{"tests":[{"name":"docker.enable-service.sysext","result":"PASS","duration":125797291277,"output":" cluster.go:152: + systemctl is-enabled docker\n"},{"name":"cl.cloudinit.basic","result":"PASS","duration":125975082353,"output":""},{"name":"cl.etcd-member.etcdctlv3","result":"PASS","duration":126631924091,"output":" cluster.go:125: {\"level\":\"info\",\"ts\":\"2026-10-28T23:19:02.066303Z\",\"caller\":\"snapshot/v3_snapshot.go:65\",\"msg\":\"created temporary db file\",\"path\":\"/tmp/tmp.WiGNu9mWMh/snapshot.db.part\"}\n cluster.go:125: {\"level\":\"info\",\"ts\":\"2026-10-28T23:19:02.067001Z\",\"logger\":\"client\",\"caller\":\"v3@v3.5.33/maintenance.go:212\",\"msg\":\"opened snapshot stream; downloading\"}\n cluster.go:125: {\"level\":\"info\",\"ts\":\"2026-10-28T23:19:02.067031Z\",\"caller\":\"snapshot/v3_snapshot.go:73\",\"msg\":\"fetching snapshot\",\"endpoint\":\"127.0.0.1:2379\"}\n cluster.go:125: {\"level\":\"info\",\"ts\":\"2026-10-28T23:19:02.071519Z\",\"logger\":\"client\",\"caller\":\"v3@v3.5.33/maintenance.go:220\",\"msg\":\"completed snapshot read; closing\"}\n cluster.go:125: {\"level\":\"info\",\"ts\":\"2026-10-28T23:19:02.072130Z\",\"caller\":\"snapshot/v3_snapshot.go:88\",\"msg\":\"fetched snapshot\",\"endpoint\":\"127.0.0.1:2379\",\"size\":\"20 kB\",\"took\":\"now\"}\n cluster.go:125: {\"level\":\"info\",\"ts\":\"2026-10-28T23:19:02.072239Z\",\"caller\":\"snapshot/v3_snapshot.go:97\",\"msg\":\"saved\",\"path\":\"/tmp/tmp.WiGNu9mWMh/snapshot.db\"}\n cluster.go:125: Deprecated: Use `etcdutl snapshot status` instead.\n"},{"name":"cl.ignition.translation","result":"PASS","duration":127929819055,"output":" cluster.go:152: + ip --json address show kola | jq -r '.[] | .addr_info | .[] | select( .family == \"inet\") | .local'\n cluster.go:152: + cat /etc/systemd/network/00-dummy.network\n"},{"name":"coreos.ignition.groups","result":"PASS","duration":128135840812,"output":""},{"name":"cl.basic/CloudConfig","result":"PASS","duration":1941600036,"output":""},{"name":"cl.cloudinit.multipart-mime","result":"PASS","duration":131665370878,"output":""},{"name":"cl.basic/Script","result":"PASS","duration":1432452988,"output":""},{"name":"cl.basic/PortSSH","result":"PASS","duration":1296730782,"output":""},{"name":"cl.basic/Symlink","result":"PASS","duration":1302593347,"output":""},{"name":"coreos.tls.fetch-urls","result":"PASS","duration":135775447908,"output":""},{"name":"cl.basic/SymlinkFlatcar","result":"PASS","duration":1301588275,"output":""},{"name":"cl.basic/UpdateEngineKeys","result":"PASS","duration":1300015953,"output":""},{"name":"cl.basic/ServicesActive","result":"PASS","duration":1313730175,"output":""},{"name":"cl.basic/ReadOnly","result":"PASS","duration":1303438953,"output":""},{"name":"cl.basic/DbusPerms","result":"PASS","duration":1383073406,"output":""},{"name":"cl.basic/RandomUUID","result":"PASS","duration":1439154303,"output":""},{"name":"docker.selinux","result":"PASS","duration":143653341132,"output":" cluster.go:125: Unable to find image 'ghcr.io/flatcar/busybox:latest' locally\n cluster.go:125: latest: Pulling from flatcar/busybox\n cluster.go:125: dbc3eadfebd7: Pulling fs layer\n cluster.go:125: dbc3eadfebd7: Download complete\n cluster.go:125: dbc3eadfebd7: Pull complete\n cluster.go:125: Digest: sha256:93e8234eb9ca92b9aae20fd73d6c9447ac3d1cc741c6e80c737f821dca582a0e\n cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/busybox:latest\n cluster.go:125: sh: can't create /opt/hello: Permission denied\n"},{"name":"cl.internet/DockerPing","result":"PASS","duration":15667983355,"output":""},{"name":"cl.basic/Useradd","result":"PASS","duration":1779426902,"output":""},{"name":"cl.internet/DockerEcho","result":"PASS","duration":1690413243,"output":""},{"name":"cl.basic/MachineID","result":"PASS","duration":1308811166,"output":""},{"name":"cl.basic/Microcode","result":"PASS","duration":1300284152,"output":""},{"name":"cl.basic","result":"PASS","duration":150553702175,"output":" --- PASS: cl.basic/CloudConfig (1.94s)\n --- PASS: cl.basic/Script (1.43s)\n --- PASS: cl.basic/PortSSH (1.30s)\n --- PASS: cl.basic/Symlink (1.30s)\n --- PASS: cl.basic/SymlinkFlatcar (1.30s)\n --- PASS: cl.basic/UpdateEngineKeys (1.30s)\n --- PASS: cl.basic/ServicesActive (1.31s)\n --- PASS: cl.basic/ReadOnly (1.30s)\n --- PASS: cl.basic/DbusPerms (1.38s)\n --- PASS: cl.basic/RandomUUID (1.44s)\n --- PASS: cl.basic/Useradd (1.78s)\n --- PASS: cl.basic/MachineID (1.31s)\n --- PASS: cl.basic/Microcode (1.30s)\n"},{"name":"cl.network.initramfs.second-boot","result":"PASS","duration":154551705942,"output":""},{"name":"cl.internet/NTPDate","result":"PASS","duration":9330654677,"output":""},{"name":"coreos.ignition.once","result":"PASS","duration":155605089569,"output":""},{"name":"cl.internet/UpdateEngine","result":"PASS","duration":1418484110,"output":""},{"name":"coreos.selinux.boolean","result":"PASS","duration":158773695579,"output":""},{"name":"cl.internet","result":"PASS","duration":159539785164,"output":" --- PASS: cl.internet/DockerPing (15.67s)\n --- PASS: cl.internet/DockerEcho (1.69s)\n --- PASS: cl.internet/NTPDate (9.33s)\n --- PASS: cl.internet/UpdateEngine (1.42s)\n"},{"name":"cl.overlay.cleanup","result":"PASS","duration":162832957135,"output":""},{"name":"coreos.selinux.enforce","result":"PASS","duration":165069409897,"output":""},{"name":"coreos.locksmith.tls","result":"PASS","duration":186824087094,"output":""},{"name":"cl.flannel.vxlan","result":"PASS","duration":207444822300,"output":" flannel.go:121: ping from ci-4820.1.0-n-5a44c0fe9e(10.254.80.0) to ci-4820.1.0-n-bb983cc763(10.254.76.0)\n"},{"name":"sysext.disable-docker","result":"PASS","duration":124024957639,"output":""},{"name":"cl.network.iptables","result":"PASS","duration":124174137451,"output":" cluster.go:152: + sudo nft --json list ruleset | jq '.nftables[] | select(.rule) | .rule.expr[0].match.right'\n"},{"name":"cl.ignition.v1.btrfsroot","result":"PASS","duration":126092576197,"output":""},{"name":"cl.ignition.v2.noop","result":"PASS","duration":123835207601,"output":""},{"name":"coreos.ignition.security.tls","result":"PASS","duration":259871591784,"output":""},{"name":"cl.ignition.v1.noop","result":"PASS","duration":123898209074,"output":""},{"name":"coreos.auth.verify","result":"PASS","duration":123335913933,"output":""},{"name":"cl.cloudinit.script","result":"PASS","duration":123299935840,"output":""},{"name":"coreos.ignition.systemd.enable-service","result":"PASS","duration":123666999361,"output":""},{"name":"docker.base/docker-info","result":"PASS","duration":15926141733,"output":""},{"name":"docker.base/resources","result":"PASS","duration":9703651710,"output":" cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 2.12MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:6b9721407ecf39fc91d920ad97a0094d49be3febbf2107189daf10d6e50924f2 0.0s done\n cluster.go:125: #5 exporting config sha256:b1ea39ff381abe61b706f4fc70a3ec28b4552bc5c021f5673d50a75e202ef41c 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:2ac2dd3a15b923fa478e604ba98841ba17cb374df3ce448dc1567cfd766d4b31 0.1s done\n cluster.go:125: #5 exporting manifest list sha256:d1e554fdf7c87f8c2dc4a3a9535bc20804f11c69ef1e772eb68b695ed9451bbd 0.0s done\n cluster.go:125: #5 naming to docker.io/library/sleep:latest done\n cluster.go:125: #5 unpacking to docker.io/library/sleep:latest 0.1s done\n cluster.go:125: #5 DONE 0.5s\n cluster.go:125: WARNING: Your kernel does not support memory swappiness capabilities or the cgroup is not mounted. Memory swappiness discarded.\n cluster.go:125: WARNING: Your kernel does not support OomKillDisable. OomKillDisable discarded.\n"},{"name":"sysext.disable-containerd","result":"PASS","duration":124011327747,"output":""},{"name":"docker.containerd-restart","result":"PASS","duration":199245418319,"output":" cluster.go:125: Unable to find image 'ghcr.io/flatcar/busybox:latest' locally\n cluster.go:125: latest: Pulling from flatcar/busybox\n cluster.go:125: dbc3eadfebd7: Pulling fs layer\n cluster.go:125: dbc3eadfebd7: Download complete\n cluster.go:125: dbc3eadfebd7: Pull complete\n cluster.go:125: Digest: sha256:93e8234eb9ca92b9aae20fd73d6c9447ac3d1cc741c6e80c737f821dca582a0e\n cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/busybox:latest\n"},{"name":"systemd.journal.user","result":"PASS","duration":123482223018,"output":""},{"name":"cl.swap_activation","result":"PASS","duration":123331164492,"output":""},{"name":"cl.ignition.symlink","result":"PASS","duration":123122858112,"output":" cluster.go:152: + readlink /etc/localtime\n"},{"name":"coreos.ignition.resource.local","result":"PASS","duration":256896286331,"output":""},{"name":"coreos.ignition.resource.remote","result":"PASS","duration":127446220873,"output":""},{"name":"cl.network.wireguard","result":"PASS","duration":124280556990,"output":" cluster.go:152: + ip --json address show kv0 | jq -r '.[] | .addr_info | .[] | select( .family == \"inet\") | .local'\n"},{"name":"cl.ignition.v2.users","result":"PASS","duration":131056210424,"output":""},{"name":"cl.osreset.ignition-rerun","result":"PASS","duration":189817596501,"output":""},{"name":"cl.ignition.v2.xfsroot","result":"PASS","duration":126208850645,"output":""},{"name":"sysext.custom-docker.sysext","result":"PASS","duration":173235913356,"output":" cluster.go:125: bash: line 1: docker: command not found\n cluster.go:125: Cloning into 'sysext-bakery'...\n cluster.go:125: Note: switching to '9850ffd5b2353f45a9b3bf4fb84f8138a149e3e7'.\n cluster.go:125: \n cluster.go:125: You are in 'detached HEAD' state. You can look around, make experimental\n cluster.go:125: changes and commit them, and you can discard any commits you make in this\n cluster.go:125: state without impacting any branches by switching back to a branch.