[ { "branch": "main", "index": "0", "phase": "pre", "playbook": "github.com/vexxhost/zuul-config/playbooks/base/pre.yaml", "plays": [ { "play": { "duration": { "end": "2026-03-17T16:02:21.943610Z", "start": "2026-03-17T16:02:16.857028Z" }, "id": "0242ac17-0011-229e-fbbb-000000000004", "name": "localhost" }, "tasks": [ { "hosts": { "localhost": { "action": "gather_facts", "ansible_facts": { "ansible_apparmor": { "status": "disabled" }, "ansible_architecture": "x86_64", "ansible_bios_date": "NA", "ansible_bios_vendor": "NA", "ansible_bios_version": "NA", "ansible_board_asset_tag": "NA", "ansible_board_name": "NA", "ansible_board_serial": "NA", "ansible_board_vendor": "NA", "ansible_board_version": "NA", "ansible_chassis_asset_tag": "NA", "ansible_chassis_serial": "NA", "ansible_chassis_vendor": "NA", "ansible_chassis_version": "NA", "ansible_cmdline": { "BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic", "console": "ttyS0", "ro": true, "root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c" }, "ansible_date_time": { "date": "2026-03-17", "day": "17", "epoch": "1773763337", "epoch_int": "1773763337", "hour": "16", "iso8601": "2026-03-17T16:02:17Z", "iso8601_basic": "20260317T160217474393", "iso8601_basic_short": "20260317T160217", "iso8601_micro": "2026-03-17T16:02:17.474393Z", "minute": "02", "month": "03", "second": "17", "time": "16:02:17", "tz": "UTC", "tz_dst": "UTC", "tz_offset": "+0000", "weekday": "Tuesday", "weekday_number": "2", "weeknumber": "11", "year": "2026" }, "ansible_devices": {}, "ansible_distribution": "Debian", "ansible_distribution_major_version": "12", "ansible_distribution_release": "bookworm", "ansible_distribution_version": "12", "ansible_dns": { "nameservers": [ "127.0.0.11" ], "options": { "edns0": true, "ndots": "0", "trust-ad": true }, "search": [ "openstacklocal" ] }, "ansible_domain": "", "ansible_effective_group_id": 0, "ansible_effective_user_id": 0, "ansible_env": { "ANSIBLE_CONFIG": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/ansible/pre_playbook_0/ansible.cfg", "DEBIAN_FRONTEND": "noninteractive", "GPG_KEY": "A035C8C19219BA821ECEA86B64E628F8D684696D", "HOME": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work", "HOSTNAME": "0a8996d2b663", "LANG": "C.UTF-8", "PATH": "/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "PWD": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_0/github.com/vexxhost/zuul-config/playbooks/base", "PYTHONPATH": "/var/lib/zuul/ansible/9", "PYTHON_SHA256": "8d3ed8ec5c88c1c95f5e558612a725450d2452813ddad5e58fdb1a53b1209b78", "PYTHON_VERSION": "3.11.14", "SSH_AGENT_PID": "542290", "SSH_AUTH_SOCK": "/tmp/ssh-VtaDI2T8qPWa/agent.542289", "TMP": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/tmp", "ZUUL_ANSIBLE_SPLIT_STREAMS": "False", "ZUUL_JOBDIR": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a", "ZUUL_JOB_FAILURE_OUTPUT": "[]", "ZUUL_JOB_LOG_CONFIG": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/ansible/logging.json", "ZUUL_OUTPUT_MAX_BYTES": "1073741824" }, "ansible_fibre_channel_wwn": [], "ansible_fips": false, "ansible_form_factor": "NA", "ansible_fqdn": "0a8996d2b663", "ansible_hostname": "0a8996d2b663", "ansible_hostnqn": "", "ansible_is_chroot": false, "ansible_iscsi_iqn": "", "ansible_kernel": "5.15.0-130-generic", "ansible_kernel_version": "#140-Ubuntu SMP Wed Dec 18 17:59:53 UTC 2024", "ansible_loadavg": { "15m": 7.10595703125, "1m": 5.59814453125, "5m": 6.73974609375 }, "ansible_local": {}, "ansible_lsb": {}, "ansible_lvm": "N/A", "ansible_machine": "x86_64", "ansible_memfree_mb": 6639, "ansible_memory_mb": { "nocache": { "free": 14125, "used": 17965 }, "real": { "free": 6639, "total": 32090, "used": 25451 }, "swap": { "cached": 0, "free": 0, "total": 0, "used": 0 } }, "ansible_memtotal_mb": 32090, "ansible_mounts": [ { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/etc/resolv.conf", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/etc/hosts", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work", "options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/var/lib/zuul/ansible/9", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/ansible", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/untrusted", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/ansible/pre_playbook_0", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/etc/zuul/site-variables.yaml", "options": "ro,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" }, { "block_available": 221462179, "block_size": 4096, "block_total": 263940717, "block_used": 42478538, "device": "/dev/vdb", "fstype": "ext4", "inode_available": 63295875, "inode_total": 67108864, "inode_used": 3812989, "mount": "/srv/static/logs", "options": "rw,nosuid,nodev,relatime,discard", "size_available": 907109085184, "size_total": 1081101176832, "uuid": "N/A" }, { "block_available": 8779762, "block_size": 4096, "block_total": 40601580, "block_used": 31821818, "device": "/dev/vda1", "fstype": "ext4", "inode_available": 16788973, "inode_total": 20643840, "inode_used": 3854867, "mount": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/.ansible", "options": "rw,nosuid,nodev,relatime,discard,errors=remount-ro,bind", "size_available": 35961905152, "size_total": 166304071680, "uuid": "N/A" } ], "ansible_nodename": "0a8996d2b663", "ansible_os_family": "Debian", "ansible_pkg_mgr": "apt", "ansible_proc_cmdline": { "BOOT_IMAGE": "/boot/vmlinuz-5.15.0-130-generic", "console": [ "tty1", "ttyS0" ], "ro": true, "root": "UUID=5a569d86-b935-46dd-ae79-7a72a25b6a4c" }, "ansible_processor": [ "0", "AuthenticAMD", "AMD EPYC-Rome Processor", "1", "AuthenticAMD", "AMD EPYC-Rome Processor", "2", "AuthenticAMD", "AMD EPYC-Rome Processor", "3", "AuthenticAMD", "AMD EPYC-Rome Processor", "4", "AuthenticAMD", "AMD EPYC-Rome Processor", "5", "AuthenticAMD", "AMD EPYC-Rome Processor", "6", "AuthenticAMD", "AMD EPYC-Rome Processor", "7", "AuthenticAMD", "AMD EPYC-Rome Processor", "8", "AuthenticAMD", "AMD EPYC-Rome Processor", "9", "AuthenticAMD", "AMD EPYC-Rome Processor", "10", "AuthenticAMD", "AMD EPYC-Rome Processor", "11", "AuthenticAMD", "AMD EPYC-Rome Processor", "12", "AuthenticAMD", "AMD EPYC-Rome Processor", "13", "AuthenticAMD", "AMD EPYC-Rome Processor", "14", "AuthenticAMD", "AMD EPYC-Rome Processor", "15", "AuthenticAMD", "AMD EPYC-Rome Processor" ], "ansible_processor_cores": 1, "ansible_processor_count": 16, "ansible_processor_nproc": 16, "ansible_processor_threads_per_core": 1, "ansible_processor_vcpus": 16, "ansible_product_name": "NA", "ansible_product_serial": "NA", "ansible_product_uuid": "NA", "ansible_product_version": "NA", "ansible_python": { "executable": "/usr/local/lib/zuul/ansible/9/bin/python", "has_sslcontext": true, "type": "cpython", "version": { "major": 3, "micro": 14, "minor": 11, "releaselevel": "final", "serial": 0 }, "version_info": [ 3, 11, 14, "final", 0 ] }, "ansible_python_version": "3.11.14", "ansible_real_group_id": 0, "ansible_real_user_id": 0, "ansible_selinux": { "status": "disabled" }, "ansible_selinux_python_present": true, "ansible_service_mgr": "bwrap", "ansible_swapfree_mb": 0, "ansible_swaptotal_mb": 0, "ansible_system": "Linux", "ansible_system_capabilities": "N/A", "ansible_system_capabilities_enforced": "N/A", "ansible_system_vendor": "NA", "ansible_uptime_seconds": 37427067, "ansible_user_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work", "ansible_user_gecos": "root", "ansible_user_gid": 0, "ansible_user_id": "root", "ansible_user_shell": "/bin/bash", "ansible_user_uid": 0, "ansible_userspace_architecture": "x86_64", "ansible_userspace_bits": "64", "ansible_virtualization_role": "host", "ansible_virtualization_tech_guest": [], "ansible_virtualization_tech_host": [ "kvm" ], "ansible_virtualization_type": "kvm", "gather_subset": [ "all" ], "module_setup": true }, "changed": false, "deprecations": [], "warnings": [] } }, "task": { "duration": { "end": "2026-03-17T16:02:17.913826Z", "start": "2026-03-17T16:02:16.865809Z" }, "id": "0242ac17-0011-229e-fbbb-00000000002c", "name": "Gathering Facts" } }, { "hosts": { "localhost": { "action": "include_role", "changed": false, "include_args": { "name": "set-zuul-log-path-fact" } } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000008", "name": "emit-job-header", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header" }, "task": { "duration": { "end": "2026-03-17T16:02:17.939987Z", "start": "2026-03-17T16:02:17.919395Z" }, "id": "0242ac17-0011-229e-fbbb-00000000000a", "name": "Setup log path