster.go:125: I0604 01:53:03.681467 2103 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.35"
L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.35.5"
L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.35.5"
L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.35.5"
L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.35.5"
L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.13.1"
L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1"
L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.6-0"
L9: "cluster.go:125: I0604 01:54:30.838657 2420 version.go:260] remote version is much newer: v1.36.1; falling back to: stable-1.35"
L10: "cluster.go:125: [init] Using Kubernetes version: v1.35.5"
L11: "cluster.go:125: [preflight] Running pre-flight checks"
L12: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_"
L13: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster"
L14: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection"
L15: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_"
L16: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__"
L17: "cluster.go:125: [certs] Generating __ca__ certificate and key"
L18: "cluster.go:125: [certs] Generating __apiserver__ certificate and key"
L19: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local localhost] and IPs [10.96.0.1 10.0.0.3?6]"
L20: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key"
L21: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key"
L22: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key"
L23: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation"
L24: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation"
L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation"
L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation"
L27: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation"
L28: "cluster.go:125: [certs] Generating __sa__ key and public key"
L29: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__"
L30: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file"
L31: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file"
L32: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file"
L33: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file"
L34: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file"
L35: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__"
L36: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__"
L37: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__"
L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__"
L39: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__"
L40: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__"
L41: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__"
L42: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__"
L43: "cluster.go:125: [kubelet-start] Starting the kubelet"
L44: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__"
L45: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s"
L46: "cluster.go:125: [kubelet-check] The kubelet is healthy after 1.014972171s"
L47: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s"
L48: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.36:6443/livez"
L49: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz"
L50: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez"
L51: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 7.027073899s"
L52: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 26.843872035s"
L53: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 57.795231656s"
L54: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace"
L55: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster"
L56: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs"
L57: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]"
L58: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]"
L59: "cluster.go:125: [bootstrap-token] Using token: 5t71h7.y29rv2zn58s99tgp"
L60: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles"
L61: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes"
L62: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials"
L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token"
L64: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster"
L65: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace"
L66: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key"
L67: "cluster.go:125: [addons] Applied essential addon: CoreDNS"
L68: "cluster.go:125: [addons] Applied essential addon: kube-proxy"
L69: "cluster.go:125: "
L70: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!"
L71: "cluster.go:125: "
L72: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:"
L73: "cluster.go:125: "
L74: "cluster.go:125: mkdir -p $HOME/.kube"
L75: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config"
L76: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config"
L77: "cluster.go:125: "
L78: "cluster.go:125: Alternatively, if you are the root user, you can run:"
L79: "cluster.go:125: "
L80: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf"
L81: "cluster.go:125: "
L82: "cluster.go:125: You should now deploy a pod network to the cluster."
L83: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:"
L84: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/"
L85: "cluster.go:125: "
L86: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:"
L87: "cluster.go:125: "
L88: "cluster.go:125: kubeadm join 10.0.0.36:6443 --token 5t71h7.y29rv2zn58s99tgp _"
L89: "cluster.go:125: --discovery-token-ca-cert-hash sha256:8343e5928b3b2ac543d3f20e10beb787c1518af991a23f024da44f7f97f9c7bc "
L90: "cluster.go:125: namespace/tigera-operator created"
L91: "cluster.go:125: serviceaccount/tigera-operator created"
L92: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator-secrets created"
L93: "cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator created"
L94: "cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created"
L95: "cluster.go:125: rolebinding.rbac.authorization.k8s.io/tigera-operator-secrets created"
L96: "cluster.go:125: deployment.apps/tigera-operator created"
L97: "cluster.go:125: error: timed out waiting for the condition"
L98: "kubeadm.go:197: unable to setup cluster: unable to run master script: Process exited with status 1_"
L99: " "
```
🟢 ok **kubeadm.v1.35.1.cilium.base**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _cluster.go:125: W0604 01:01:07.723782 2206 version.go:108] could not fetch a Kubernetes version from the internet: unable to get URL __https://dl.k8s.io/release/stable-1.txt__: Get __https:?//dl.k8s.io/release/stable-1.txt__: context deadline exceeded (Client.Timeout exceeded while awaiting headers)"
L2: "cluster.go:125: W0604 01:01:07.729422 2206 version.go:109] falling back to the local client version: v1.35.1"