\n cluster.go:125: \n cluster.go:125: If you want to create a new branch to retain commits you create, you may\n cluster.go:125: do so (now or later) by using -c with the switch command. Example:\n cluster.go:125: \n cluster.go:125: git switch -c \u003cnew-branch-name\u003e\n cluster.go:125: \n cluster.go:125: Or undo this operation with:\n cluster.go:125: \n cluster.go:125: git switch -\n cluster.go:125: \n cluster.go:125: Turn off this advice by setting config variable advice.detachedHead to false\n cluster.go:125: \n cluster.go:125: HEAD is now at 9850ffd Merge pull request #31 from flatcar/t-lo/fix-docker-23-containerd-shim\n cluster.go:125: mke2fs 1.47.4 (6-Mar-2025)\n cluster.go:125: resize2fs 1.47.4 (6-Mar-2025)\n cluster.go:125: mke2fs 1.47.4 (6-Mar-2025)\n cluster.go:125: resize2fs 1.47.4 (6-Mar-2025)\n cluster.go:125: Unable to find image 'ghcr.io/flatcar/busybox:latest' locally\n cluster.go:125: latest: Pulling from flatcar/busybox\n cluster.go:125: dbc3eadfebd7: Pulling fs layer\n cluster.go:125: dbc3eadfebd7: Verifying Checksum\n cluster.go:125: dbc3eadfebd7: Download complete\n cluster.go:125: dbc3eadfebd7: Pull complete\n cluster.go:125: Digest: sha256:93e8234eb9ca92b9aae20fd73d6c9447ac3d1cc741c6e80c737f821dca582a0e\n cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/busybox:latest\n cluster.go:125: mke2fs 1.47.4 (6-Mar-2025)\n cluster.go:125: resize2fs 1.47.4 (6-Mar-2025)\n cluster.go:125: mke2fs 1.47.4 (6-Mar-2025)\n cluster.go:125: resize2fs 1.47.4 (6-Mar-2025)\n"},{"name":"cl.ignition.kargs","result":"PASS","duration":124475299460,"output":" cluster.go:152: + cat /proc/cmdline\n"},{"name":"docker.base/networks-reliably","result":"PASS","duration":171373066254,"output":" cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 4.23MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:1dd75ed9309ab2c801bade3fb7ddef18f6e6c0a2f00dd67b5b94d03f535e2b15\n cluster.go:125: #5 exporting manifest sha256:1dd75ed9309ab2c801bade3fb7ddef18f6e6c0a2f00dd67b5b94d03f535e2b15 0.0s done\n cluster.go:125: #5 exporting config sha256:67540dda3ca503ae4a55822e0a9fd4b87606cd6e18417ff3497bf9054b8cb93d 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:2658073fdc4468dc5ac1587f0daf125741853872df173bde52b59d32aa303418\n cluster.go:125: #5 exporting attestation manifest sha256:2658073fdc4468dc5ac1587f0daf125741853872df173bde52b59d32aa303418 0.0s done\n cluster.go:125: #5 exporting manifest list sha256:1537839dd9064a99bd1bc03dcb3f131e2fd05f91d124a6ee777eb0cc45fd1fd9 0.0s done\n cluster.go:125: #5 naming to docker.io/library/ping:latest done\n cluster.go:125: #5 unpacking to docker.io/library/ping:latest 0.0s done\n cluster.go:125: #5 DONE 0.5s\n"},{"name":"cl.toolbox.dnf-install","result":"PASS","duration":175062639527,"output":""},{"name":"docker.base/user-no-caps","result":"PASS","duration":9408108322,"output":" cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile:\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.5s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.4s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 5.22MB 0.0s done\n cluster.go:125: #3 DONE 0.5s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.4s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 1.3s done\n cluster.go:125: #5 exporting manifest sha256:c73091e0eebce1e2bcebce64c5e631f3429a7f92a5a375d08747b373b54bb5a0\n cluster.go:125: #5 exporting manifest sha256:c73091e0eebce1e2bcebce64c5e631f3429a7f92a5a375d08747b373b54bb5a0 0.2s done\n cluster.go:125: #5 exporting config sha256:30d9f41c83c196a896cbb525563bc2558e3fcba09002d87e887a8ef5df399dbb\n cluster.go:125: #5 exporting config sha256:30d9f41c83c196a896cbb525563bc2558e3fcba09002d87e887a8ef5df399dbb 0.1s done\n cluster.go:125: #5 exporting attestation manifest sha256:0a6484a938171c9cfddfb78c58df14752e53cf8beeaaa8322f6dbb4a2a899616\n cluster.go:125: #5 exporting attestation manifest sha256:0a6484a938171c9cfddfb78c58df14752e53cf8beeaaa8322f6dbb4a2a899616 0.2s done\n cluster.go:125: #5 exporting manifest list sha256:c7c56459e88c6d477793318fb8195e0ddaeeb0abd5776eb5dd668dc5f7653e42\n cluster.go:125: #5 exporting manifest list sha256:c7c56459e88c6d477793318fb8195e0ddaeeb0abd5776eb5dd668dc5f7653e42 0.2s done\n cluster.go:125: #5 naming to docker.io/library/captest:latest\n cluster.go:125: #5 naming to docker.io/library/captest:latest done\n cluster.go:125: #5 unpacking to docker.io/library/captest:latest\n cluster.go:125: #5 unpacking to docker.io/library/captest:latest 0.3s done\n cluster.go:125: #5 DONE 2.6s\n"},{"name":"docker.base/ownership","result":"PASS","duration":8996222221,"output":" cluster.go:125: Unable to find image 'ghcr.io/flatcar/nginx:latest' locally\n cluster.go:125: latest: Pulling from flatcar/nginx\n cluster.go:125: db328dcf225d: Pulling fs layer\n cluster.go:125: a5669a313107: Pulling fs layer\n cluster.go:125: 6fd9d00df009: Pulling fs layer\n cluster.go:125: ad3972e3e2f4: Pulling fs layer\n cluster.go:125: 684e3983c6f4: Pulling fs layer\n cluster.go:125: dabb6d15c691: Pulling fs layer\n cluster.go:125: 349a5204350e: Pulling fs layer\n cluster.go:125: a5669a313107: Download complete\n cluster.go:125: 349a5204350e: Download complete\n cluster.go:125: 684e3983c6f4: Download complete\n cluster.go:125: dabb6d15c691: Download complete\n cluster.go:125: 6fd9d00df009: Download complete\n cluster.go:125: db328dcf225d: Download complete\n cluster.go:125: 6fd9d00df009: Pull complete\n cluster.go:125: ad3972e3e2f4: Download complete\n cluster.go:125: a5669a313107: Pull complete\n cluster.go:125: 684e3983c6f4: Pull complete\n cluster.go:125: ad3972e3e2f4: Pull complete\n cluster.go:125: 349a5204350e: Pull complete\n cluster.go:125: dabb6d15c691: Pull complete\n cluster.go:125: db328dcf225d: Pull complete\n cluster.go:125: Digest: sha256:f867c76db3679f8221a6d4b4797d33df9ca88c36704f34c3217c0d8a646232ad\n cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/nginx:latest\n"},{"name":"docker.base","result":"PASS","duration":338344979890,"output":" --- PASS: docker.base/docker-info (15.93s)\n --- PASS: docker.base/resources (9.70s)\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 2.12MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:6b9721407ecf39fc91d920ad97a0094d49be3febbf2107189daf10d6e50924f2 0.0s done\n cluster.go:125: #5 exporting config sha256:b1ea39ff381abe61b706f4fc70a3ec28b4552bc5c021f5673d50a75e202ef41c 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:2ac2dd3a15b923fa478e604ba98841ba17cb374df3ce448dc1567cfd766d4b31 0.1s done\n cluster.go:125: #5 exporting manifest list sha256:d1e554fdf7c87f8c2dc4a3a9535bc20804f11c69ef1e772eb68b695ed9451bbd 0.0s done\n cluster.go:125: #5 naming to docker.io/library/sleep:latest done\n cluster.go:125: #5 unpacking to docker.io/library/sleep:latest 0.1s done\n cluster.go:125: #5 DONE 0.5s\n cluster.go:125: WARNING: Your kernel does not support memory swappiness capabilities or the cgroup is not mounted. Memory swappiness discarded.\n cluster.go:125: WARNING: Your kernel does not support OomKillDisable. OomKillDisable discarded.\n --- PASS: docker.base/networks-reliably (171.37s)\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 4.23MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:1dd75ed9309ab2c801bade3fb7ddef18f6e6c0a2f00dd67b5b94d03f535e2b15\n cluster.go:125: #5 exporting manifest sha256:1dd75ed9309ab2c801bade3fb7ddef18f6e6c0a2f00dd67b5b94d03f535e2b15 0.0s done\n cluster.go:125: #5 exporting config sha256:67540dda3ca503ae4a55822e0a9fd4b87606cd6e18417ff3497bf9054b8cb93d 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:2658073fdc4468dc5ac1587f0daf125741853872df173bde52b59d32aa303418\n cluster.go:125: #5 exporting attestation manifest sha256:2658073fdc4468dc5ac1587f0daf125741853872df173bde52b59d32aa303418 0.0s done\n cluster.go:125: #5 exporting manifest list sha256:1537839dd9064a99bd1bc03dcb3f131e2fd05f91d124a6ee777eb0cc45fd1fd9 0.0s done\n cluster.go:125: #5 naming to docker.io/library/ping:latest done\n cluster.go:125: #5 unpacking to docker.io/library/ping:latest 0.0s done\n cluster.go:125: #5 DONE 0.5s\n --- PASS: docker.base/user-no-caps (9.41s)\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile:\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.5s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.4s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 5.22MB 0.0s done\n cluster.go:125: #3 DONE 0.5s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.4s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 1.3s done\n cluster.go:125: #5 exporting manifest sha256:c73091e0eebce1e2bcebce64c5e631f3429a7f92a5a375d08747b373b54bb5a0\n cluster.go:125: #5 exporting manifest sha256:c73091e0eebce1e2bcebce64c5e631f3429a7f92a5a375d08747b373b54bb5a0 0.2s done\n cluster.go:125: #5 exporting config sha256:30d9f41c83c196a896cbb525563bc2558e3fcba09002d87e887a8ef5df399dbb\n cluster.go:125: #5 exporting config sha256:30d9f41c83c196a896cbb525563bc2558e3fcba09002d87e887a8ef5df399dbb 0.1s done\n cluster.go:125: #5 exporting attestation manifest sha256:0a6484a938171c9cfddfb78c58df14752e53cf8beeaaa8322f6dbb4a2a899616\n cluster.go:125: #5 exporting attestation manifest sha256:0a6484a938171c9cfddfb78c58df14752e53cf8beeaaa8322f6dbb4a2a899616 0.2s done\n cluster.go:125: #5 exporting manifest list sha256:c7c56459e88c6d477793318fb8195e0ddaeeb0abd5776eb5dd668dc5f7653e42\n cluster.go:125: #5 exporting manifest list sha256:c7c56459e88c6d477793318fb8195e0ddaeeb0abd5776eb5dd668dc5f7653e42 0.2s done\n cluster.go:125: #5 naming to docker.io/library/captest:latest\n cluster.go:125: #5 naming to docker.io/library/captest:latest done\n cluster.go:125: #5 unpacking to docker.io/library/captest:latest\n cluster.go:125: #5 unpacking to docker.io/library/captest:latest 0.3s done\n cluster.go:125: #5 DONE 2.6s\n --- PASS: docker.base/ownership (9.00s)\n cluster.go:125: Unable to find image 'ghcr.io/flatcar/nginx:latest' locally\n cluster.go:125: latest: Pulling from flatcar/nginx\n cluster.go:125: db328dcf225d: Pulling fs layer\n cluster.go:125: a5669a313107: Pulling fs layer\n cluster.go:125: 6fd9d00df009: Pulling fs layer\n cluster.go:125: ad3972e3e2f4: Pulling fs layer\n cluster.go:125: 684e3983c6f4: Pulling fs layer\n cluster.go:125: dabb6d15c691: Pulling fs layer\n cluster.go:125: 349a5204350e: Pulling fs layer\n cluster.go:125: a5669a313107: Download complete\n cluster.go:125: 349a5204350e: Download complete\n cluster.go:125: 684e3983c6f4: Download complete\n cluster.go:125: dabb6d15c691: Download complete\n cluster.go:125: 6fd9d00df009: Download complete\n cluster.go:125: db328dcf225d: Download complete\n cluster.go:125: 6fd9d00df009: Pull complete\n cluster.go:125: ad3972e3e2f4: Download complete\n cluster.go:125: a5669a313107: Pull complete\n cluster.go:125: 684e3983c6f4: Pull complete\n cluster.go:125: ad3972e3e2f4: Pull complete\n cluster.go:125: 349a5204350e: Pull complete\n cluster.go:125: dabb6d15c691: Pull complete\n cluster.go:125: db328dcf225d: Pull complete\n cluster.go:125: Digest: sha256:f867c76db3679f8221a6d4b4797d33df9ca88c36704f34c3217c0d8a646232ad\n cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/nginx:latest\n"},{"name":"cl.ignition.v2_1.swap","result":"PASS","duration":125862231289,"output":""},{"name":"kubeadm.v1.37.0.cilium.base/node_readiness","result":"PASS","duration":45823879113,"output":""},{"name":"cl.ignition.v2_1.ext4checkexisting","result":"PASS","duration":277234442697,"output":""},{"name":"cl.ignition.v1.groups","result":"PASS","duration":158464794929,"output":""},{"name":"kubeadm.v1.37.0.cilium.base/nginx_deployment","result":"PASS","duration":15358285411,"output":""},{"name":"docker.userns","result":"PASS","duration":139443176903,"output":" cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 2.19MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers 0.0s done\n cluster.go:125: #5 writing image sha256:90ebde69bf999bdd05f145e7d3d31736df9df654d0efc1646d4f26d37598e1ee done\n cluster.go:125: #5 naming to docker.io/library/userns-test 0.0s done\n cluster.go:125: #5 DONE 0.1s\n"},{"name":"cl.ignition.luks","result":"PASS","duration":125076863024,"output":""},{"name":"kubeadm.v1.37.0.cilium.base/NFS_deployment","result":"PASS","duration":37686738269,"output":" cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"coreos.locksmith.reboot","result":"PASS","duration":451180640185,"output":""},{"name":"coreos.ignition.ssh.key","result":"PASS","duration":154636664512,"output":""},{"name":"cl.ignition.v1.ext4root","result":"PASS","duration":126514692604,"output":""},{"name":"cl.update.badverity","result":"PASS","duration":479604775401,"output":""},{"name":"kubeadm.v1.37.0.cilium.base/IPSec_encryption","result":"PASS","duration":55437083794,"output":" cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n"},{"name":"cl.metadata.azure","result":"PASS","duration":136795608502,"output":""},{"name":"kubeadm.v1.37.0.cilium.base","result":"PASS","duration":641506601495,"output":" cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.14.