fact" } }, { "hosts": { "localhost": { "action": "set_fact", "ansible_facts": { "zuul_log_path": "5e1/oss/5e16c139515c4423bfa1f2ef8fb52e9a" }, "changed": false } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000056", "name": "set-zuul-log-path-fact", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/set-zuul-log-path-fact" }, "task": { "duration": { "end": "2026-03-17T16:02:17.985117Z", "start": "2026-03-17T16:02:17.954948Z" }, "id": "0242ac17-0011-229e-fbbb-000000000058", "name": "Set log path for a build" } }, { "hosts": { "localhost": { "action": "debug", "changed": false, "msg": "# Job Information\nAnsible Version: 2.16.16\nJob: ansible-collection-kubernetes-molecule-cluster-upgrade\nPipeline: check\nExecutor: 0a8996d2b663\nTriggered by: https://github.com/vexxhost/ansible-collection-kubernetes/pull/238\nEvent ID: f8aa8e90-2219-11f1-8a50-06262c651333\n" } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000008", "name": "emit-job-header", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header" }, "task": { "duration": { "end": "2026-03-17T16:02:18.033671Z", "start": "2026-03-17T16:02:17.994040Z" }, "id": "0242ac17-0011-229e-fbbb-00000000000b", "name": "Print job information" } }, { "hosts": { "localhost": { "action": "debug", "changed": false, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_item", "changed": false, "failed": false, "msg": "# Node Information\nInventory Hostname: controller-1\nHostname: np0000159414\nUsername: zuul\nDistro: Debian 13.3\nProvider: yul1\nRegion: ca-ymq-1\nLabel: debian-trixie\nProduct Name: OpenStack Nova\nInterface IP: 199.19.213.74\n", "zj_item": "controller-1" }, { "ansible_loop_var": "zj_item", "changed": false, "failed": false, "msg": "# Node Information\nInventory Hostname: controller-2\nHostname: np0000159415\nUsername: zuul\nDistro: Debian 13.3\nProvider: yul1\nRegion: ca-ymq-1\nLabel: debian-trixie\nProduct Name: OpenStack Nova\nInterface IP: 199.19.213.210\n", "zj_item": "controller-2" }, { "ansible_loop_var": "zj_item", "changed": false, "failed": false, "msg": "# Node Information\nInventory Hostname: controller-3\nHostname: np0000159416\nUsername: zuul\nDistro: Debian 13.3\nProvider: yul1\nRegion: ca-ymq-1\nLabel: debian-trixie\nProduct Name: OpenStack Nova\nInterface IP: 199.19.213.235\n", "zj_item": "controller-3" } ] } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000008", "name": "emit-job-header", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/emit-job-header" }, "task": { "duration": { "end": "2026-03-17T16:02:18.206928Z", "start": "2026-03-17T16:02:18.037592Z" }, "id": "0242ac17-0011-229e-fbbb-00000000000c", "name": "Print node information" } }, { "hosts": { "localhost": { "action": "file", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/zuul-info", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/zuul-info", "state": "absent" } }, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/zuul-info", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/zuul-info", "size": 4096, "state": "directory", "uid": 0 } }, "role": { "id": "0242ac17-0011-229e-fbbb-00000000000f", "name": "log-inventory", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory" }, "task": { "duration": { "end": "2026-03-17T16:02:18.623987Z", "start": "2026-03-17T16:02:18.213862Z" }, "id": "0242ac17-0011-229e-fbbb-000000000011", "name": "Ensure Zuul Ansible directory exists" } }, { "hosts": { "localhost": { "action": "copy", "changed": true, "checksum": "8b3fa8a3c5be41b1176a43a63302b3009790ca0f", "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/zuul-info/inventory.yaml", "diff": [], "gid": 0, "group": "root", "invocation": { "module_args": { "_original_basename": "inventory.yaml", "attributes": null, "backup": false, "checksum": "8b3fa8a3c5be41b1176a43a63302b3009790ca0f", "content": null, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/zuul-info", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/.ansible/tmp/ansible-tmp-1773763338.6552243-84-270593273472537/source", "unsafe_writes": false, "validate": null } }, "md5sum": "5ccd4e6f86149df6fb36d593babae36f", "mode": "0644", "owner": "root", "size": 24787, "src": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/.ansible/tmp/ansible-tmp-1773763338.6552243-84-270593273472537/source", "state": "file", "uid": 0 } }, "role": { "id": "0242ac17-0011-229e-fbbb-00000000000f", "name": "log-inventory", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/log-inventory" }, "task": { "duration": { "end": "2026-03-17T16:02:21.943610Z", "start": "2026-03-17T16:02:18.629821Z" }, "id": "0242ac17-0011-229e-fbbb-000000000012", "name": "Copy ansible inventory to logs dir" } } ] }, { "play": { "duration": { "end": "2026-03-17T16:02:29.263412Z", "start": "2026-03-17T16:02:21.952454Z" }, "id": "0242ac17-0011-229e-fbbb-000000000013", "name": "all" }, "tasks": [ { "hosts": { "controller-1": { "action": "stat", "changed": false, "failed_when_result": false, "invocation": { "module_args": { "checksum_algorithm": "sha1", "follow": false, "get_attributes": true, "get_checksum": true, "get_mime": true, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa" } }, "stat": { "exists": false } } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:22.409724Z", "start": "2026-03-17T16:02:21.967438Z" }, "id": "0242ac17-0011-229e-fbbb-00000000001a", "name": "Check to see if ssh key was already created for this build" } }, { "hosts": { "controller-1": { "action": "include_tasks", "changed": false, "include": "create-key-and-replace.yaml", "include_args": {} }, "controller-2": { "action": "include_tasks", "changed": false, "include": "create-key-and-replace.yaml", "include_args": {} }, "controller-3": { "action": "include_tasks", "changed": false, "include": "create-key-and-replace.yaml", "include_args": {} } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:22.473552Z", "start": "2026-03-17T16:02:22.420700Z" }, "id": "0242ac17-0011-229e-fbbb-00000000001b", "name": "Create a new key in workspace based on build UUID" } }, { "hosts": { "controller-1": { "action": "command", "changed": true, "cmd": [ "ssh-keygen", "-t", "rsa", "-N", "", "-C", "zuul-build-sshkey", "-f", "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa", "-b", "3072" ], "delta": "0:00:00.266257", "end": "2026-03-17 16:02:23.149182", "invocation": { "module_args": { "_raw_params": "ssh-keygen -t rsa -N '' -C 'zuul-build-sshkey' -f /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa -b 3072", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0011-229e-fbbb-0000000000a6-0-controller1", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:02:22.882925", "stderr": "", "stderr_lines": [], "stdout": "Generating public/private rsa key pair.\nYour identification has been saved in /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa\nYour public key has been saved in /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa.pub\nThe key fingerprint is:\nSHA256:/APZIfgtt9s1Bk8vJ8MgwoIoF/i5ZSgDHq5srTZ9UPM zuul-build-sshkey\nThe key's randomart image is:\n+---[RSA 3072]----+\n| |\n| . . |\n|o.. . . . |\n|+..= + + = . |\n|+o* = + S = o . |\n|o=.= E * o * . |\n|.oo.. + X o|\n|.o.. . + o * |\n|... . . . |\n+----[SHA256]-----+", "stdout_lines": [ "Generating public/private rsa key pair.", "Your identification has been saved in /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa", "Your public key has been saved in /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa.pub", "The key fingerprint is:", "SHA256:/APZIfgtt9s1Bk8vJ8MgwoIoF/i5ZSgDHq5srTZ9UPM zuul-build-sshkey", "The key's randomart image is:", "+---[RSA 3072]----+", "| |", "| . . |", "|o.. . . . |", "|+..= + + = . |", "|+o* = + S = o . |", "|o=.