L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.35.1"
L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.35.1"
L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.35.1"
L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.35.1"
L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.13.1"
L8: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1"
L9: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.6-0"
L10: "cluster.go:125: W0604 01:09:24.326512 2796 version.go:108] could not fetch a Kubernetes version from the internet: unable to get URL __https://dl.k8s.io/release/stable-1.txt__: Get __https://dl.k8s?.io/release/stable-1.txt__: context deadline exceeded (Client.Timeout exceeded while awaiting headers)"
L11: "cluster.go:125: W0604 01:09:24.342072 2796 version.go:109] falling back to the local client version: v1.35.1"
L12: "cluster.go:125: [init] Using Kubernetes version: v1.35.1"
L13: "cluster.go:125: [preflight] Running pre-flight checks"
L14: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_"
L15: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster"
L16: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection"
L17: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_"
L18: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__"
L19: "cluster.go:125: [certs] Generating __ca__ certificate and key"
L20: "cluster.go:125: [certs] Generating __apiserver__ certificate and key"
L21: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local localhost] and IPs [10.96.0.1 10.0.0.1?4]"
L22: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key"
L23: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key"
L24: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key"
L25: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation"
L26: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation"
L27: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation"
L28: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation"
L29: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation"
L30: "cluster.go:125: [certs] Generating __sa__ key and public key"
L31: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__"
L32: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file"
L33: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file"
L34: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file"
L35: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file"
L36: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file"
L37: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__"
L38: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__"
L39: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__"
L40: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__"
L41: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__"
L42: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__"
L43: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__"
L44: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__"
L45: "cluster.go:125: [kubelet-start] Starting the kubelet"
L46: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__"
L47: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s"
L48: "cluster.go:125: [kubelet-check] The kubelet is healthy after 12.69685114s"
L49: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s"
L50: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.14:6443/livez"
L51: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz"
L52: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez"
L53: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 39.170340349s"
L54: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 56.846500581s"
L55: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 12m6.044045393s"
L56: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace"
L57: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster"
L58: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs"
L59: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]"
L60: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]"
L61: "cluster.go:125: [bootstrap-token] Using token: jvlcds.jjy6q0oyzgboderi"
L62: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles"
L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes"
L64: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials"
L65: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token"
L66: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster"
L67: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace"
L68: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key"
L69: "cluster.go:125: [addons] Applied essential addon: CoreDNS"
L70: "cluster.go:125: [addons] Applied essential addon: kube-proxy"
L71: "cluster.go:125: "
L72: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!"
L73: "cluster.go:125: "
L74: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:"
L75: "cluster.go:125: "
L76: "cluster.go:125: mkdir -p $HOME/.kube"
L77: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config"
L78: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config"
L79: "cluster.go:125: "
L80: "cluster.go:125: Alternatively, if you are the root user, you can run:"
L81: "cluster.go:125: "
L82: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf"
L83: "cluster.go:125: "
L84: "cluster.go:125: You should now deploy a pod network to the cluster."
L85: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:"
L86: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/"
L87: "cluster.go:125: "
L88: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:"
L89: "cluster.go:125: "
L90: "cluster.go:125: kubeadm join 10.0.0.14:6443 --token jvlcds.jjy6q0oyzgboderi _"
L91: "cluster.go:125: --discovery-token-ca-cert-hash sha256:060857e5a94565ea51d86cb75459343bef07318447caef2e79a6553d6bbae38c "
L92: "cluster.go:125: i Using Cilium version 1.12.5"
L93: "cluster.go:125: ? Auto-detected cluster name: kubernetes"
L94: "cluster.go:125: ? Auto-detected datapath mode: tunnel"
L95: "cluster.go:125: ? Auto-detected kube-proxy has been installed"
L96: "cluster.go:125: i helm template --namespace kube-system cilium cilium/cilium --version 1.12.5 --set cluster.id=0,cluster.name=kubernetes,encryption.nodeEncryption=false,extraConfig.cluster-pool-ipv4-?cidr=192.168.0.0/17,extraConfig.enable-endpoint-routes=true,kubeProxyReplacement=disabled,operator.replicas=1,serviceAccounts.cilium.name=cilium,serviceAccounts.operator.name=cilium-operator,tunnel=vx?lan"
L97: "cluster.go:125: i Storing helm values file in kube-system/cilium-cli-helm-values Secret"
L98: "cluster.go:125: ? Created CA in secret cilium-ca"
L99: "cluster.go:125: ? Generating certificates for Hubble..."