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.7.0-0\n cluster.go:125: [init] Using Kubernetes version: v1.37.2\n cluster.go:125: [preflight] Running pre-flight checks\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-5c572dbce4\" could not be reached\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-5c572dbce4\": lookup ci-4820.1.0-n-5c572dbce4 on 168.63.129.16:53: no such host\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster\n cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection\n cluster.go:125: [preflight] You can also perform this action beforehand using 'kubeadm config images pull'\n cluster.go:125: [certs] Using certificateDir folder \"/etc/kubernetes/pki\"\n cluster.go:125: [certs] Generating \"ca\" certificate and key\n cluster.go:125: [certs] Generating \"apiserver\" certificate and key\n cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4820.1.0-n-5c572dbce4 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.0.0.7]\n cluster.go:125: [certs] Generating \"apiserver-kubelet-client\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-ca\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-client\" certificate and key\n cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation\n cluster.go:125: [certs] Generating \"sa\" key and public key\n cluster.go:125: [kubeconfig] Using kubeconfig folder \"/etc/kubernetes\"\n cluster.go:125: [kubeconfig] Writing \"admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"super-admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"kubelet.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"controller-manager.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"scheduler.conf\" kubeconfig file\n cluster.go:125: [control-plane] Using manifest folder \"/etc/kubernetes/manifests\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-apiserver\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-controller-manager\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-scheduler\"\n cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file \"/var/lib/kubelet/kubeadm-flags.env\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/instance-config.yaml\"\n cluster.go:125: [patches] Applied patch of type \"application/strategic-merge-patch+json\" to target \"kubeletconfiguration\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/config.yaml\"\n cluster.go:125: [kubelet-start] Starting the kubelet\n cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory \"/etc/kubernetes/manifests\"\n cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s\n cluster.go:125: [kubelet-check] The kubelet is healthy after 515.832µs\n cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s\n cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.7:6443/livez\n cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz\n cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez\n cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 6.538039ms\n cluster.go:125: [control-plane-check] kube-scheduler is healthy after 8.261413ms\n cluster.go:125: [control-plane-check] kube-apiserver is healthy after 1.500932776s\n cluster.go:125: [upload-config] Storing the configuration used in ConfigMap \"kubeadm-config\" in the \"kube-system\" Namespace\n cluster.go:125: [kubelet] Creating a ConfigMap \"kubelet-config\" in namespace kube-system with the configuration for the kubelets in the cluster\n cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-5c572dbce4 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-5c572dbce4 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]\n cluster.go:125: [bootstrap-token] Using token: 9lj6cd.8c1a4cb5xcaqv4yv\n cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the API server kubelet client certificate to access the kubelet API\n cluster.go:125: [bootstrap-token] Creating the \"cluster-info\" ConfigMap in the \"kube-public\" namespace\n cluster.go:125: [kubelet-finalize] Updating \"/etc/kubernetes/kubelet.conf\" to point to a rotatable kubelet client certificate and key\n cluster.go:125: [addons] Applied essential addon: CoreDNS\n cluster.go:125: [addons] Applied essential addon: kube-proxy\n cluster.go:125: \n cluster.go:125: Your Kubernetes control-plane has initialized successfully!\n cluster.go:125: \n cluster.go:125: To start using your cluster, you need to run the following as a regular user:\n cluster.go:125: \n cluster.go:125: mkdir -p $HOME/.kube\n cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\n cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config\n cluster.go:125: \n cluster.go:125: Alternatively, if you are the root user, you can run:\n cluster.go:125: \n cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf\n cluster.go:125: \n cluster.go:125: You should now deploy a pod network to the cluster.\n cluster.go:125: Run \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/\n cluster.go:125: \n cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:\n cluster.go:125: \n cluster.go:125: kubeadm join 10.0.0.7:6443 --token 9lj6cd.8c1a4cb5xcaqv4yv \\\n cluster.go:125: \t--discovery-token-ca-cert-hash sha256:25190c34661947bf07be7dec6935ee14b8582f91410b502f9792f4062c773866 \n cluster.go:125: i Using Cilium version 1.12.5\n cluster.go:125: ? Auto-detected cluster name: kubernetes\n cluster.go:125: ? Auto-detected datapath mode: tunnel\n cluster.go:125: ? Auto-detected kube-proxy has been installed\n cluster.go:125: i helm template --namespace kube-system cilium cilium/cilium --version 1.12.5 --set cluster.id=0,cluster.name=kubernetes,encryption.nodeEncryption=false,extraConfig.cluster-pool-ipv4-cidr=192.168.0.0/17,extraConfig.enable-endpoint-routes=true,kubeProxyReplacement=disabled,operator.replicas=1,serviceAccounts.cilium.name=cilium,serviceAccounts.operator.name=cilium-operator,tunnel=vxlan\n cluster.go:125: i Storing helm values file in kube-system/cilium-cli-helm-values Secret\n cluster.go:125: ? Created CA in secret cilium-ca\n cluster.go:125: ? Generating certificates for Hubble...\n cluster.go:125: ? Creating Service accounts...\n cluster.go:125: ? Creating Cluster roles...\n cluster.go:125: ? Creating ConfigMap for Cilium version 1.12.5...\n cluster.go:125: i Manual overwrite in ConfigMap: enable-endpoint-routes=true\n cluster.go:125: i Manual overwrite in ConfigMap: cluster-pool-ipv4-cidr=192.168.0.0/17\n cluster.go:125: ? Creating Agent DaemonSet...\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: ? Creating Operator Deployment...\n cluster.go:125: ? Waiting for Cilium to be installed and ready...\n cluster.go:125: ? Cilium was successfully installed! Run 'cilium status' to view installation health\n cluster.go:125: \u001b[33m /??\\\n cluster.go:125: \u001b[36m /??\u001b[33m\\__/\u001b[32m??\\\u001b[0m Cilium: \u001b[32mOK\u001b[0m\n cluster.go:125: \u001b[36m \\__\u001b[31m/??\\\u001b[32m__/\u001b[0m Operator: \u001b[32mOK\u001b[0m\n cluster.go:125: \u001b[32m /??\u001b[31m\\__/\u001b[35m??\\\u001b[0m Hubble: \u001b[36mdisabled\u001b[0m\n cluster.go:125: \u001b[32m \\__\u001b[34m/??\\\u001b[35m__/\u001b[0m ClusterMesh: \u001b[36mdisabled\u001b[0m\n cluster.go:125: \u001b[34m \\__/\n cluster.go:125: \u001b[0m\n cluster.go:125: DaemonSet cilium \n cluster.go:125: Deployment cilium-operator \n cluster.go:125: Containers: cilium-operator \n cluster.go:125: cilium \n cluster.go:125: Cluster Pods: 0/0 managed by Cilium\n cluster.go:125: W1028 23:24:53.038494 2743 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n --- PASS: kubeadm.v1.37.0.cilium.base/node_readiness (45.82s)\n --- PASS: kubeadm.v1.37.0.cilium.base/nginx_deployment (15.36s)\n --- PASS: kubeadm.v1.37.0.cilium.base/NFS_deployment (37.69s)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n --- PASS: kubeadm.v1.37.0.cilium.base/IPSec_encryption (55.44s)\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n"},{"name":"cl.network.nftables","result":"PASS","duration":123530216879,"output":" cluster.go:152: + sudo nft --json list ruleset | jq '.nftables[] | select(.rule) | .rule.expr[0].match.right'\n"},{"name":"kubeadm.v1.36.1.cilium.base/node_readiness","result":"PASS","duration":20398198744,"output":""},{"name":"kubeadm.v1.36.1.cilium.base/nginx_deployment","result":"PASS","duration":9004776672,"output":""},{"name":"cl.users.shells","result":"PASS","duration":124363645508,"output":""},{"name":"docker.lib-coreos-dockerd-compat/docker-info","result":"PASS","duration":25119711499,"output":""},{"name":"kubeadm.v1.36.1.cilium.base/NFS_deployment","result":"PASS","duration":31182055106,"output":" cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"cl.ignition.v1.users","result":"PASS","duration":162105488497,"output":""},{"name":"cl.ignition.v1.xfsroot","result":"PASS","duration":126934189997,"output":""},{"name":"docker.lib-coreos-dockerd-compat/resources","result":"PASS","duration":9356578982,"output":" cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 2.12MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:0dfdbbbb8f9ec51e23e876832a8a552c136984debce93b3b285885e11d90b455 0.0s done\n cluster.go:125: #5 exporting config sha256:1df6473b2db8163e4acec2d1cd1b464091ac7953943b29fc9288f45ea5bc6a5c 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:b9d8dc5cc3b32c000c70b29f128d7af73ab1e934931f948a21ade4a0b8e0cb95 0.1s done\n cluster.go:125: #5 exporting manifest list sha256:c57f4bd62ba8bce96bb47bba6b5029eb74a3a2a027cf174515d913585446f212 0.0s done\n cluster.go:125: #5 naming to docker.io/library/sleep:latest done\n cluster.go:125: #5 unpacking to docker.io/library/sleep:latest 0.1s done\n cluster.go:125: #5 DONE 0.5s\n cluster.go:125: WARNING: Your kernel does not support memory swappiness capabilities or the cgroup is not mounted. Memory swappiness discarded.\n cluster.go:125: WARNING: Your kernel does not support OomKillDisable. OomKillDisable discarded.\n"},{"name":"kubeadm.v1.35.1.calico.base/node_readiness","result":"PASS","duration":17716959662,"output":""},{"name":"kubeadm.v1.35.1.calico.base/nginx_deployment","result":"PASS","duration":9374322131,"output":""},{"name":"cl.ignition.v2.btrfsroot","result":"PASS","duration":127315138595,"output":""},{"name":"sysext.simple","result":"PASS","duration":131373788830,"output":""},{"name":"cl.ignition.v2.ext4root","result":"PASS","duration":157616278424,"output":""},{"name":"cl.ignition.v2_1.vfat","result":"PASS","duration":125375965490,"output":""},{"name":"azure.nvme-friendly-naming","result":"SKIP","duration":125853953957,"output":" cluster.go:125: ls: cannot access '/dev/nvme0n1': No such file or directory\n nvme.go:47: no NVMe disk found on this instance\n"},{"name":"kubeadm.v1.36.1.cilium.base/IPSec_encryption","result":"FAIL","duration":75046828528,"output":" cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: Error: Unable to determine status: timeout while waiting for status to become successful: context deadline exceeded\n cluster.go:145: \"/opt/bin/cilium status --wait --wait-duration 1m\" failed: output \u001b[33m /¯¯\\\n\u001b[36m /¯¯\u001b[33m\\__/\u001b[32m¯¯\\\u001b[0m Cilium: \u001b[31m1 errors\u001b[0m\n\u001b[36m \\__\u001b[31m/¯¯\\\u001b[32m__/\u001b[0m Operator: \u001b[32mOK\u001b[0m\n\u001b[32m /¯¯\u001b[31m\\__/\u001b[35m¯¯\\\u001b[0m Hubble: \u001b[36mdisabled\u001b[0m\n\u001b[32m \\__\u001b[34m/¯¯\\\u001b[35m__/\u001b[0m ClusterMesh: \u001b[36mdisabled\u001b[0m\n\u001b[34m \\__/\n\u001b[0m\nDaemonSet cilium Desired: 2, Ready: \u001b[32m2/2\u001b[0m, Available: \u001b[32m2/2\u001b[0m\nDeployment cilium-operator Desired: 1, Ready: \u001b[32m1/1\u001b[0m, Available: \u001b[32m1/1\u001b[0m\nContainers: cilium Running: \u001b[32m2\u001b[0m\n cilium-operator Running: \u001b[32m1\u001b[0m\nCluster Pods: 5/5 managed by Cilium\nImage versions cilium quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5: 2\n cilium-operator quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e: 1\nErrors: cilium cilium-xkb97 unable to retrieve cilium status: error dialing backend: dial tcp 10.10.10.10:10250: i/o timeout, status Process exited with status 1\n"},{"name":"kubeadm.v1.35.1.calico.base/NFS_deployment","result":"PASS","duration":32904152304,"output":" cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"kubeadm.v1.36.1.cilium.base","result":"FAIL","duration":629311802642,"output":" cluster.go:125: I1028 23:23:54.068280 2700 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.36\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.14.