= E * o * . |", "|.oo.. + X o|", "|.o.. . + o * |", "|... . . . |", "+----[SHA256]-----+" ], "zuul_log_id": "0242ac17-0011-229e-fbbb-0000000000a6-0-controller1" } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:23.187792Z", "start": "2026-03-17T16:02:22.499959Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000a6", "name": "Create Temp SSH key" } }, { "hosts": { "controller-1": { "action": "include_tasks", "changed": false, "include": "remote-linux.yaml", "include_args": {} }, "controller-2": { "action": "include_tasks", "changed": false, "include": "remote-linux.yaml", "include_args": {} }, "controller-3": { "action": "include_tasks", "changed": false, "include": "remote-linux.yaml", "include_args": {} } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:23.232239Z", "start": "2026-03-17T16:02:23.192247Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000a7", "name": "Remote setup ssh keys (linux)" } }, { "hosts": { "controller-1": { "action": "lineinfile", "changed": false, "false_condition": "zuul_build_sshkey_cleanup", "skip_reason": "Conditional result was False", "skipped": true }, "controller-2": { "action": "lineinfile", "changed": false, "false_condition": "zuul_build_sshkey_cleanup", "skip_reason": "Conditional result was False", "skipped": true }, "controller-3": { "action": "lineinfile", "changed": false, "false_condition": "zuul_build_sshkey_cleanup", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:23.298998Z", "start": "2026-03-17T16:02:23.258576Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000d4", "name": "Remove previously added zuul-build-sshkey" } }, { "hosts": { "controller-1": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true }, "controller-2": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxxFLLQTd3Lw6XHg51c9pgmD4TUb2gClLUiNUFsxHWmtUmrZYoRKEtp077UMBCwI6wQkwDvKyzY3CgDV7LmYAnbexiy10QDzfC4YoHkju1qGewREYiGRia2vmIWes4pnYJdcc455noD5w/sqzmr6NnDsHHgPMUTsnOLsiuBLoZCeXJ60ypCjsc8DqhuP9suEFgN+cyTjZPwEsd6gy94xpxIJza40/6EALBH8cd0vBU13z5J39uQi5bd8/lLrzVinhtSErDyV9wxk55wc6/ga9CwE4vuVqi2fMTjTEY7NQLGh5gAya/6fRTnk2FoBUauVXTSckMfgjnpyg1IwTOlZFVMo8tmCxm2giO3FS5KHOjjIx7c9KItgOT9+nLn+h6bUWL4kpq+8tZC0pMVspfObBPGXFBu4oUQXCQeTlnGVIx5vmhjewxZDv/qP7F5PT9oHcTvS2i043oJu+80Xe+A3zDS6fproFlnlRSq61PttdCNUUqcHrsQsmem9ZAWWJO4is= zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true }, "controller-3": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "present", "user": "zuul", "validate_certs": true } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:23.835675Z", "start": "2026-03-17T16:02:23.308131Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000d5", "name": "Enable access via build key on all nodes" } }, { "hosts": { "controller-1": { "action": "file", "changed": false, "diff": { "after": { "path": "/home/zuul/.ssh" }, "before": { "path": "/home/zuul/.ssh" } }, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 448, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/.ssh", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0700", "owner": "zuul", "path": "/home/zuul/.ssh", "size": 4096, "state": "directory", "uid": 1000 }, "controller-2": { "action": "file", "changed": false, "diff": { "after": { "path": "/home/zuul/.ssh" }, "before": { "path": "/home/zuul/.ssh" } }, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 448, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/.ssh", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0700", "owner": "zuul", "path": "/home/zuul/.ssh", "size": 4096, "state": "directory", "uid": 1000 }, "controller-3": { "action": "file", "changed": false, "diff": { "after": { "path": "/home/zuul/.ssh" }, "before": { "path": "/home/zuul/.ssh" } }, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 448, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/.ssh", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0700", "owner": "zuul", "path": "/home/zuul/.ssh", "size": 4096, "state": "directory", "uid": 1000 } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:24.089705Z", "start": "2026-03-17T16:02:23.839339Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000d6", "name": "Make sure user has a .ssh" } }, { "hosts": { "controller-1": { "action": "copy", "changed": true, "checksum": "f6c7d23e759703ba8bf9d47178669e422091fd99", "dest": "/home/zuul/.ssh/id_rsa", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa", "attributes": null, "backup": false, "checksum": "f6c7d23e759703ba8bf9d47178669e422091fd99", "content": null, "dest": "/home/zuul/.ssh/id_rsa", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 384, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.1394627-204-85192550464360/source", "unsafe_writes": false, "validate": null } }, "md5sum": "da19760fb0ef4860249b72c6cc631295", "mode": "0600", "owner": "zuul", "size": 2602, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.1394627-204-85192550464360/source", "state": "file", "uid": 1000 }, "controller-2": { "action": "copy", "changed": true, "checksum": "f6c7d23e759703ba8bf9d47178669e422091fd99", "dest": "/home/zuul/.ssh/id_rsa", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa", "attributes": null, "backup": false, "checksum": "f6c7d23e759703ba8bf9d47178669e422091fd99", "content": null, "dest": "/home/zuul/.ssh/id_rsa", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 384, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.1480217-205-203979919978343/source", "unsafe_writes": false, "validate": null } }, "md5sum": "da19760fb0ef4860249b72c6cc631295", "mode": "0600", "owner": "zuul", "size": 2602, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.1480217-205-203979919978343/source", "state": "file", "uid": 1000 }, "controller-3": { "action": "copy", "changed": true, "checksum": "f6c7d23e759703ba8bf9d47178669e422091fd99", "dest": "/home/zuul/.ssh/id_rsa", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa", "attributes": null, "backup": false, "checksum": "f6c7d23e759703ba8bf9d47178669e422091fd99", "content": null, "dest": "/home/zuul/.ssh/id_rsa", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 384, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.162939-207-135336720623940/source", "unsafe_writes": false, "validate": null } }, "md5sum": "da19760fb0ef4860249b72c6cc631295", "mode": "0600", "owner": "zuul", "size": 2602, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.162939-207-135336720623940/source", "state": "file", "uid": 1000 } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:24.653452Z", "start": "2026-03-17T16:02:24.096916Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000d7", "name": "Install build private key as SSH key on all nodes" } }, { "hosts": { "controller-1": { "action": "copy", "changed": true, "checksum": "d8c13bfc95482997409feaf124de6786a23cecad", "dest": "/home/zuul/.ssh/id_rsa.pub", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa.pub", "attributes": null, "backup": false, "checksum": "d8c13bfc95482997409feaf124de6786a23cecad", "content": null, "dest": "/home/zuul/.ssh/id_rsa.pub", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.7014844-234-115749828735915/source", "unsafe_writes": false, "validate": null } }, "md5sum": "e2034adf3bf9e18d6da7359bad64d7de", "mode": "0644", "owner": "zuul", "size": 571, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.7014844-234-115749828735915/source", "state": "file", "uid": 1000 }, "controller-2": { "action": "copy", "changed": true, "checksum": "d8c13bfc95482997409feaf124de6786a23cecad", "dest": "/home/zuul/.ssh/id_rsa.pub", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa.pub", "attributes": null, "backup": false, "checksum": "d8c13bfc95482997409feaf124de6786a23cecad", "content": null, "dest": "/home/zuul/.ssh/id_rsa.pub", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.703254-235-219495914951419/source", "unsafe_writes": false, "validate": null } }, "md5sum": "e2034adf3bf9e18d6da7359bad64d7de", "mode": "0644", "owner": "zuul", "size": 571, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.703254-235-219495914951419/source", "state": "file", "uid": 1000 }, "controller-3": { "action": "copy", "changed": true, "checksum": "d8c13bfc95482997409feaf124de6786a23cecad", "dest": "/home/zuul/.ssh/id_rsa.pub", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa.pub", "attributes": null, "backup": false, "checksum": "d8c13bfc95482997409feaf124de6786a23cecad", "content": null, "dest": "/home/zuul/.ssh/id_rsa.pub", "directory_mode": null, "follow": false, "force": false, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.724481-236-227878314194653/source", "unsafe_writes": false, "validate": null } }, "md5sum": "e2034adf3bf9e18d6da7359bad64d7de", "mode": "0644", "owner": "zuul", "size": 571, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763344.724481-236-227878314194653/source", "state": "file", "uid": 1000 } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:25.258546Z", "start": "2026-03-17T16:02:24.658386Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000d8", "name": "Install build public key as SSH key on all nodes" } }, { "hosts": { "controller-1": { "action": "include_tasks", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true }, "controller-2": { "action": "include_tasks", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true }, "controller-3": { "action": "include_tasks", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:25.309186Z", "start": "2026-03-17T16:02:25.265951Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000a8", "name": "Remote setup ssh keys (windows)" } }, { "hosts": { "controller-1": { "action": "sshagent_remove_keys", "changed": true, "invocation": { "module_args": { "remove": "^(?!