L100: "cluster.go:125: ? Creating Service accounts..."
L101: "cluster.go:125: ? Creating Cluster roles..."
L102: "cluster.go:125: ? Creating ConfigMap for Cilium version 1.12.5..."
L103: "cluster.go:125: i Manual overwrite in ConfigMap: enable-endpoint-routes=true"
L104: "cluster.go:125: i Manual overwrite in ConfigMap: cluster-pool-ipv4-cidr=192.168.0.0/17"
L105: "cluster.go:125: ? Creating Agent DaemonSet..."
L106: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L107: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the ___appArmorProfile___ fi?eld instead__ subsys=klog"
L108: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the ___appArmorProfile___ field i?nstead__ subsys=klog"
L109: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L110: "cluster.go:125: ? Creating Operator Deployment..."
L111: "cluster.go:125: ? Waiting for Cilium to be installed and ready..."
L112: "cluster.go:125: ? Cilium was successfully installed! Run _cilium status_ to view installation health"
L113: "cluster.go:125: ?[33m /??_"
L114: "cluster.go:125: ?[36m /???[33m___/?[32m??_?[0m Cilium: ?[32mOK?[0m"
L115: "cluster.go:125: ?[36m ___?[31m/??_?[32m__/?[0m Operator: ?[32mOK?[0m"
L116: "cluster.go:125: ?[32m /???[31m___/?[35m??_?[0m Hubble: ?[36mdisabled?[0m"
L117: "cluster.go:125: ?[32m ___?[34m/??_?[35m__/?[0m ClusterMesh: ?[36mdisabled?[0m"
L118: "cluster.go:125: ?[34m ___/"
L119: "cluster.go:125: ?[0m"
L120: "cluster.go:125: DaemonSet cilium "
L121: "cluster.go:125: Deployment cilium-operator "
L122: "cluster.go:125: Containers: cilium "
L123: "cluster.go:125: cilium-operator "
L124: "cluster.go:125: Cluster Pods: 0/0 managed by Cilium"
L125: "cluster.go:125: W0604 01:29:20.570592 1887 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration"
L126: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_"
L127: "cluster.go:125: error: error execution phase kubelet-wait-bootstrap: failed while waiting for TLS bootstrap: context deadline exceeded"
L128: "cluster.go:125: To see the stack trace of this error execute with --v=5 or higher"
L129: "kubeadm.go:197: unable to setup cluster: unable to run worker script: Process exited with status 1_"
L130: " "
```
🟢 ok **kubeadm.v1.35.1.flannel.base**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _kubeadm.go:197: unable to setup cluster: unable to create etcd node: machine __da0f5b7b-ff06-4838-9611-43e4ef5c0faf__ failed basic checks: some systemd units failed:"
L2: "??? systemd-hwdb-update.service loaded failed failed Rebuild Hardware Database"
L3: "status: "
L4: "journal:-- No entries --"
L5: "harness.go:616: Found systemd unit failed to start (?[0;1;39msystemd-hwdb-updat???ervice?[0m - Rebuild Hardware Database. ) on machine da0f5b7b-ff06-4838-9611-43e4ef5c0faf console"
L6: "harness.go:616: Found systemd dependency unit failed to start (?[0;1;39msystemd-fsck????[0mem Check on /dev/disk/by-label/OEM. ) on machine da0f5b7b-ff06-4838-9611-43e4ef5c0faf console_"
L7: " "
```
🟢 ok **kubeadm.v1.36.1.calico.base**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.36.1"
L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.36.1"
L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.36.1"
L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.36.1"
L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.14.2"
L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.2"
L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.8-0"
L8: "cluster.go:125: [init] Using Kubernetes version: v1.36.1"
L9: "cluster.go:125: [preflight] Running pre-flight checks"
L10: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_"
L11: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster"
L12: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection"
L13: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_"
L14: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__"
L15: "cluster.go:125: [certs] Generating __ca__ certificate and key"
L16: "cluster.go:125: [certs] Generating __apiserver__ certificate and key"
L17: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local localhost] and IPs [10.96.0.1 10.0.0.8?8]"
L18: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key"
L19: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key"
L20: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key"
L21: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation"
L22: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation"
L23: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation"
L24: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation"
L25: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation"
L26: "cluster.go:125: [certs] Generating __sa__ key and public key"
L27: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__"