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.8-0\n cluster.go:125: I1028 23:24:05.345824 2933 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.36\n cluster.go:125: [init] Using Kubernetes version: v1.36.6\n cluster.go:125: [preflight] Running pre-flight checks\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-e3e036acee\" could not be reached\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-e3e036acee\": lookup ci-4820.1.0-n-e3e036acee on 168.63.129.16:53: no such host\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster\n cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection\n cluster.go:125: [preflight] You can also perform this action beforehand using 'kubeadm config images pull'\n cluster.go:125: [certs] Using certificateDir folder \"/etc/kubernetes/pki\"\n cluster.go:125: [certs] Generating \"ca\" certificate and key\n cluster.go:125: [certs] Generating \"apiserver\" certificate and key\n cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4820.1.0-n-e3e036acee kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.0.0.17]\n cluster.go:125: [certs] Generating \"apiserver-kubelet-client\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-ca\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-client\" certificate and key\n cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation\n cluster.go:125: [certs] Generating \"sa\" key and public key\n cluster.go:125: [kubeconfig] Using kubeconfig folder \"/etc/kubernetes\"\n cluster.go:125: [kubeconfig] Writing \"admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"super-admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"kubelet.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"controller-manager.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"scheduler.conf\" kubeconfig file\n cluster.go:125: [control-plane] Using manifest folder \"/etc/kubernetes/manifests\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-apiserver\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-controller-manager\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-scheduler\"\n cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file \"/var/lib/kubelet/kubeadm-flags.env\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/instance-config.yaml\"\n cluster.go:125: [patches] Applied patch of type \"application/strategic-merge-patch+json\" to target \"kubeletconfiguration\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/config.yaml\"\n cluster.go:125: [kubelet-start] Starting the kubelet\n cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory \"/etc/kubernetes/manifests\"\n cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s\n cluster.go:125: [kubelet-check] The kubelet is healthy after 1.21702ms\n cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s\n cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.17:6443/livez\n cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz\n cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez\n cluster.go:125: [control-plane-check] kube-scheduler is healthy after 6.156381ms\n cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 507.358436ms\n cluster.go:125: [control-plane-check] kube-apiserver is healthy after 1.501040467s\n cluster.go:125: [upload-config] Storing the configuration used in ConfigMap \"kubeadm-config\" in the \"kube-system\" Namespace\n cluster.go:125: [kubelet] Creating a ConfigMap \"kubelet-config\" in namespace kube-system with the configuration for the kubelets in the cluster\n cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-e3e036acee as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-e3e036acee as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]\n cluster.go:125: [bootstrap-token] Using token: xspshu.jn5dpraz1gf1iulk\n cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the API server kubelet client certificate to access the kubelet API\n cluster.go:125: [bootstrap-token] Creating the \"cluster-info\" ConfigMap in the \"kube-public\" namespace\n cluster.go:125: [kubelet-finalize] Updating \"/etc/kubernetes/kubelet.conf\" to point to a rotatable kubelet client certificate and key\n cluster.go:125: [addons] Applied essential addon: CoreDNS\n cluster.go:125: [addons] Applied essential addon: kube-proxy\n cluster.go:125: \n cluster.go:125: Your Kubernetes control-plane has initialized successfully!\n cluster.go:125: \n cluster.go:125: To start using your cluster, you need to run the following as a regular user:\n cluster.go:125: \n cluster.go:125: mkdir -p $HOME/.kube\n cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\n cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config\n cluster.go:125: \n cluster.go:125: Alternatively, if you are the root user, you can run:\n cluster.go:125: \n cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf\n cluster.go:125: \n cluster.go:125: You should now deploy a pod network to the cluster.\n cluster.go:125: Run \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/\n cluster.go:125: \n cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:\n cluster.go:125: \n cluster.go:125: kubeadm join 10.0.0.17:6443 --token xspshu.jn5dpraz1gf1iulk \\\n cluster.go:125: \t--discovery-token-ca-cert-hash sha256:22f110b9c020aca43c8d1ec363e1f87c4f78656d430d650e4d9bee6db51fc2c5 \n cluster.go:125: i Using Cilium version 1.12.5\n cluster.go:125: ? Auto-detected cluster name: kubernetes\n cluster.go:125: ? Auto-detected datapath mode: tunnel\n cluster.go:125: ? Auto-detected kube-proxy has been installed\n cluster.go:125: i helm template --namespace kube-system cilium cilium/cilium --version 1.12.5 --set cluster.id=0,cluster.name=kubernetes,encryption.nodeEncryption=false,extraConfig.cluster-pool-ipv4-cidr=192.168.0.0/17,extraConfig.enable-endpoint-routes=true,kubeProxyReplacement=disabled,operator.replicas=1,serviceAccounts.cilium.name=cilium,serviceAccounts.operator.name=cilium-operator,tunnel=vxlan\n cluster.go:125: i Storing helm values file in kube-system/cilium-cli-helm-values Secret\n cluster.go:125: ? Created CA in secret cilium-ca\n cluster.go:125: ? Generating certificates for Hubble...\n cluster.go:125: ? Creating Service accounts...\n cluster.go:125: ? Creating Cluster roles...\n cluster.go:125: ? Creating ConfigMap for Cilium version 1.12.5...\n cluster.go:125: i Manual overwrite in ConfigMap: enable-endpoint-routes=true\n cluster.go:125: i Manual overwrite in ConfigMap: cluster-pool-ipv4-cidr=192.168.0.0/17\n cluster.go:125: ? Creating Agent DaemonSet...\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: ? Creating Operator Deployment...\n cluster.go:125: ? Waiting for Cilium to be installed and ready...\n cluster.go:125: ? Cilium was successfully installed! Run 'cilium status' to view installation health\n cluster.go:125: \u001b[33m /??\\\n cluster.go:125: \u001b[36m /??\u001b[33m\\__/\u001b[32m??\\\u001b[0m Cilium: \u001b[32mOK\u001b[0m\n cluster.go:125: \u001b[36m \\__\u001b[31m/??\\\u001b[32m__/\u001b[0m Operator: \u001b[32mOK\u001b[0m\n cluster.go:125: \u001b[32m /??\u001b[31m\\__/\u001b[35m??\\\u001b[0m Hubble: \u001b[36mdisabled\u001b[0m\n cluster.go:125: \u001b[32m \\__\u001b[34m/??\\\u001b[35m__/\u001b[0m ClusterMesh: \u001b[36mdisabled\u001b[0m\n cluster.go:125: \u001b[34m \\__/\n cluster.go:125: \u001b[0m\n cluster.go:125: DaemonSet cilium \n cluster.go:125: Deployment cilium-operator \n cluster.go:125: Containers: cilium \n cluster.go:125: cilium-operator \n cluster.go:125: Cluster Pods: 0/0 managed by Cilium\n cluster.go:125: W1028 23:27:29.870439 2685 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: W1028 23:27:30.030402 2685 utils.go:69] The recommended value for \"bindAddress\" in \"KubeProxyConfiguration\" is: ::; the provided value is: 0.0.0.0\n --- PASS: kubeadm.v1.36.1.cilium.base/node_readiness (20.40s)\n --- PASS: kubeadm.v1.36.1.cilium.base/nginx_deployment (9.00s)\n --- PASS: kubeadm.v1.36.1.cilium.base/NFS_deployment (31.18s)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n --- FAIL: kubeadm.v1.36.1.cilium.base/IPSec_encryption (75.05s)\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/mount-cgroup]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/clean-cilium-state]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: level=warning msg=\"spec.template.metadata.annotations[container.apparmor.security.beta.kubernetes.io/cilium-agent]: deprecated since v1.30; use the \\\"appArmorProfile\\\" field instead\" subsys=klog\n cluster.go:125: Error: Unable to determine status: timeout while waiting for status to become successful: context deadline exceeded\n cluster.go:145: \"/opt/bin/cilium status --wait --wait-duration 1m\" failed: output \u001b[33m /¯¯\\\n \u001b[36m /¯¯\u001b[33m\\__/\u001b[32m¯¯\\\u001b[0m Cilium: \u001b[31m1 errors\u001b[0m\n \u001b[36m \\__\u001b[31m/¯¯\\\u001b[32m__/\u001b[0m Operator: \u001b[32mOK\u001b[0m\n \u001b[32m /¯¯\u001b[31m\\__/\u001b[35m¯¯\\\u001b[0m Hubble: \u001b[36mdisabled\u001b[0m\n \u001b[32m \\__\u001b[34m/¯¯\\\u001b[35m__/\u001b[0m ClusterMesh: \u001b[36mdisabled\u001b[0m\n \u001b[34m \\__/\n \u001b[0m\n DaemonSet cilium Desired: 2, Ready: \u001b[32m2/2\u001b[0m, Available: \u001b[32m2/2\u001b[0m\n Deployment cilium-operator Desired: 1, Ready: \u001b[32m1/1\u001b[0m, Available: \u001b[32m1/1\u001b[0m\n Containers: cilium Running: \u001b[32m2\u001b[0m\n cilium-operator Running: \u001b[32m1\u001b[0m\n Cluster Pods: 5/5 managed by Cilium\n Image versions cilium quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5: 2\n cilium-operator quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e: 1\n Errors: cilium cilium-xkb97 unable to retrieve cilium status: error dialing backend: dial tcp 10.10.10.10:10250: i/o timeout, status Process exited with status 1\n"},{"name":"kubeadm.v1.35.1.calico.base","result":"PASS","duration":609280389089,"output":" cluster.go:125: I1028 23:24:59.788415 2771 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.35\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.13.1\n cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1\n cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.6-0\n cluster.go:125: I1028 23:25:38.022154 3030 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.35\n cluster.go:125: [init] Using Kubernetes version: v1.35.10\n cluster.go:125: [preflight] Running pre-flight checks\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-5baf0b6e49\" could not be reached\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-5baf0b6e49\": lookup ci-4820.1.0-n-5baf0b6e49 on 168.63.129.16:53: no such host\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster\n cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection\n cluster.go:125: [preflight] You can also perform this action beforehand using 'kubeadm config images pull'\n cluster.go:125: [certs] Using certificateDir folder \"/etc/kubernetes/pki\"\n cluster.go:125: [certs] Generating \"ca\" certificate and key\n cluster.go:125: [certs] Generating \"apiserver\" certificate and key\n cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4820.1.0-n-5baf0b6e49 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.0.0.9]\n cluster.go:125: [certs] Generating \"apiserver-kubelet-client\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-ca\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-client\" certificate and key\n cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation\n cluster.go:125: [certs] Generating \"sa\" key and public key\n cluster.go:125: [kubeconfig] Using kubeconfig folder \"/etc/kubernetes\"\n cluster.go:125: [kubeconfig] Writing \"admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"super-admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"kubelet.