\\(stdin\\)).*" } }, "removed": [ "/etc/zuul/id_rsa" ] } }, "role": { "id": "0242ac17-0011-229e-fbbb-0000000000ad", "name": "remove-zuul-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-zuul-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:25.717566Z", "start": "2026-03-17T16:02:25.315750Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000af", "name": "Remove master key from local agent" } }, { "hosts": { "controller-1": { "action": "command", "changed": true, "cmd": [ "ssh-add", "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa" ], "delta": "0:00:00.013843", "end": "2026-03-17 16:02:26.066195", "invocation": { "module_args": { "_raw_params": "ssh-add /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0011-229e-fbbb-0000000000b5-0-controller1", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:02:26.052352", "stderr": "", "stderr_lines": [], "stdout": "Identity added: /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa (zuul-build-sshkey)", "stdout_lines": [ "Identity added: /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/5e16c139515c4423bfa1f2ef8fb52e9a_id_rsa (zuul-build-sshkey)" ], "zuul_log_id": "0242ac17-0011-229e-fbbb-0000000000b5-0-controller1" } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:26.108794Z", "start": "2026-03-17T16:02:25.804864Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000b5", "name": "Add back temp key" } }, { "hosts": { "controller-1": { "action": "ping", "changed": false, "invocation": { "module_args": { "data": "pong" } }, "ping": "pong" }, "controller-2": { "action": "ping", "changed": false, "invocation": { "module_args": { "data": "pong" } }, "ping": "pong" }, "controller-3": { "action": "ping", "changed": false, "invocation": { "module_args": { "data": "pong" } }, "ping": "pong" } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:26.413536Z", "start": "2026-03-17T16:02:26.114223Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000b6", "name": "Verify we can still SSH to all nodes" } }, { "hosts": { "controller-1": { "action": "command", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true }, "controller-2": { "action": "command", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true }, "controller-3": { "action": "command", "changed": false, "false_condition": "ansible_os_family == \"Windows\"", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000018", "name": "add-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/add-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:02:26.473279Z", "start": "2026-03-17T16:02:26.418439Z" }, "id": "0242ac17-0011-229e-fbbb-0000000000b7", "name": "Verify we can still SSH to all nodes (windows)" } }, { "hosts": { "controller-1": { "action": "zuul_console", "changed": false, "invocation": { "module_args": { "path": "/tmp/console-{log_uuid}.log", "port": 19885, "state": "present" } } }, "controller-2": { "action": "zuul_console", "changed": false, "invocation": { "module_args": { "path": "/tmp/console-{log_uuid}.log", "port": 19885, "state": "present" } } }, "controller-3": { "action": "zuul_console", "changed": false, "invocation": { "module_args": { "path": "/tmp/console-{log_uuid}.log", "port": 19885, "state": "present" } } } }, "role": { "id": "0242ac17-0011-229e-fbbb-00000000001d", "name": "prepare-workspace", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace" }, "task": { "duration": { "end": "2026-03-17T16:02:26.845869Z", "start": "2026-03-17T16:02:26.495827Z" }, "id": "0242ac17-0011-229e-fbbb-00000000001f", "name": "Start zuul_console daemon." } }, { "hosts": { "controller-1": { "action": "synchronize", "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true }, "controller-2": { "action": "synchronize", "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true }, "controller-3": { "action": "synchronize", "censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result", "changed": true } }, "role": { "id": "0242ac17-0011-229e-fbbb-00000000001d", "name": "prepare-workspace", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/prepare-workspace" }, "task": { "duration": { "end": "2026-03-17T16:02:27.957642Z", "start": "2026-03-17T16:02:26.855280Z" }, "id": "0242ac17-0011-229e-fbbb-000000000020", "name": "Synchronize src repos to workspace directory." } }, { "hosts": { "controller-1": { "action": "file", "changed": false, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/logs", "state": "absent", "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/artifacts", "state": "absent", "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/docs", "state": "absent", "zj_output_dir": "docs" } ] }, "controller-2": { "action": "file", "changed": false, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/logs", "state": "absent", "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/artifacts", "state": "absent", "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/docs", "state": "absent", "zj_output_dir": "docs" } ] }, "controller-3": { "action": "file", "changed": false, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/logs", "state": "absent", "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/artifacts", "state": "absent", "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "failed": false, "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": null, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "absent", "unsafe_writes": false } }, "path": "/home/zuul/zuul-output/docs", "state": "absent", "zj_output_dir": "docs" } ] } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000022", "name": "ensure-output-dirs", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs" }, "task": { "duration": { "end": "2026-03-17T16:02:28.627184Z", "start": "2026-03-17T16:02:27.976653Z" }, "id": "0242ac17-0011-229e-fbbb-000000000024", "name": "Empty Zuul Output directories by removing them" } }, { "hosts": { "controller-1": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/logs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/logs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/logs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/artifacts", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/artifacts", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/artifacts", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/docs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/docs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/docs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "docs" } ] }, "controller-2": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/logs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/logs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/logs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/artifacts", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/artifacts", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/artifacts", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/docs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/docs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/docs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "docs" } ] }, "controller-3": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/logs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/logs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/logs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/logs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "logs" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/artifacts", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/artifacts", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/artifacts", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "mode": "0755", "path": "/home/zuul/zuul-output/docs", "state": "directory" }, "before": { "mode": "0775", "path": "/home/zuul/zuul-output/docs", "state": "absent" } }, "failed": false, "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/home/zuul/zuul-output/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "zuul", "path": "/home/zuul/zuul-output/docs", "size": 4096, "state": "directory", "uid": 