L28: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file"
L29: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file"
L30: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file"
L31: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file"
L32: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file"
L33: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__"
L34: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__"
L35: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__"
L36: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__"
L37: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__"
L38: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__"
L39: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__"
L40: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__"
L41: "cluster.go:125: [kubelet-start] Starting the kubelet"
L42: "cluster.go:125: error: error execution phase wait-control-plane: cannot obtain client without bootstrap: could not bootstrap the admin user in file admin.conf: unable to create ClusterRoleBinding: Pos?t __https://10.0.0.88:6443/apis/rbac.authorization.k8s.io/v1/clusterrolebindings?timeout=10s__: context deadline exceeded"
L43: "cluster.go:125: To see the stack trace of this error execute with --v=5 or higher"
L44: "kubeadm.go:197: unable to setup cluster: unable to run master script: Process exited with status 1_"
L45: " "
```
🟢 ok **kubeadm.v1.36.1.cilium.base**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.36.1"
L2: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.36.1"
L3: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.36.1"
L4: "cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.36.1"
L5: "cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.14.2"
L6: "cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.2"
L7: "cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.8-0"
L8: "cluster.go:125: [init] Using Kubernetes version: v1.36.1"
L9: "cluster.go:125: [preflight] Running pre-flight checks"
L10: "cluster.go:125: [WARNING Service-kubelet]: kubelet service is not enabled, please run _systemctl enable kubelet.service_"
L11: "cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster"
L12: "cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection"
L13: "cluster.go:125: [preflight] You can also perform this action beforehand using _kubeadm config images pull_"
L14: "cluster.go:125: [certs] Using certificateDir folder __/etc/kubernetes/pki__"
L15: "cluster.go:125: [certs] Generating __ca__ certificate and key"
L16: "cluster.go:125: [certs] Generating __apiserver__ certificate and key"
L17: "cluster.go:125: [certs] apiserver serving cert is signed for DNS names [kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local localhost] and IPs [10.96.0.1 10.0.0.3?1]"
L18: "cluster.go:125: [certs] Generating __apiserver-kubelet-client__ certificate and key"
L19: "cluster.go:125: [certs] Generating __front-proxy-ca__ certificate and key"
L20: "cluster.go:125: [certs] Generating __front-proxy-client__ certificate and key"
L21: "cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation"
L22: "cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation"
L23: "cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation"
L24: "cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation"
L25: "cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation"
L26: "cluster.go:125: [certs] Generating __sa__ key and public key"
L27: "cluster.go:125: [kubeconfig] Using kubeconfig folder __/etc/kubernetes__"
L28: "cluster.go:125: [kubeconfig] Writing __admin.conf__ kubeconfig file"
L29: "cluster.go:125: [kubeconfig] Writing __super-admin.conf__ kubeconfig file"
L30: "cluster.go:125: [kubeconfig] Writing __kubelet.conf__ kubeconfig file"
L31: "cluster.go:125: [kubeconfig] Writing __controller-manager.conf__ kubeconfig file"
L32: "cluster.go:125: [kubeconfig] Writing __scheduler.conf__ kubeconfig file"
L33: "cluster.go:125: [control-plane] Using manifest folder __/etc/kubernetes/manifests__"
L34: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-apiserver__"
L35: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-controller-manager__"
L36: "cluster.go:125: [control-plane] Creating static Pod manifest for __kube-scheduler__"
L37: "cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file __/var/lib/kubelet/kubeadm-flags.env__"
L38: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/instance-config.yaml__"
L39: "cluster.go:125: [patches] Applied patch of type __application/strategic-merge-patch+json__ to target __kubeletconfiguration__"
L40: "cluster.go:125: [kubelet-start] Writing kubelet configuration to file __/var/lib/kubelet/config.yaml__"
L41: "cluster.go:125: [kubelet-start] Starting the kubelet"