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"controller-manager.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"scheduler.conf\" kubeconfig file\n cluster.go:125: [control-plane] Using manifest folder \"/etc/kubernetes/manifests\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-apiserver\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-controller-manager\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-scheduler\"\n cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file \"/var/lib/kubelet/kubeadm-flags.env\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/instance-config.yaml\"\n cluster.go:125: [patches] Applied patch of type \"application/strategic-merge-patch+json\" to target \"kubeletconfiguration\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/config.yaml\"\n cluster.go:125: [kubelet-start] Starting the kubelet\n cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory \"/etc/kubernetes/manifests\"\n cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s\n cluster.go:125: [kubelet-check] The kubelet is healthy after 6.02203165s\n cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s\n cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.9:6443/livez\n cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz\n cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez\n cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 6.005069539s\n cluster.go:125: [control-plane-check] kube-scheduler is healthy after 6.288200394s\n cluster.go:125: [control-plane-check] kube-apiserver is healthy after 8.001705207s\n cluster.go:125: [upload-config] Storing the configuration used in ConfigMap \"kubeadm-config\" in the \"kube-system\" Namespace\n cluster.go:125: [kubelet] Creating a ConfigMap \"kubelet-config\" in namespace kube-system with the configuration for the kubelets in the cluster\n cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-5baf0b6e49 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-5baf0b6e49 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]\n cluster.go:125: [bootstrap-token] Using token: fesbeg.0wiz793qes2xqp87\n cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster\n cluster.go:125: [bootstrap-token] Creating the \"cluster-info\" ConfigMap in the \"kube-public\" namespace\n cluster.go:125: [kubelet-finalize] Updating \"/etc/kubernetes/kubelet.conf\" to point to a rotatable kubelet client certificate and key\n cluster.go:125: [addons] Applied essential addon: CoreDNS\n cluster.go:125: [addons] Applied essential addon: kube-proxy\n cluster.go:125: \n cluster.go:125: Your Kubernetes control-plane has initialized successfully!\n cluster.go:125: \n cluster.go:125: To start using your cluster, you need to run the following as a regular user:\n cluster.go:125: \n cluster.go:125: mkdir -p $HOME/.kube\n cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\n cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config\n cluster.go:125: \n cluster.go:125: Alternatively, if you are the root user, you can run:\n cluster.go:125: \n cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf\n cluster.go:125: \n cluster.go:125: You should now deploy a pod network to the cluster.\n cluster.go:125: Run \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/\n cluster.go:125: \n cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:\n cluster.go:125: \n cluster.go:125: kubeadm join 10.0.0.9:6443 --token fesbeg.0wiz793qes2xqp87 \\\n cluster.go:125: \t--discovery-token-ca-cert-hash sha256:9942e2d75ee285bd93ccfde186ceb7b72e11458f2ae4afe75156b7907e89a57c \n cluster.go:125: namespace/tigera-operator created\n cluster.go:125: serviceaccount/tigera-operator created\n cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator-secrets created\n cluster.go:125: clusterrole.rbac.authorization.k8s.io/tigera-operator created\n cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/tigera-operator created\n cluster.go:125: rolebinding.rbac.authorization.k8s.io/tigera-operator-secrets created\n cluster.go:125: deployment.apps/tigera-operator created\n cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met\n cluster.go:125: customresourcedefinition.apiextensions.k8s.io/installations.operator.tigera.io condition met\n cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met\n cluster.go:125: customresourcedefinition.apiextensions.k8s.io/apiservers.operator.tigera.io condition met\n cluster.go:125: installation.operator.tigera.io/default created\n cluster.go:125: apiserver.operator.tigera.io/default created\n cluster.go:125: goldmane.operator.tigera.io/default created\n cluster.go:125: whisker.operator.tigera.io/default created\n cluster.go:125: W1028 23:28:46.093443 2646 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n --- PASS: kubeadm.v1.35.1.calico.base/node_readiness (17.72s)\n --- PASS: kubeadm.v1.35.1.calico.base/nginx_deployment (9.37s)\n --- PASS: kubeadm.v1.35.1.calico.base/NFS_deployment (32.90s)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"cl.ignition.misc.empty","result":"PASS","duration":123795806607,"output":""},{"name":"kubeadm.v1.35.1.flannel.base/node_readiness","result":"PASS","duration":20361887744,"output":""},{"name":"kubeadm.v1.37.0.calico.base","result":"FAIL","duration":415557183010,"output":" kubeadm.go:197: unable to setup cluster: unable to get etcd node health: health polling failed: Process exited with status 1: \n"},{"name":"cl.ignition.v1.once","result":"PASS","duration":164646283436,"output":""},{"name":"kubeadm.v1.35.1.flannel.base/nginx_deployment","result":"PASS","duration":27955255693,"output":""},{"name":"kubeadm.v1.35.1.flannel.base/NFS_deployment","result":"PASS","duration":31184700020,"output":" cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"coreos.update.badusr","result":"PASS","duration":461557704589,"output":""},{"name":"kubeadm.v1.35.1.flannel.base","result":"PASS","duration":560536487491,"output":" cluster.go:125: I1028 23:26:23.862499 2584 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.35\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.35.10\n cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.13.1\n cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.1\n cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.6-0\n cluster.go:125: I1028 23:26:41.994697 2814 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.35\n cluster.go:125: [init] Using Kubernetes version: v1.35.10\n cluster.go:125: [preflight] Running pre-flight checks\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-243e265487\" could not be reached\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-243e265487\": lookup ci-4820.1.0-n-243e265487 on 168.63.129.16:53: no such host\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster\n cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection\n cluster.go:125: [preflight] You can also perform this action beforehand using 'kubeadm config images pull'\n cluster.go:125: [certs] Using certificateDir folder \"/etc/kubernetes/pki\"\n cluster.go:125: [certs] Generating \"ca\" certificate and key\n cluster.go:125: [certs] Generating \"apiserver\" certificate and key\n cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4820.1.0-n-243e265487 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.0.0.13]\n cluster.go:125: [certs] Generating \"apiserver-kubelet-client\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-ca\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-client\" certificate and key\n cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation\n cluster.go:125: [certs] Generating \"sa\" key and public key\n cluster.go:125: [kubeconfig] Using kubeconfig folder \"/etc/kubernetes\"\n cluster.go:125: [kubeconfig] Writing \"admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"super-admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"kubelet.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"controller-manager.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"scheduler.conf\" kubeconfig file\n cluster.go:125: [control-plane] Using manifest folder \"/etc/kubernetes/manifests\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-apiserver\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-controller-manager\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-scheduler\"\n cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file \"/var/lib/kubelet/kubeadm-flags.env\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/instance-config.yaml\"\n cluster.go:125: [patches] Applied patch of type \"application/strategic-merge-patch+json\" to target \"kubeletconfiguration\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/config.yaml\"\n cluster.go:125: [kubelet-start] Starting the kubelet\n cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory \"/etc/kubernetes/manifests\"\n cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s\n cluster.go:125: [kubelet-check] The kubelet is healthy after 501.55438ms\n cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s\n cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.13:6443/livez\n cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz\n cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez\n cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 4.003874743s\n cluster.go:125: [control-plane-check] kube-scheduler is healthy after 4.292042452s\n cluster.go:125: [control-plane-check] kube-apiserver is healthy after 6.502272155s\n cluster.go:125: [upload-config] Storing the configuration used in ConfigMap \"kubeadm-config\" in the \"kube-system\" Namespace\n cluster.go:125: [kubelet] Creating a ConfigMap \"kubelet-config\" in namespace kube-system with the configuration for the kubelets in the cluster\n cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-243e265487 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-243e265487 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]\n cluster.go:125: [bootstrap-token] Using token: 3yiwoi.fc35fx3jaf5lslno\n cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster\n cluster.go:125: [bootstrap-token] Creating the \"cluster-info\" ConfigMap in the \"kube-public\" namespace\n cluster.go:125: [kubelet-finalize] Updating \"/etc/kubernetes/kubelet.conf\" to point to a rotatable kubelet client certificate and key\n cluster.go:125: [addons] Applied essential addon: CoreDNS\n cluster.go:125: [addons] Applied essential addon: kube-proxy\n cluster.go:125: \n cluster.go:125: Your Kubernetes control-plane has initialized successfully!