1000, "zj_output_dir": "docs" } ] } }, "role": { "id": "0242ac17-0011-229e-fbbb-000000000022", "name": "ensure-output-dirs", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/ensure-output-dirs" }, "task": { "duration": { "end": "2026-03-17T16:02:29.263412Z", "start": "2026-03-17T16:02:28.632571Z" }, "id": "0242ac17-0011-229e-fbbb-000000000026", "name": "Ensure Zuul Output directories exist" } } ] } ], "stats": { "controller-1": { "changed": 8, "failures": 0, "ignored": 0, "ok": 15, "rescued": 0, "skipped": 3, "unreachable": 0 }, "controller-2": { "changed": 5, "failures": 0, "ignored": 0, "ok": 11, "rescued": 0, "skipped": 3, "unreachable": 0 }, "controller-3": { "changed": 5, "failures": 0, "ignored": 0, "ok": 11, "rescued": 0, "skipped": 3, "unreachable": 0 }, "localhost": { "changed": 2, "failures": 0, "ignored": 0, "ok": 6, "rescued": 0, "skipped": 0, "unreachable": 0 } }, "trusted": true }, { "branch": "main", "index": "1", "phase": "pre", "playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/pre.yaml", "plays": [ { "play": { "duration": { "end": "2026-03-17T16:02:38.098152Z", "start": "2026-03-17T16:02:33.943719Z" }, "id": "0242ac17-0011-6e65-30f6-000000000004", "name": "all" }, "tasks": [ { "hosts": { "controller-1": { "action": "ansible.builtin.unarchive", "changed": true, "dest": "/usr/local/bin", "extract_results": { "cmd": [ "/usr/bin/tar", "--extract", "-C", "/usr/local/bin", "-z", "--show-transformed-names", "--strip-components=1", "-f", "/home/zuul/.ansible/tmp/ansible-tmp-1773763354.0305288-5-267776921246283/uv-x86_64-unknown-linux-gnumkjaj1ol.tar.gz" ], "err": "", "out": "", "rc": 0 }, "gid": 0, "group": "root", "handler": "TgzArchive", "invocation": { "module_args": { "attributes": null, "copy": true, "creates": "/usr/local/bin/uv", "decrypt": true, "dest": "/usr/local/bin", "exclude": [], "extra_opts": [ "--strip-components=1" ], "group": null, "include": [], "io_buffer_size": 65536, "keep_newer": false, "list_files": false, "mode": null, "owner": null, "remote_src": true, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "https://github.com/astral-sh/uv/releases/download/0.8.13/uv-x86_64-unknown-linux-gnu.tar.gz", "unsafe_writes": false, "validate_certs": true } }, "mode": "0755", "owner": "root", "size": 4096, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763354.0305288-5-267776921246283/uv-x86_64-unknown-linux-gnumkjaj1ol.tar.gz", "state": "directory", "uid": 0 }, "controller-2": { "action": "ansible.builtin.unarchive", "changed": true, "dest": "/usr/local/bin", "extract_results": { "cmd": [ "/usr/bin/tar", "--extract", "-C", "/usr/local/bin", "-z", "--show-transformed-names", "--strip-components=1", "-f", "/home/zuul/.ansible/tmp/ansible-tmp-1773763354.0344696-6-161758617717138/uv-x86_64-unknown-linux-gnu2yulr8l4.tar.gz" ], "err": "", "out": "", "rc": 0 }, "gid": 0, "group": "root", "handler": "TgzArchive", "invocation": { "module_args": { "attributes": null, "copy": true, "creates": "/usr/local/bin/uv", "decrypt": true, "dest": "/usr/local/bin", "exclude": [], "extra_opts": [ "--strip-components=1" ], "group": null, "include": [], "io_buffer_size": 65536, "keep_newer": false, "list_files": false, "mode": null, "owner": null, "remote_src": true, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "https://github.com/astral-sh/uv/releases/download/0.8.13/uv-x86_64-unknown-linux-gnu.tar.gz", "unsafe_writes": false, "validate_certs": true } }, "mode": "0755", "owner": "root", "size": 4096, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763354.0344696-6-161758617717138/uv-x86_64-unknown-linux-gnu2yulr8l4.tar.gz", "state": "directory", "uid": 0 }, "controller-3": { "action": "ansible.builtin.unarchive", "changed": true, "dest": "/usr/local/bin", "extract_results": { "cmd": [ "/usr/bin/tar", "--extract", "-C", "/usr/local/bin", "-z", "--show-transformed-names", "--strip-components=1", "-f", "/home/zuul/.ansible/tmp/ansible-tmp-1773763354.0444772-7-202773564001988/uv-x86_64-unknown-linux-gnu80xyw2wr.tar.gz" ], "err": "", "out": "", "rc": 0 }, "gid": 0, "group": "root", "handler": "TgzArchive", "invocation": { "module_args": { "attributes": null, "copy": true, "creates": "/usr/local/bin/uv", "decrypt": true, "dest": "/usr/local/bin", "exclude": [], "extra_opts": [ "--strip-components=1" ], "group": null, "include": [], "io_buffer_size": 65536, "keep_newer": false, "list_files": false, "mode": null, "owner": null, "remote_src": true, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "https://github.com/astral-sh/uv/releases/download/0.8.13/uv-x86_64-unknown-linux-gnu.tar.gz", "unsafe_writes": false, "validate_certs": true } }, "mode": "0755", "owner": "root", "size": 4096, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763354.0444772-7-202773564001988/uv-x86_64-unknown-linux-gnu80xyw2wr.tar.gz", "state": "directory", "uid": 0 } }, "role": { "id": "0242ac17-0011-6e65-30f6-000000000007", "name": "setup-uv", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv" }, "task": { "duration": { "end": "2026-03-17T16:02:37.515586Z", "start": "2026-03-17T16:02:33.985309Z" }, "id": "0242ac17-0011-6e65-30f6-000000000009", "name": "Extract archive" } }, { "hosts": { "controller-1": { "action": "ansible.builtin.command", "changed": true, "cmd": [ "/usr/local/bin/uv", "--version" ], "delta": "0:00:00.015410", "end": "2026-03-17 16:02:37.938881", "invocation": { "module_args": { "_raw_params": "/usr/local/bin/uv --version", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0011-6e65-30f6-00000000000a-1-controller1", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:02:37.923471", "stderr": "", "stderr_lines": [], "stdout": "uv 0.8.13", "stdout_lines": [ "uv 0.8.13" ], "zuul_log_id": "0242ac17-0011-6e65-30f6-00000000000a-1-controller1" }, "controller-2": { "action": "ansible.builtin.command", "changed": true, "cmd": [ "/usr/local/bin/uv", "--version" ], "delta": "0:00:00.013617", "end": "2026-03-17 16:02:37.941880", "invocation": { "module_args": { "_raw_params": "/usr/local/bin/uv --version", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0011-6e65-30f6-00000000000a-1-controller2", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:02:37.928263", "stderr": "", "stderr_lines": [], "stdout": "uv 0.8.13", "stdout_lines": [ "uv 0.8.13" ], "zuul_log_id": "0242ac17-0011-6e65-30f6-00000000000a-1-controller2" }, "controller-3": { "action": "ansible.builtin.command", "changed": true, "cmd": [ "/usr/local/bin/uv", "--version" ], "delta": "0:00:00.013488", "end": "2026-03-17 16:02:37.936346", "invocation": { "module_args": { "_raw_params": "/usr/local/bin/uv --version", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0011-6e65-30f6-00000000000a-1-controller3", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:02:37.922858", "stderr": "", "stderr_lines": [], "stdout": "uv 0.8.13", "stdout_lines": [ "uv 0.8.13" ], "zuul_log_id": "0242ac17-0011-6e65-30f6-00000000000a-1-controller3" } }, "role": { "id": "0242ac17-0011-6e65-30f6-000000000007", "name": "setup-uv", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/untrusted/project_0/github.com/vexxhost/zuul-jobs/roles/setup-uv" }, "task": { "duration": { "end": "2026-03-17T16:02:38.098152Z", "start": "2026-03-17T16:02:37.563441Z" }, "id": "0242ac17-0011-6e65-30f6-00000000000a", "name": "Print version" } } ] } ], "stats": { "controller-1": { "changed": 2, "failures": 0, "ignored": 0, "ok": 2, "rescued": 0, "skipped": 0, "unreachable": 0 }, "controller-2": { "changed": 2, "failures": 0, "ignored": 0, "ok": 2, "rescued": 0, "skipped": 0, "unreachable": 0 }, "controller-3": { "changed": 2, "failures": 0, "ignored": 0, "ok": 2, "rescued": 0, "skipped": 0, "unreachable": 0 } }, "trusted": false }, { "branch": "main", "index": "0", "phase": "run", "playbook": "github.com/vexxhost/zuul-jobs/playbooks/molecule/run.yaml", "plays": [ { "play": { "duration": { "end": "2026-03-17T16:21:01.520802Z", "start": "2026-03-17T16:02:38.803408Z" }, "id": "0242ac17-0011-fb0e-dbf7-000000000004", "name": "all" }, "tasks": [ { "hosts": { "controller-1": { "action": "ansible.builtin.copy", "changed": true, "checksum": "8b3fa8a3c5be41b1176a43a63302b3009790ca0f", "dest": "src/github.com/vexxhost/ansible-collection-kubernetes/inventory.yaml", "diff": [], "gid": 1000, "group": "zuul", "invocation": { "module_args": { "_original_basename": "inventory.yaml", "attributes": null, "backup": false, "checksum": "8b3fa8a3c5be41b1176a43a63302b3009790ca0f", "content": null, "dest": "src/github.com/vexxhost/ansible-collection-kubernetes", "directory_mode": null, "follow": false, "force": true, "group": null, "local_follow": null, "mode": 420, "owner": null, "remote_src": null, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763358.8551447-5-41493135450347/source", "unsafe_writes": false, "validate": null } }, "md5sum": "5ccd4e6f86149df6fb36d593babae36f", "mode": "0644", "owner": "zuul", "size": 24787, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1773763358.8551447-5-41493135450347/source", "state": "file", "uid": 1000 } }, "task": { "duration": { "end": "2026-03-17T16:02:39.765630Z", "start": "2026-03-17T16:02:38.815176Z" }, "id": "0242ac17-0011-fb0e-dbf7-000000000006", "name": "Copy inventory file for Zuul" } }, { "hosts": { "controller-1": { "action": "ansible.builtin.replace", "changed": true, "invocation": { "module_args": { "after": null, "attributes": null, "backup": false, "before": null, "encoding": "utf-8", "group": null, "mode": null, "owner": null, "path": "src/github.com/vexxhost/ansible-collection-kubernetes/inventory.yaml", "regexp": "(^\\s*ansible_host:\\s*).