L42: "cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory __/etc/kubernetes/manifests__"
L43: "cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s"
L44: "cluster.go:125: [kubelet-check] The kubelet is healthy after 46.352751ms"
L45: "cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s"
L46: "cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.31:6443/livez"
L47: "cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz"
L48: "cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez"
L49: "cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 334.481125ms"
L50: "cluster.go:125: [control-plane-check] kube-scheduler is healthy after 438.288146ms"
L51: "cluster.go:125: [control-plane-check] kube-apiserver is healthy after 33.523177432s"
L52: "cluster.go:125: [upload-config] Storing the configuration used in ConfigMap __kubeadm-config__ in the __kube-system__ Namespace"
L53: "cluster.go:125: [kubelet] Creating a ConfigMap __kubelet-config__ in namespace kube-system with the configuration for the kubelets in the cluster"
L54: "cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs"
L55: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]"
L56: "cluster.go:125: [mark-control-plane] Marking the node localhost as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]"
L57: "cluster.go:125: [bootstrap-token] Using token: udfukj.fmbzxdc9y40b4ekx"
L58: "cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles"
L59: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes"
L60: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials"
L61: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token"
L62: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster"
L63: "cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the API server kubelet client certificate to access the kubelet API"
L64: "cluster.go:125: [bootstrap-token] Creating the __cluster-info__ ConfigMap in the __kube-public__ namespace"
L65: "cluster.go:125: [kubelet-finalize] Updating __/etc/kubernetes/kubelet.conf__ to point to a rotatable kubelet client certificate and key"
L66: "cluster.go:125: [addons] Applied essential addon: CoreDNS"
L67: "cluster.go:125: [addons] Applied essential addon: kube-proxy"
L68: "cluster.go:125: "
L69: "cluster.go:125: Your Kubernetes control-plane has initialized successfully!"
L70: "cluster.go:125: "
L71: "cluster.go:125: To start using your cluster, you need to run the following as a regular user:"
L72: "cluster.go:125: "
L73: "cluster.go:125: mkdir -p $HOME/.kube"
L74: "cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config"
L75: "cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config"
L76: "cluster.go:125: "
L77: "cluster.go:125: Alternatively, if you are the root user, you can run:"
L78: "cluster.go:125: "
L79: "cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf"
L80: "cluster.go:125: "
L81: "cluster.go:125: You should now deploy a pod network to the cluster."
L82: "cluster.go:125: Run __kubectl apply -f [podnetwork].yaml__ with one of the options listed at:"
L83: "cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/"
L84: "cluster.go:125: "
L85: "cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:"
L86: "cluster.go:125: "
L87: "cluster.go:125: kubeadm join 10.0.0.31:6443 --token udfukj.fmbzxdc9y40b4ekx _"
L88: "cluster.go:125: --discovery-token-ca-cert-hash sha256:57049c1b3afaf398e0276ca61334400b4aa053edeeef28f4c638bf6546340942 "
L89: "cluster.go:125: i Using Cilium version 1.12.5"
L90: "cluster.go:125: ? Auto-detected cluster name: kubernetes"
L91: "cluster.go:125: ? Auto-detected datapath mode: tunnel"
L92: "cluster.go:125: ? Auto-detected kube-proxy has been installed"
L93: "cluster.go:125: i helm template --namespace kube-system cilium cilium/cilium --version 1.12.5 --set cluster.id=0,cluster.name=kubernetes,encryption.nodeEncryption=false,extraConfig.cluster-pool-ipv4-?cidr=192.168.0.0/17,extraConfig.enable-endpoint-routes=true,kubeProxyReplacement=disabled,operator.replicas=1,serviceAccounts.cilium.name=cilium,serviceAccounts.operator.name=cilium-operator,tunnel=vx?lan"
L94: "cluster.go:125: i Storing helm values file in kube-system/cilium-cli-helm-values Secret"
L95: "cluster.go:125: ? Created CA in secret cilium-ca"
L96: "cluster.go:125: ? Generating certificates for Hubble..."
L97: "cluster.go:125: ? Creating Service accounts..."
L98: "cluster.go:125: ? Creating Cluster roles..."
L99: "cluster.go:125: ? Creating ConfigMap for Cilium version 1.12.5..."
L100: "cluster.go:125: i Manual overwrite in ConfigMap: enable-endpoint-routes=true"
L101: "cluster.go:125: i Manual overwrite in ConfigMap: cluster-pool-ipv4-cidr=192.168.0.0/17"
L102: "cluster.go:125: ? Creating Agent DaemonSet..."