\n cluster.go:125: \n cluster.go:125: To start using your cluster, you need to run the following as a regular user:\n cluster.go:125: \n cluster.go:125: mkdir -p $HOME/.kube\n cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\n cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config\n cluster.go:125: \n cluster.go:125: Alternatively, if you are the root user, you can run:\n cluster.go:125: \n cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf\n cluster.go:125: \n cluster.go:125: You should now deploy a pod network to the cluster.\n cluster.go:125: Run \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/\n cluster.go:125: \n cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:\n cluster.go:125: \n cluster.go:125: kubeadm join 10.0.0.13:6443 --token 3yiwoi.fc35fx3jaf5lslno \\\n cluster.go:125: \t--discovery-token-ca-cert-hash sha256:c1d3b95bf13442e8f72ff01b87a18085a3496fe661fb05ae55e6e104083ec84f \n cluster.go:125: namespace/kube-flannel created\n cluster.go:125: clusterrole.rbac.authorization.k8s.io/flannel created\n cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/flannel created\n cluster.go:125: serviceaccount/flannel created\n cluster.go:125: configmap/kube-flannel-cfg created\n cluster.go:125: daemonset.apps/kube-flannel-ds created\n cluster.go:125: W1028 23:29:30.084790 2648 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n --- PASS: kubeadm.v1.35.1.flannel.base/node_readiness (20.36s)\n --- PASS: kubeadm.v1.35.1.flannel.base/nginx_deployment (27.96s)\n --- PASS: kubeadm.v1.35.1.flannel.base/NFS_deployment (31.18s)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"docker.lib-coreos-dockerd-compat/networks-reliably","result":"PASS","duration":150465819186,"output":" cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 4.23MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:d7bc2e90215f27db8598a47a39685e16092b78621958b2c07763aa8aebb3145b\n cluster.go:125: #5 exporting manifest sha256:d7bc2e90215f27db8598a47a39685e16092b78621958b2c07763aa8aebb3145b 0.0s done\n cluster.go:125: #5 exporting config sha256:e5b589d857967e6a7cc933f602b4b7e322de5b5e864c29f5510627aca4e81db2 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:2dec9e7c99447d8180eedf5aa785c6e50f76d67035f09edb43772a84e0442265 0.0s done\n cluster.go:125: #5 exporting manifest list sha256:587f052b01674cb2d53ef2b99034cf8f95c65e441909e177faf2e9c4fae7d3f5 0.0s done\n cluster.go:125: #5 naming to docker.io/library/ping:latest\n cluster.go:125: #5 naming to docker.io/library/ping:latest done\n cluster.go:125: #5 unpacking to docker.io/library/ping:latest 0.0s done\n cluster.go:125: #5 DONE 0.4s\n"},{"name":"docker.lib-coreos-dockerd-compat/user-no-caps","result":"PASS","duration":4122560285,"output":" cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 5.22MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:3228e98e3a7fb05540b6a2fcc64e28d7c384f551937f309246ed99988f388814\n cluster.go:125: #5 exporting manifest sha256:3228e98e3a7fb05540b6a2fcc64e28d7c384f551937f309246ed99988f388814 0.0s done\n cluster.go:125: #5 exporting config sha256:749d13b1bd10e430e268dc29523704dbeffd1f22231a2cbefc2a71fbed6f2a10 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:41c85ae6eb11f585e61fa137c3f4a61a32370a1ce6746b449295aec4f37efcd8 0.0s done\n cluster.go:125: #5 exporting manifest list sha256:4ba91a7718b93e07f84db6dff8235e180b6000025b99a4cf353d93fc766c99c6 0.0s done\n cluster.go:125: #5 naming to docker.io/library/captest:latest\n cluster.go:125: #5 naming to docker.io/library/captest:latest done\n cluster.go:125: #5 unpacking to docker.io/library/captest:latest 0.1s done\n cluster.go:125: #5 DONE 0.4s\n"},{"name":"docker.btrfs-storage","result":"PASS","duration":118473420141,"output":""},{"name":"kubeadm.v1.36.1.flannel.base/node_readiness","result":"PASS","duration":7686172359,"output":""},{"name":"docker.network-openbsd-nc","result":"PASS","duration":165376539452,"output":" docker.go:411: creating netcat containers\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 2.46MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:60fe9a4532e322593e69d8f69d8779aad4649467f1f1cc47b8c16ab5afe15cf5 0.0s done\n cluster.go:125: #5 exporting config sha256:b0165113daad19435159a3ce3b6dae9a7788cc9c2da97a5a590baa663c52c57b 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:af5ee1355e921ed6311186984e8cb1e81ec774f02fcc955cb9e9ca2cc29880bb 0.1s done\n cluster.go:125: #5 exporting manifest list sha256:cbaf8e4c4586b314e94ff4dacda7dfc83860669b52f9cdfd2cd28b5fd0df1f03\n cluster.go:125: #5 exporting manifest list sha256:cbaf8e4c4586b314e94ff4dacda7dfc83860669b52f9cdfd2cd28b5fd0df1f03 0.0s done\n cluster.go:125: #5 naming to docker.io/library/netcat:latest done\n cluster.go:125: #5 unpacking to docker.io/library/netcat:latest 0.1s done\n cluster.go:125: #5 DONE 0.4s\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 2.46MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:a5cb15617de92a7af7e609d7e0e7e44bf4e1bb6555a297887173489c020d6d23\n cluster.go:125: #5 exporting manifest sha256:a5cb15617de92a7af7e609d7e0e7e44bf4e1bb6555a297887173489c020d6d23 0.0s done\n cluster.go:125: #5 exporting config sha256:5d72bbc08c11cd522836778e058d0fcf2e4f8f7bbaaa32f74c0a0a5361a3ba1e 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:8883a8fb97e373a5a99c004ba3c5a1be003324190df7690fcd41b04f2246cc87 0.1s done\n cluster.go:125: #5 exporting manifest list sha256:b04708dc76a7067dd203fcb17cf5aed6cc19a53c0adf770d1fb9a3ba184de366\n cluster.go:125: #5 exporting manifest list sha256:b04708dc76a7067dd203fcb17cf5aed6cc19a53c0adf770d1fb9a3ba184de366 0.0s done\n cluster.go:125: #5 naming to docker.io/library/netcat:latest done\n cluster.go:125: #5 unpacking to docker.io/library/netcat:latest 0.1s done\n cluster.go:125: #5 DONE 0.5s\n"},{"name":"docker.lib-coreos-dockerd-compat/ownership","result":"PASS","duration":7696096910,"output":" cluster.go:125: Unable to find image 'ghcr.io/flatcar/nginx:latest' locally\n cluster.go:125: latest: Pulling from flatcar/nginx\n cluster.go:125: db328dcf225d: Pulling fs layer\n cluster.go:125: a5669a313107: Pulling fs layer\n cluster.go:125: 6fd9d00df009: Pulling fs layer\n cluster.go:125: ad3972e3e2f4: Pulling fs layer\n cluster.go:125: dabb6d15c691: Pulling fs layer\n cluster.go:125: 684e3983c6f4: Pulling fs layer\n cluster.go:125: 349a5204350e: Pulling fs layer\n cluster.go:125: 349a5204350e: Download complete\n cluster.go:125: db328dcf225d: Download complete\n cluster.go:125: a5669a313107: Download complete\n cluster.go:125: dabb6d15c691: Download complete\n cluster.go:125: 6fd9d00df009: Download complete\n cluster.go:125: 684e3983c6f4: Download complete\n cluster.go:125: ad3972e3e2f4: Download complete\n cluster.go:125: 6fd9d00df009: Pull complete\n cluster.go:125: a5669a313107: Pull complete\n cluster.go:125: ad3972e3e2f4: Pull complete\n cluster.go:125: 349a5204350e: Pull complete\n cluster.go:125: db328dcf225d: Pull complete\n cluster.go:125: dabb6d15c691: Pull complete\n cluster.go:125: 684e3983c6f4: Pull complete\n cluster.go:125: Digest: sha256:f867c76db3679f8221a6d4b4797d33df9ca88c36704f34c3217c0d8a646232ad\n cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/nginx:latest\n"},{"name":"cl.etcd-member.discovery","result":"FAIL","duration":861223030084,"output":" harness.go:651: Cluster failed starting machines: machine \"ci-4820.1.0-n-5280f4e5bc\" failed to start: ssh journalctl failed: time limit exceeded: dial tcp 20.94.246.221:22: i/o timeout\n"},{"name":"docker.lib-coreos-dockerd-compat","result":"PASS","duration":349834078231,"output":" --- PASS: docker.lib-coreos-dockerd-compat/docker-info (25.12s)\n --- PASS: docker.lib-coreos-dockerd-compat/resources (9.36s)\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context:\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 2.12MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:0dfdbbbb8f9ec51e23e876832a8a552c136984debce93b3b285885e11d90b455 0.0s done\n cluster.go:125: #5 exporting config sha256:1df6473b2db8163e4acec2d1cd1b464091ac7953943b29fc9288f45ea5bc6a5c 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:b9d8dc5cc3b32c000c70b29f128d7af73ab1e934931f948a21ade4a0b8e0cb95 0.1s done\n cluster.go:125: #5 exporting manifest list sha256:c57f4bd62ba8bce96bb47bba6b5029eb74a3a2a027cf174515d913585446f212 0.0s done\n cluster.go:125: #5 naming to docker.io/library/sleep:latest done\n cluster.go:125: #5 unpacking to docker.io/library/sleep:latest 0.1s done\n cluster.go:125: #5 DONE 0.5s\n cluster.go:125: WARNING: Your kernel does not support memory swappiness capabilities or the cgroup is not mounted. Memory swappiness discarded.\n cluster.go:125: WARNING: Your kernel does not support OomKillDisable. OomKillDisable discarded.\n --- PASS: docker.lib-coreos-dockerd-compat/networks-reliably (150.47s)\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 4.23MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:d7bc2e90215f27db8598a47a39685e16092b78621958b2c07763aa8aebb3145b\n cluster.go:125: #5 exporting manifest sha256:d7bc2e90215f27db8598a47a39685e16092b78621958b2c07763aa8aebb3145b 0.0s done\n cluster.go:125: #5 exporting config sha256:e5b589d857967e6a7cc933f602b4b7e322de5b5e864c29f5510627aca4e81db2 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:2dec9e7c99447d8180eedf5aa785c6e50f76d67035f09edb43772a84e0442265 0.0s done\n cluster.go:125: #5 exporting manifest list sha256:587f052b01674cb2d53ef2b99034cf8f95c65e441909e177faf2e9c4fae7d3f5 0.0s done\n cluster.go:125: #5 naming to docker.io/library/ping:latest\n cluster.go:125: #5 naming to docker.io/library/ping:latest done\n cluster.go:125: #5 unpacking to docker.io/library/ping:latest 0.0s done\n cluster.go:125: #5 DONE 0.4s\n --- PASS: docker.lib-coreos-dockerd-compat/user-no-caps (4.12s)\n cluster.go:125: #0 building with \"default\" instance using docker driver\n cluster.go:125: \n cluster.go:125: #1 [internal] load build definition from Dockerfile\n cluster.go:125: #1 transferring dockerfile: 108B done\n cluster.go:125: #1 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #2 [internal] load .dockerignore\n cluster.go:125: #2 transferring context: 2B done\n cluster.go:125: #2 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #3 [internal] load build context\n cluster.go:125: #3 transferring context: 5.22MB 0.0s done\n cluster.go:125: #3 DONE 0.1s\n cluster.go:125: \n cluster.go:125: #4 [1/1] COPY . /\n cluster.go:125: #4 DONE 0.0s\n cluster.go:125: \n cluster.go:125: #5 exporting to image\n cluster.go:125: #5 exporting layers\n cluster.go:125: #5 exporting layers 0.2s done\n cluster.go:125: #5 exporting manifest sha256:3228e98e3a7fb05540b6a2fcc64e28d7c384f551937f309246ed99988f388814\n cluster.go:125: #5 exporting manifest sha256:3228e98e3a7fb05540b6a2fcc64e28d7c384f551937f309246ed99988f388814 0.0s done\n cluster.go:125: #5 exporting config sha256:749d13b1bd10e430e268dc29523704dbeffd1f22231a2cbefc2a71fbed6f2a10 0.0s done\n cluster.go:125: #5 exporting attestation manifest sha256:41c85ae6eb11f585e61fa137c3f4a61a32370a1ce6746b449295aec4f37efcd8 0.0s done\n cluster.go:125: #5 exporting manifest list sha256:4ba91a7718b93e07f84db6dff8235e180b6000025b99a4cf353d93fc766c99c6 0.0s done\n cluster.go:125: #5 naming to docker.io/library/captest:latest\n cluster.go:125: #5 