*$", "replace": "\\1\"{{ nodepool.private_ipv4 }}\"", "selevel": null, "serole": null, "setype": null, "seuser": null, "unsafe_writes": false, "validate": null } }, "msg": "3 replacements made", "rc": 0 } }, "task": { "duration": { "end": "2026-03-17T16:02:40.118116Z", "start": "2026-03-17T16:02:39.769898Z" }, "id": "0242ac17-0011-fb0e-dbf7-000000000007", "name": "Switch \"ansible_host\" to private IP" } }, { "hosts": { "controller-1": { "action": "ansible.builtin.command", "changed": true, "cmd": [ "uv", "run", "molecule", "test", "--destroy", "never", "-s", "cluster-upgrade" ], "delta": "0:18:20.633699", "end": "2026-03-17 16:21:01.181607", "invocation": { "module_args": { "_raw_params": "uv run molecule test --destroy never -s cluster-upgrade", "_uses_shell": false, "argv": null, "chdir": "src/github.com/vexxhost/ansible-collection-kubernetes", "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "0242ac17-0011-fb0e-dbf7-000000000008-1-controller1", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:02:40.547908", "stderr": "", "stderr_lines": [], "stdout": "Using CPython 3.13.5 interpreter at: /usr/bin/python3\nCreating virtual environment at: .venv\nDownloading ansible-core (2.3MiB)\nDownloading pygments (1.2MiB)\nDownloading cryptography (4.3MiB)\n Downloading cryptography\n Downloading pygments\n Downloading ansible-core\nInstalled 36 packages in 52ms\nINFO Collection 'vexxhost.kubernetes' detected.\nINFO Scenarios will be used from 'extensions/molecule'\nCRITICAL 'extensions/molecule/default/molecule.yml' glob failed. Exiting.\nINFO default scenario not found, disabling shared state.\nINFO [cluster-upgrade > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy\nINFO [cluster-upgrade > prerun] Performing prerun with role_name_check=0...\nINFO [cluster-upgrade > dependency] Executing\nWARNING [cluster-upgrade > dependency] Missing roles requirements file: requirements.yml\nWARNING [cluster-upgrade > dependency] Missing collections requirements file: collections.yml\nWARNING [cluster-upgrade > dependency] Executed: 2 missing (Remove from test_sequence to suppress)\nINFO [cluster-upgrade > cleanup] Executing\nWARNING [cluster-upgrade > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [cluster-upgrade > destroy] Executing\nWARNING [cluster-upgrade > destroy] Skipping, '--destroy=never' requested.\nINFO [cluster-upgrade > destroy] Executed: Successful\nINFO [cluster-upgrade > syntax] Executing\n\nplaybook: /home/zuul/src/github.com/vexxhost/ansible-collection-kubernetes/extensions/molecule/cluster-upgrade/converge.yml\nINFO [cluster-upgrade > syntax] Executed: Successful\nINFO [cluster-upgrade > create] Executing\nWARNING [cluster-upgrade > create] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [cluster-upgrade > prepare] Executing\n\nPLAY [Prepare] *****************************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:03:23 +0000 (0:00:00.034) 0:00:00.034 *********\n[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [Install Debian packages] *************************************************\nTuesday 17 March 2026 16:03:24 +0000 (0:00:01.297) 0:00:01.332 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nPLAY [Configure Kubernetes VIP] ************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:03:30 +0000 (0:00:06.245) 0:00:07.577 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***\nTuesday 17 March 2026 16:03:33 +0000 (0:00:02.831) 0:00:10.409 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************\nTuesday 17 March 2026 16:03:34 +0000 (0:00:00.480) 0:00:10.889 *********\nok: [controller-3] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-1] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-2] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-3] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-1] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-2] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-3] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-1] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-3] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-1] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-2] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-3] => (item=/etc/kubernetes/manifests/haproxy.yaml)\nok: [controller-1] => (item=/etc/kubernetes/manifests/haproxy.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/haproxy.yaml)\n\nTASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****\nTuesday 17 March 2026 16:03:35 +0000 (0:00:01.502) 0:00:12.392 *********\n[ERROR]: Task failed: Module failed: Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3\n\n30 - Restart \"kubelet\" service\n31\n32 - name: Switch API server to run on port 6443\n ^ column 3\n\nfailed: [controller-2] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}\nfailed: [controller-3] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}\nfailed: [controller-1] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}\n[ERROR]: Task failed: Module failed: Path /etc/kubernetes/controller-manager.conf does not exist !\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3\n\n30 - Restart \"kubelet\" service\n31\n32 - name: Switch API server to run on port 6443\n ^ column 3\n\nfailed: [controller-2] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}\nfailed: [controller-3] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}\nfailed: [controller-1] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}\n[ERROR]: Task failed: Module failed: Path /etc/kubernetes/scheduler.conf does not exist !\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3\n\n30 - Restart \"kubelet\" service\n31\n32 - name: Switch API server to run on port 6443\n ^ column 3\n\nfailed: [controller-3] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}\nfailed: [controller-2] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}\nfailed: [controller-1] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}\n...ignoring\n...ignoring\n...ignoring\n\nTASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********\nTuesday 17 March 2026 16:03:36 +0000 (0:00:01.012) 0:00:13.404 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********\nTuesday 17 March 2026 16:03:36 +0000 (0:00:00.422) 0:00:13.827 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************\nTuesday 17 March 2026 16:03:37 +0000 (0:00:00.318) 0:00:14.145 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***\nTuesday 17 March 2026 16:03:37 +0000 (0:00:00.056) 0:00:14.201 *********\nok: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************\nTuesday 17 March 2026 16:03:37 +0000 (0:00:00.063) 0:00:14.265 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******\nTuesday 17 March 2026 16:03:38 +0000 (0:00:00.983) 0:00:15.248 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:03:38 +0000 (0:00:00.327) 0:00:15.576 *********\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:03:38 +0000 (0:00:00.005) 0:00:15.581 *********\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:03:38 +0000 (0:00:00.003) 0:00:15.584 *********\n\nPLAY [Install Kubernetes] ******************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:03:38 +0000 (0:00:00.061) 0:00:15.646 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:03:40 +0000 (0:00:01.857) 0:00:17.504 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:03:41 +0000 (0:00:00.439) 0:00:17.943 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nTuesday 17 March 2026 16:03:41 +0000 (0:00:00.091) 0:00:18.034 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:03:41 +0000 (0:00:00.388) 0:00:18.423 