L103: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L104: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the ___appArmorProfile___ fi?eld instead__ subsys=klog"
L105: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the ___appArmorProfile___ field i?nstead__ subsys=klog"
L106: "cluster.go:125: level=warning msg=__spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the ___appArmorProfile___ field instead?__ subsys=klog"
L107: "cluster.go:125: ? Creating Operator Deployment..."
L108: "cluster.go:125: ? Waiting for Cilium to be installed and ready..."
L109: "cluster.go:125: ?[33m /??_"
L110: "cluster.go:125: ?[36m /???[33m___/?[32m??_?[0m Cilium: ?[31m2 errors?[0m"
L111: "cluster.go:125: ?[36m ___?[31m/??_?[32m__/?[0m Operator: ?[32mOK?[0m"
L112: "cluster.go:125: ?[32m /???[31m___/?[35m??_?[0m Hubble: ?[36mdisabled?[0m"
L113: "cluster.go:125: ?[32m ___?[34m/??_?[35m__/?[0m ClusterMesh: ?[36mdisabled?[0m"
L114: "cluster.go:125: ?[34m ___/"
L115: "cluster.go:125: ?[0m"
L116: "cluster.go:125: DaemonSet cilium Desired: 1, Unavailable: ?[31m1/1?[0m"
L117: "cluster.go:125: Deployment cilium-operator Desired: 1, Ready: ?[32m1/1?[0m, Available: ?[32m1/1?[0m"
L118: "cluster.go:125: Containers: cilium Running: ?[32m1?[0m"
L119: "cluster.go:125: cilium-operator Running: ?[32m1?[0m"
L120: "cluster.go:125: Cluster Pods: 0/2 managed by Cilium"
L121: "cluster.go:125: Image versions cilium quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5: 1"
L122: "cluster.go:125: cilium-operator quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e: 1"
L123: "cluster.go:125: Errors: cilium cilium 1 pods of DaemonSet cilium are not ready"
L124: "cluster.go:125: cilium cilium-ncrsw unable to retrieve cilium status: command terminated with exit code 1"
L125: "cluster.go:125: ? Rolling back installation..."
L126: "cluster.go:125: "
L127: "cluster.go:125: Error: Unable to install Cilium: timeout while waiting for status to become successful: context deadline exceeded"
L128: "kubeadm.go:197: unable to setup cluster: unable to run master script: Process exited with status 1_"
L129: " "
```
🟢 ok **kubeadm.v1.36.1.flannel.base**; Succeeded: qemu_uefi_secure (2); Failed: qemu_uefi_secure (1)
Diagnostic output for qemu_uefi_secure, run 1
```
L1: " Error: _kubeadm.go:197: unable to setup cluster: unable to create master node with large disk: machine __7bfe78d5-9085-4c02-b35a-74c91b3abbc6__ failed to start: ssh journalctl failed: time limit excee?ded: dial tcp 10.0.0.9:22: connect: connection refused_"
L2: " "
```
🟢 ok **linux.nfs.v3**; Succeeded: qemu_uefi_secure (1)
🟢 ok **linux.nfs.v4**; Succeeded: qemu_uefi_secure (1)
🟢 ok **linux.ntp**; Succeeded: qemu_uefi_secure (1)
🟢 ok **misc.fips**; Succeeded: qemu_uefi_secure (1)
🟢 ok **packages**; Succeeded: qemu_uefi_secure (1)
🟢 ok **sysext.custom-docker.sysext**; Succeeded: qemu_uefi_secure (1)
🟢 ok **sysext.custom-oem**; Succeeded: qemu_uefi_secure (1)
🟢 ok **sysext.disable-containerd**; Succeeded: qemu_uefi_secure (1)
🟢 ok **sysext.disable-docker**; Succeeded: qemu_uefi_secure (1)
🟢 ok **sysext.simple**; Succeeded: qemu_uefi_secure (1)
🟢 ok **systemd.journal.remote**; Succeeded: qemu_uefi_secure (1)
🟢 ok **systemd.journal.user**; Succeeded: qemu_uefi_secure (1)
🟢 ok **systemd.sysusers.gshadow**; Succeeded: qemu_uefi_secure (1)