naming to docker.io/library/captest:latest done\n cluster.go:125: #5 unpacking to docker.io/library/captest:latest 0.1s done\n cluster.go:125: #5 DONE 0.4s\n --- PASS: docker.lib-coreos-dockerd-compat/ownership (7.70s)\n cluster.go:125: Unable to find image 'ghcr.io/flatcar/nginx:latest' locally\n cluster.go:125: latest: Pulling from flatcar/nginx\n cluster.go:125: db328dcf225d: Pulling fs layer\n cluster.go:125: a5669a313107: Pulling fs layer\n cluster.go:125: 6fd9d00df009: Pulling fs layer\n cluster.go:125: ad3972e3e2f4: Pulling fs layer\n cluster.go:125: dabb6d15c691: Pulling fs layer\n cluster.go:125: 684e3983c6f4: Pulling fs layer\n cluster.go:125: 349a5204350e: Pulling fs layer\n cluster.go:125: 349a5204350e: Download complete\n cluster.go:125: db328dcf225d: Download complete\n cluster.go:125: a5669a313107: Download complete\n cluster.go:125: dabb6d15c691: Download complete\n cluster.go:125: 6fd9d00df009: Download complete\n cluster.go:125: 684e3983c6f4: Download complete\n cluster.go:125: ad3972e3e2f4: Download complete\n cluster.go:125: 6fd9d00df009: Pull complete\n cluster.go:125: a5669a313107: Pull complete\n cluster.go:125: ad3972e3e2f4: Pull complete\n cluster.go:125: 349a5204350e: Pull complete\n cluster.go:125: db328dcf225d: Pull complete\n cluster.go:125: dabb6d15c691: Pull complete\n cluster.go:125: 684e3983c6f4: Pull complete\n cluster.go:125: Digest: sha256:f867c76db3679f8221a6d4b4797d33df9ca88c36704f34c3217c0d8a646232ad\n cluster.go:125: Status: Downloaded newer image for ghcr.io/flatcar/nginx:latest\n"},{"name":"cl.update.reboot","result":"PASS","duration":170109948223,"output":""},{"name":"kubeadm.v1.36.1.calico.base","result":"FAIL","duration":414307181240,"output":" kubeadm.go:197: unable to setup cluster: unable to get etcd node health: health polling failed: Process exited with status 1: \n"},{"name":"kubeadm.v1.36.1.flannel.base/nginx_deployment","result":"PASS","duration":21669721046,"output":""},{"name":"bpf.ig/ig","result":"PASS","duration":139592501797,"output":" cluster.go:125: + sudo ig run trace_exec:v0.50.0 --help\n cluster.go:125: time=\"2026-10-28T23:31:26Z\" level=warning msg=\"Runtime enricher (docker): couldn't get current containers: listing containers with options {Size:false All:true Latest:false Since: Before: Limit:0 Filters:{fields:map[]}}: Get \\\"http://%2Frun%2Fdocker.sock/v1.51/containers/json?all=1\\\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)\"\n cluster.go:125: + trap 'kill %%' ERR\n cluster.go:125: + timeout 30 grep -F -m1 running...\n cluster.go:125: + sudo ig run trace_exec:v0.50.0 --host --filter proc.comm=docker,args~ps --output json --verbose\n cluster.go:125: + docker info\n cluster.go:125: + docker ps\n cluster.go:125: + docker images\n cluster.go:125: + kill %%\n cluster.go:125: + wait\n cluster.go:125: + jq -s -e '.[] | select(.args == \"/usr/bin/docker\\u00a0ps\")' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.args == \"/usr/bin/docker\\u00a0info\"))' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.args == \"/usr/bin/docker\\u00a0images\"))' ig.json\n cluster.go:125: + sudo ig run trace_dns:v0.50.0 --help\n cluster.go:125: + trap 'kill %%' ERR\n cluster.go:125: + timeout 30 grep -F -m1 running...\n cluster.go:125: + sudo ig run trace_dns:v0.50.0 --host --filter name=flatcar.org. --output json --verbose\n cluster.go:125: + dig kinvolk.io\n cluster.go:125: + dig flatcar.org\n cluster.go:125: + dig stable.release.flatcar-linux.net\n cluster.go:125: + kill %%\n cluster.go:125: + wait\n cluster.go:125: + jq -s -e '.[] | select(.name == \"flatcar.org.\")' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.name == \"kinvolk.io.\"))' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.name == \"stable.release.flatcar-linux.net.\"))' ig.json\n"},{"name":"bpf.ig","result":"PASS","duration":144871586940,"output":" --- PASS: bpf.ig/ig (139.59s)\n cluster.go:125: + sudo ig run trace_exec:v0.50.0 --help\n cluster.go:125: time=\"2026-10-28T23:31:26Z\" level=warning msg=\"Runtime enricher (docker): couldn't get current containers: listing containers with options {Size:false All:true Latest:false Since: Before: Limit:0 Filters:{fields:map[]}}: Get \\\"http://%2Frun%2Fdocker.sock/v1.51/containers/json?all=1\\\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)\"\n cluster.go:125: + trap 'kill %%' ERR\n cluster.go:125: + timeout 30 grep -F -m1 running...\n cluster.go:125: + sudo ig run trace_exec:v0.50.0 --host --filter proc.comm=docker,args~ps --output json --verbose\n cluster.go:125: + docker info\n cluster.go:125: + docker ps\n cluster.go:125: + docker images\n cluster.go:125: + kill %%\n cluster.go:125: + wait\n cluster.go:125: + jq -s -e '.[] | select(.args == \"/usr/bin/docker\\u00a0ps\")' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.args == \"/usr/bin/docker\\u00a0info\"))' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.args == \"/usr/bin/docker\\u00a0images\"))' ig.json\n cluster.go:125: + sudo ig run trace_dns:v0.50.0 --help\n cluster.go:125: + trap 'kill %%' ERR\n cluster.go:125: + timeout 30 grep -F -m1 running...\n cluster.go:125: + sudo ig run trace_dns:v0.50.0 --host --filter name=flatcar.org. --output json --verbose\n cluster.go:125: + dig kinvolk.io\n cluster.go:125: + dig flatcar.org\n cluster.go:125: + dig stable.release.flatcar-linux.net\n cluster.go:125: + kill %%\n cluster.go:125: + wait\n cluster.go:125: + jq -s -e '.[] | select(.name == \"flatcar.org.\")' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.name == \"kinvolk.io.\"))' ig.json\n cluster.go:125: + jq -s -e 'isempty(.[] | select(.name == \"stable.release.flatcar-linux.net.\"))' ig.json\n"},{"name":"kubeadm.v1.36.1.flannel.base/NFS_deployment","result":"PASS","duration":18484190704,"output":" cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"kubeadm.v1.36.1.flannel.base","result":"PASS","duration":501861736287,"output":" cluster.go:125: I1028 23:28:17.292162 2548 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.36\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.36.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.14.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.6.8-0\n cluster.go:125: I1028 23:28:27.476958 2948 version.go:260] remote version is much newer: v1.37.2; falling back to: stable-1.36\n cluster.go:125: [init] Using Kubernetes version: v1.36.6\n cluster.go:125: [preflight] Running pre-flight checks\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-092f45e506\" could not be reached\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-092f45e506\": lookup ci-4820.1.0-n-092f45e506 on 168.63.129.16:53: no such host\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster\n cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection\n cluster.go:125: [preflight] You can also perform this action beforehand using 'kubeadm config images pull'\n cluster.go:125: [certs] Using certificateDir folder \"/etc/kubernetes/pki\"\n cluster.go:125: [certs] Generating \"ca\" certificate and key\n cluster.go:125: [certs] Generating \"apiserver\" certificate and key\n cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4820.1.0-n-092f45e506 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.0.0.22]\n cluster.go:125: [certs] Generating \"apiserver-kubelet-client\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-ca\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-client\" certificate and key\n cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation\n cluster.go:125: [certs] Generating \"sa\" key and public key\n cluster.go:125: [kubeconfig] Using kubeconfig folder \"/etc/kubernetes\"\n cluster.go:125: [kubeconfig] Writing \"admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"super-admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"kubelet.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"controller-manager.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"scheduler.conf\" kubeconfig file\n cluster.go:125: [control-plane] Using manifest folder \"/etc/kubernetes/manifests\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-apiserver\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-controller-manager\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-scheduler\"\n cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file \"/var/lib/kubelet/kubeadm-flags.env\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/instance-config.yaml\"\n cluster.go:125: [patches] Applied patch of type \"application/strategic-merge-patch+json\" to target \"kubeletconfiguration\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/config.yaml\"\n cluster.go:125: [kubelet-start] Starting the kubelet\n cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory \"/etc/kubernetes/manifests\"\n cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s\n cluster.go:125: [kubelet-check] The kubelet is healthy after 583.119µs\n cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s\n cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.22:6443/livez\n cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz\n cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez\n cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 4.06223ms\n cluster.go:125: [control-plane-check] kube-scheduler is healthy after 7.319553ms\n cluster.go:125: [control-plane-check] kube-apiserver is healthy after 2.008769996s\n cluster.go:125: [upload-config] Storing the configuration used in ConfigMap \"kubeadm-config\" in the \"kube-system\" Namespace\n cluster.go:125: [kubelet] Creating a ConfigMap \"kubelet-config\" in namespace kube-system with the configuration for the kubelets in the cluster\n cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-092f45e506 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-092f45e506 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]\n cluster.go:125: [bootstrap-token] Using token: h42l2s.u2953dqhh2raczjq\n cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the API server kubelet client certificate to access the kubelet API\n cluster.go:125: [bootstrap-token] Creating the \"cluster-info\" ConfigMap in the \"kube-public\" namespace\n cluster.go:125: [kubelet-finalize] Updating \"/etc/kubernetes/kubelet.conf\" to point to a rotatable kubelet client certificate and key\n cluster.go:125: [addons] Applied essential addon: CoreDNS\n cluster.go:125: [addons] Applied essential addon: kube-proxy\n cluster.go:125: \n cluster.go:125: Your Kubernetes control-plane has initialized successfully!\n cluster.go:125: \n cluster.go:125: To start using your cluster, you need to run the following as a regular user:\n cluster.go:125: \n cluster.go:125: mkdir -p $HOME/.kube\n cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\n cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config\n cluster.go:125: \n cluster.go:125: Alternatively, if you are the root user, you can run:\n cluster.go:125: \n cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf\n cluster.go:125: \n cluster.go:125: You should now deploy a pod network to the cluster.\n cluster.go:125: Run \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/\n cluster.go:125: \n cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:\n cluster.go:125: \n cluster.go:125: kubeadm join 10.0.0.22:6443 --token h42l2s.u2953dqhh2raczjq \\\n cluster.go:125: \t--discovery-token-ca-cert-hash sha256:426571299ad745b596848b31b0879544cec39e860e3b475d3e3cd897b4c83914 \n cluster.go:125: namespace/kube-flannel created\n cluster.go:125: clusterrole.rbac.authorization.k8s.io/flannel created\n cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/flannel created\n cluster.go:125: serviceaccount/flannel created\n cluster.go:125: configmap/kube-flannel-cfg created\n cluster.go:125: daemonset.apps/kube-flannel-ds created\n cluster.go:125: W1028 23:31:04.971900 2655 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: W1028 23:31:05.089130 2655 utils.go:69] The recommended value for \"bindAddress\" in \"KubeProxyConfiguration\" is: ::; the provided value is: 0.0.0.0\n --- PASS: kubeadm.v1.36.1.flannel.base/node_readiness (7.69s)\n --- PASS: kubeadm.v1.36.1.flannel.base/nginx_deployment (21.67s)\n --- PASS: kubeadm.v1.36.1.flannel.base/NFS_deployment (18.48s)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"cl.etcd-member.v2-backup-restore","result":"PASS","duration":153224941470,"output":" cluster.go:125: 2026-10-28T23:32:06Z\tinfo\tetcdutl/backup_command.go:223\tignoring EntryConfChange raft entry\n cluster.go:125: 2026-10-28T23:32:06Z\tinfo\tetcdutl/backup_command.go:238\tignoring member attribute update on\t{\"entry\": \"Term:2 Index:3 Data:\\\"\\\\010\\\\201\\\\206\\\\344\\\\327\\\\315\\\\260\\\\350\\\\322\\\\007\\\\022\\\\003PUT\\\\032\u0026/0/members/e195dbfb456f07a5/attributes\\\\\\\"R{\\\\\\\"name\\\\\\\":\\\\\\\"98fa57e90b814f4dbf16f60c9c5131ec\\\\\\\",\\\\\\\"clientURLs\\\\\\\":[\\\\\\\"http://10.0.0.18:2379\\\\\\\"]}(\\\\0002\\\\0008\\\\000H\\\\000P\\\\000X\\\\000`\\\\000h\\\\000p\\\\000x\\\\000\\\\200\\\\001\\\\000\\\" \", \"v2Req.Path\": \"/0/members/e195dbfb456f07a5/attributes\"}\n cluster.go:125: 2026-10-28T23:32:06Z\tinfo\tetcdutl/backup_command.go:259\tignoring v3 raft entry\n cluster.go:125: 2026-10-28T23:32:06Z\tinfo\tmembership/store.go:138\tTrimming membership information from the backend...\n"},{"name":"systemd.sysusers.gshadow","result":"PASS","duration":157994963819,"output":""},{"name":"cl.verity/verify","result":"PASS","duration":69675267037,"output":" cluster.go:125: Success\n"},{"name":"cl.locksmith.cluster","result":"PASS","duration":553817891830,"output":""},{"name":"cl.verity/corruption","result":"PASS","duration":175073325640,"output":""},{"name":"cl.verity","result":"PASS","duration":368378938971,"output":" --- PASS: cl.verity/verify (69.68s)\n cluster.go:125: Success\n --- PASS: cl.verity/corruption (175.07s)\n"},{"name":"kubeadm.v1.35.1.cilium.base","result":"FAIL","duration":353436798102,"output":" kubeadm.go:197: unable to setup cluster: unable to get etcd node health: health polling failed: Process exited with status 1: \n"},{"name":"kubeadm.v1.37.0.flannel.base/node_readiness","result":"PASS","duration":14026948174,"output":""},{"name":"kubeadm.v1.37.0.flannel.base/nginx_deployment","result":"PASS","duration":15299820332,"output":""},{"name":"kubeadm.v1.37.0.flannel.base/NFS_deployment","result":"PASS","duration":18578523975,"output":" cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"},{"name":"kubeadm.v1.37.0.flannel.base","result":"PASS","duration":513998568376,"output":" cluster.go:125: [config/images] Pulled registry.k8s.io/kube-apiserver:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-controller-manager:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-scheduler:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/kube-proxy:v1.37.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/coredns/coredns:v1.14.6\n cluster.go:125: [config/images] Pulled registry.k8s.io/pause:3.10.2\n cluster.go:125: [config/images] Pulled registry.k8s.io/etcd:3.7.0-0\n cluster.go:125: [init] Using Kubernetes version: v1.37.2\n cluster.go:125: [preflight] Running pre-flight checks\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-83a6b8af43\" could not be reached\n cluster.go:125: \t[WARNING Hostname]: hostname \"ci-4820.1.0-n-83a6b8af43\": lookup ci-4820.1.0-n-83a6b8af43 on 168.63.129.16:53: no such host\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n cluster.go:125: [preflight] Pulling images required for setting up a Kubernetes cluster\n cluster.go:125: [preflight] This might take a minute or two, depending on the speed of your internet connection\n cluster.go:125: [preflight] You can also perform this action beforehand using 'kubeadm config images pull'\n cluster.go:125: [certs] Using certificateDir folder \"/etc/kubernetes/pki\"\n cluster.go:125: [certs] Generating \"ca\" certificate and key\n cluster.go:125: [certs] Generating \"apiserver\" certificate and key\n cluster.go:125: [certs] apiserver serving cert is signed for DNS names [ci-4820.1.0-n-83a6b8af43 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.0.0.11]\n cluster.go:125: [certs] Generating \"apiserver-kubelet-client\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-ca\" certificate and key\n cluster.go:125: [certs] Generating \"front-proxy-client\" certificate and key\n cluster.go:125: [certs] External etcd mode: Skipping etcd/ca certificate authority generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/server certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/peer certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping etcd/healthcheck-client certificate generation\n cluster.go:125: [certs] External etcd mode: Skipping apiserver-etcd-client certificate generation\n cluster.go:125: [certs] Generating \"sa\" key and public key\n cluster.go:125: [kubeconfig] Using kubeconfig folder \"/etc/kubernetes\"\n cluster.go:125: [kubeconfig] Writing \"admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"super-admin.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"kubelet.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"controller-manager.conf\" kubeconfig file\n cluster.go:125: [kubeconfig] Writing \"scheduler.conf\" kubeconfig file\n cluster.go:125: [control-plane] Using manifest folder \"/etc/kubernetes/manifests\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-apiserver\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-controller-manager\"\n cluster.go:125: [control-plane] Creating static Pod manifest for \"kube-scheduler\"\n cluster.go:125: [kubelet-start] Writing kubelet environment file with flags to file \"/var/lib/kubelet/kubeadm-flags.env\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/instance-config.yaml\"\n cluster.go:125: [patches] Applied patch of type \"application/strategic-merge-patch+json\" to target \"kubeletconfiguration\"\n cluster.go:125: [kubelet-start] Writing kubelet configuration to file \"/var/lib/kubelet/config.yaml\"\n cluster.go:125: [kubelet-start] Starting the kubelet\n cluster.go:125: [wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory \"/etc/kubernetes/manifests\"\n cluster.go:125: [kubelet-check] Waiting for a healthy kubelet at http://127.0.0.1:10248/healthz. This can take up to 4m0s\n cluster.go:125: [kubelet-check] The kubelet is healthy after 645.531µs\n cluster.go:125: [control-plane-check] Waiting for healthy control plane components. This can take up to 30m0s\n cluster.go:125: [control-plane-check] Checking kube-apiserver at https://10.0.0.11:6443/livez\n cluster.go:125: [control-plane-check] Checking kube-controller-manager at https://127.0.0.1:10257/healthz\n cluster.go:125: [control-plane-check] Checking kube-scheduler at https://127.0.0.1:10259/livez\n cluster.go:125: [control-plane-check] kube-controller-manager is healthy after 6.982791ms\n cluster.go:125: [control-plane-check] kube-scheduler is healthy after 10.545138ms\n cluster.go:125: [control-plane-check] kube-apiserver is healthy after 2.002258488s\n cluster.go:125: [upload-config] Storing the configuration used in ConfigMap \"kubeadm-config\" in the \"kube-system\" Namespace\n cluster.go:125: [kubelet] Creating a ConfigMap \"kubelet-config\" in namespace kube-system with the configuration for the kubelets in the cluster\n cluster.go:125: [upload-certs] Skipping phase. Please see --upload-certs\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-83a6b8af43 as control-plane by adding the labels: [node-role.kubernetes.io/control-plane node.kubernetes.io/exclude-from-external-load-balancers]\n cluster.go:125: [mark-control-plane] Marking the node ci-4820.1.0-n-83a6b8af43 as control-plane by adding the taints [node-role.kubernetes.io/control-plane:NoSchedule]\n cluster.go:125: [bootstrap-token] Using token: konvy8.ntcqwucebma647z7\n cluster.go:125: [bootstrap-token] Configuring bootstrap tokens, cluster-info ConfigMap, RBAC Roles\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to get nodes\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow certificate rotation for all node client certificates in the cluster\n cluster.go:125: [bootstrap-token] Configured RBAC rules to allow the API server kubelet client certificate to access the kubelet API\n cluster.go:125: [bootstrap-token] Creating the \"cluster-info\" ConfigMap in the \"kube-public\" namespace\n cluster.go:125: [kubelet-finalize] Updating \"/etc/kubernetes/kubelet.conf\" to point to a rotatable kubelet client certificate and key\n cluster.go:125: [addons] Applied essential addon: CoreDNS\n cluster.go:125: [addons] Applied essential addon: kube-proxy\n cluster.go:125: \n cluster.go:125: Your Kubernetes control-plane has initialized successfully!\n cluster.go:125: \n cluster.go:125: To start using your cluster, you need to run the following as a regular user:\n cluster.go:125: \n cluster.go:125: mkdir -p $HOME/.kube\n cluster.go:125: sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config\n cluster.go:125: sudo chown $(id -u):$(id -g) $HOME/.kube/config\n cluster.go:125: \n cluster.go:125: Alternatively, if you are the root user, you can run:\n cluster.go:125: \n cluster.go:125: export KUBECONFIG=/etc/kubernetes/admin.conf\n cluster.go:125: \n cluster.go:125: You should now deploy a pod network to the cluster.\n cluster.go:125: Run \"kubectl apply -f [podnetwork].yaml\" with one of the options listed at:\n cluster.go:125: https://kubernetes.io/docs/concepts/cluster-administration/addons/\n cluster.go:125: \n cluster.go:125: Then you can join any number of worker nodes by running the following on each as root:\n cluster.go:125: \n cluster.go:125: kubeadm join 10.0.0.11:6443 --token konvy8.ntcqwucebma647z7 \\\n cluster.go:125: \t--discovery-token-ca-cert-hash sha256:d5e955c69d1cf3ab5e173583128afce119488d4bc35b47fa7a1c5d873732895b \n cluster.go:125: namespace/kube-flannel created\n cluster.go:125: clusterrole.rbac.authorization.k8s.io/flannel created\n cluster.go:125: clusterrolebinding.rbac.authorization.k8s.io/flannel created\n cluster.go:125: serviceaccount/flannel created\n cluster.go:125: configmap/kube-flannel-cfg created\n cluster.go:125: daemonset.apps/kube-flannel-ds created\n cluster.go:125: W1028 23:35:51.717248 2652 joinconfiguration.go:112] [config] WARNING: Ignored configuration document with GroupVersionKind kubelet.config.k8s.io/v1beta1, Kind=KubeletConfiguration\n cluster.go:125: \t[WARNING Service-kubelet]: kubelet service is not enabled, please run 'systemctl enable kubelet.service'\n --- PASS: kubeadm.v1.37.0.flannel.base/node_readiness (14.03s)\n --- PASS: kubeadm.v1.37.0.flannel.base/nginx_deployment (15.30s)\n --- PASS: kubeadm.v1.37.0.flannel.base/NFS_deployment (18.58s)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n cluster.go:125: jq: error (at \u003cstdin\u003e:123): Cannot iterate over null (null)\n"}],"result":"FAIL","platform":"azure","version":"4820.1.0"}