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:03:41 +0000 (0:00:00.108) 0:00:18.532 *********\n[WARNING]: Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually\nchanged: [controller-2]\nchanged: [controller-3]\nchanged: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:03:42 +0000 (0:00:00.988) 0:00:19.520 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:03:42 +0000 (0:00:00.111) 0:00:19.632 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:03:43 +0000 (0:00:00.383) 0:00:20.015 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:03:44 +0000 (0:00:01.253) 0:00:21.269 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:03:44 +0000 (0:00:00.117) 0:00:21.386 *********\nchanged: [controller-3]\nchanged: [controller-2]\nchanged: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:03:45 +0000 (0:00:01.052) 0:00:22.438 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nTuesday 17 March 2026 16:03:48 +0000 (0:00:03.310) 0:00:25.748 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nTuesday 17 March 2026 16:03:48 +0000 (0:00:00.067) 0:00:25.816 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nTuesday 17 March 2026 16:03:49 +0000 (0:00:00.079) 0:00:25.896 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nTuesday 17 March 2026 16:03:49 +0000 (0:00:00.068) 0:00:25.965 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nTuesday 17 March 2026 16:03:55 +0000 (0:00:06.400) 0:00:32.366 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nTuesday 17 March 2026 16:03:56 +0000 (0:00:00.790) 0:00:33.156 *********\nchanged: [controller-1] => (item={'path': '/etc/containerd'})\nchanged: [controller-3] => (item={'path': '/etc/containerd'})\nchanged: [controller-2] => (item={'path': '/etc/containerd'})\nchanged: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nchanged: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nchanged: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nchanged: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})\nchanged: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})\nchanged: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})\nchanged: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nchanged: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nchanged: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nchanged: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nchanged: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nchanged: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nTuesday 17 March 2026 16:03:57 +0000 (0:00:01.630) 0:00:34.787 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:03:58 +0000 (0:00:00.862) 0:00:35.649 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:03:58 +0000 (0:00:00.007) 0:00:35.657 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:03:58 +0000 (0:00:00.005) 0:00:35.662 *********\n\nRUNNING HANDLER [vexxhost.containers.containerd : Restart containerd] **********\nTuesday 17 March 2026 16:03:58 +0000 (0:00:00.007) 0:00:35.670 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nRUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************\nTuesday 17 March 2026 16:03:59 +0000 (0:00:00.936) 0:00:36.606 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nTuesday 17 March 2026 16:04:01 +0000 (0:00:01.823) 0:00:38.429 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***\nTuesday 17 March 2026 16:04:02 +0000 (0:00:00.803) 0:00:39.233 *********\n[ERROR]: Task failed: Module failed: Failed to import the required Python library (kubernetes) on np0000159414's Python /usr/bin/python3.13. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes_upgrade_check/tasks/main.yml:16:3\n\n14\n15 ---\n16 - name: Retrieve the \"kubeadm-config\" ConfigMap\n ^ column 3\n\nfatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Failed to import the required Python library (kubernetes) on np0000159414's Python /usr/bin/python3.13. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\"}\n...ignoring\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.688) 0:00:39.921 *********\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.041) 0:00:39.963 *********\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.048) 0:00:40.011 *********\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.044) 0:00:40.055 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.066) 0:00:40.122 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.079) 0:00:40.201 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.357) 0:00:40.558 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubeadm\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubeadm\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubeadm\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:04:03 +0000 (0:00:00.069) 0:00:40.628 *********\nchanged: [controller-2]\nchanged: [controller-1]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:04:04 +0000 (0:00:01.118) 0:00:41.746 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:04:04 +0000 (0:00:00.091) 0:00:41.838 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:04:05 +0000 (0:00:00.364) 0:00:42.202 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubectl\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubectl\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubectl\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:04:05 +0000 (0:00:00.091) 0:00:42.293 *********\nchanged: [controller-2]\nchanged: [controller-1]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:04:06 +0000 (0:00:01.117) 0:00:43.411 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nTuesday 17 March 2026 16:04:06 +0000 (0:00:00.110) 0:00:43.522 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nTuesday 17 March 2026 16:04:06 +0000 (0:00:00.065) 0:00:43.587 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nTuesday 17 March 2026 16:04:06 +0000 (0:00:00.069) 0:00:43.656 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nTuesday 17 March 2026 16:04:06 +0000 (0:00:00.057) 0:00:43.714 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nTuesday 17 March 2026 16:04:07 +0000 (0:00:01.010) 0:00:44.724 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nTuesday 17 March 2026 16:04:08 +0000 (0:00:00.728) 0:00:45.452 *********\nok: [controller-2] => (item={'path': '/etc/containerd'})\nok: [controller-3] => (item={'path': '/etc/containerd'})\nok: [controller-1] => (item={'path': '/etc/containerd'})\nok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nTuesday 17 March 2026 16:04:10 +0000 (0:00:01.514) 0:00:46.967 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:04:10 +0000 (0:00:00.807) 0:00:47.775 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:04:10 +0000 (0:00:00.007) 0:00:47.782 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:04:10 +0000 (0:00:00.009) 0:00:47.792 *********\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nTuesday 17 March 2026 16:04:10 +0000 (0:00:00.006) 0:00:47.799 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:04:11 +0000 (0:00:00.557) 0:00:48.356 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:04:11 +0000 (0:00:00.382) 0:00:48.739 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:04:11 +0000 (0:00:00.109) 0:00:48.848 *********\nchanged: [controller-3]\nchanged: [controller-2]\nchanged: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:04:12 +0000 (0:00:00.929) 0:00:49.777 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:04:14 +0000 (0:00:01.808) 0:00:51.585 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:04:14 +0000 (0:00:00.097) 0:00:51.683 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:04:15 +0000 (0:00:00.908) 0:00:52.591 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.cri_tools : Create crictl config] ********************\nTuesday 17 March 2026 16:04:17 +0000 (0:00:01.808) 0:00:54.399 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********\nTuesday 17 March 2026 16:04:18 +0000 (0:00:00.785) 0:00:55.185 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:04:18 +0000 (0:00:00.389) 0:00:55.575 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:04:19 +0000 (0:00:00.380) 0:00:55.955 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:04:19 +0000 (0:00:00.102) 0:00:56.058 *********\nchanged: [controller-3]\nchanged: [controller-2]\nchanged: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:04:20 +0000 (0:00:01.275) 0:00:57.333 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***\nTuesday 17 March 2026 16:04:23 +0000 (0:00:03.156) 0:01:00.489 *********\nok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\nok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\nok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\n\nTASK [vexxhost.containers.cni_plugins : Install additional packages] ***********\nTuesday 17 March 2026 16:04:23 +0000 (0:00:00.091) 0:01:00.581 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************\nTuesday 17 March 2026 16:04:24 +0000 (0:00:01.020) 0:01:01.601 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********\nTuesday 17 March 2026 16:04:25 +0000 (0:00:00.490) 0:01:02.091 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******\nTuesday 17 March 2026 16:04:25 +0000 (0:00:00.766) 0:01:02.858 *********\nchanged: [controller-1] => (item=br_netfilter)\nchanged: [controller-2] => (item=br_netfilter)\nchanged: [controller-3] => (item=br_netfilter)\nok: [controller-2] => (item=ip_tables)\nok: [controller-1] => (item=ip_tables)\nok: [controller-3] => (item=ip_tables)\nchanged: [controller-2] => (item=ip6_tables)\nchanged: [controller-1] => (item=ip6_tables)\nchanged: [controller-3] => (item=ip6_tables)\nchanged: [controller-1] => (item=nf_conntrack)\nchanged: [controller-2] => (item=nf_conntrack)\nchanged: [controller-3] => (item=nf_conntrack)\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:04:27 +0000 (0:00:01.591) 0:01:04.449 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:04:27 +0000 (0:00:00.363) 0:01:04.813 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubelet\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubelet\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubelet\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:04:28 +0000 (0:00:00.086) 0:01:04.899 *********\nchanged: [controller-2]\nchanged: [controller-3]\nchanged: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:04:29 +0000 (0:00:01.660) 0:01:06.560 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***\nTuesday 17 March 2026 16:04:29 +0000 (0:00:00.085) 0:01:06.645 *********\nok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\nok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\nok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\n\nTASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************\nTuesday 17 March 2026 16:04:29 +0000 (0:00:00.095) 0:01:06.741 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************\nTuesday 17 March 2026 16:04:29 +0000 (0:00:00.069) 0:01:06.810 *********\nchanged: [controller-3]\nchanged: [controller-2]\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************\nTuesday 17 March 2026 16:04:33 +0000 (0:00:03.409) 0:01:10.220 *********\nchanged: [controller-1] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nchanged: [controller-2] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nchanged: [controller-3] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nchanged: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nchanged: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nchanged: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nchanged: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nchanged: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nchanged: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nchanged: [controller-1] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nchanged: [controller-2] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nchanged: [controller-3] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nchanged: [controller-2] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nchanged: [controller-1] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nchanged: [controller-3] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nchanged: [controller-2] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nchanged: [controller-1] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nchanged: [controller-3] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nchanged: [controller-2] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\nchanged: [controller-1] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\nchanged: [controller-3] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\n\nTASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***\nTuesday 17 March 2026 16:04:35 +0000 (0:00:02.436) 0:01:12.657 *********\nchanged: [controller-1] => (item=/etc/systemd/system/kubelet.service.d)\nchanged: [controller-2] => (item=/etc/systemd/system/kubelet.service.d)\nchanged: [controller-3] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller-2] => (item=/etc/kubernetes)\nok: [controller-1] => (item=/etc/kubernetes)\nok: [controller-3] => (item=/etc/kubernetes)\nok: [controller-2] => (item=/etc/kubernetes/manifests)\nok: [controller-1] => (item=/etc/kubernetes/manifests)\nok: [controller-3] => (item=/etc/kubernetes/manifests)\n\nTASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********\nTuesday 17 March 2026 16:04:36 +0000 (0:00:00.972) 0:01:13.629 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***\nTuesday 17 March 2026 16:04:37 +0000 (0:00:00.759) 0:01:14.389 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Check swap status] *************************\nTuesday 17 March 2026 16:04:38 +0000 (0:00:00.776) 0:01:15.165 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************\nTuesday 17 March 2026 16:04:38 +0000 (0:00:00.427) 0:01:15.593 *********\n[ERROR]: Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\n\nTask failed.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:78:7\n\n76 register: kubelet_swapon\n77\n78 - name: Disable swap\n ^ column 7\n\n<<< caused by >>>\n\nConditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11\n\n81 ignore_errors: \"{{ ansible_check_mode }}\"\n82 when:\n83 - kubelet_swapon.stdout\n ^ column 11\n\nBroken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.\n\nfatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\nfatal: [controller-2]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\nfatal: [controller-3]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\n...ignoring\n...ignoring\n...ignoring\n\nTASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********\nTuesday 17 March 2026 16:04:38 +0000 (0:00:00.075) 0:01:15.668 *********\nok: [controller-1] => (item=swap)\nok: [controller-2] => (item=swap)\nok: [controller-3] => (item=swap)\nok: [controller-1] => (item=none)\nok: [controller-2] => (item=none)\nok: [controller-3] => (item=none)\n\nTASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***\nTuesday 17 March 2026 16:04:39 +0000 (0:00:00.861) 0:01:16.530 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************\nTuesday 17 March 2026 16:04:40 +0000 (0:00:00.755) 0:01:17.286 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:04:41 +0000 (0:00:00.795) 0:01:18.082 *********\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:04:41 +0000 (0:00:00.010) 0:01:18.092 *********\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:04:41 +0000 (0:00:00.007) 0:01:18.099 *********\n\nRUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************\nTuesday 17 March 2026 16:04:41 +0000 (0:00:00.005) 0:01:18.104 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********\nTuesday 17 March 2026 16:04:42 +0000 (0:00:01.656) 0:01:19.761 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****\nTuesday 17 March 2026 16:04:43 +0000 (0:00:00.859) 0:01:20.621 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************\nTuesday 17 March 2026 16:04:44 +0000 (0:00:01.096) 0:01:21.717 *********\nchanged: [controller-2]\nchanged: [controller-1]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********\nTuesday 17 March 2026 16:04:45 +0000 (0:00:00.946) 0:01:22.663 *********\nchanged: [controller-3]\nchanged: [controller-2]\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********\nTuesday 17 March 2026 16:04:46 +0000 (0:00:00.480) 0:01:23.144 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************\nTuesday 17 March 2026 16:04:46 +0000 (0:00:00.589) 0:01:23.734 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************\nTuesday 17 March 2026 16:04:47 +0000 (0:00:00.163) 0:01:23.897 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***\nTuesday 17 March 2026 16:04:47 +0000 (0:00:00.154) 0:01:24.052 *********\nok: [controller-1] => (item=controller-1)\nok: [controller-2 -> controller-1(199.19.213.74)] => (item=controller-1)\nok: [controller-3 -> controller-1(199.19.213.74)] => (item=controller-1)\nok: [controller-1 -> controller-2(199.19.213.210)] => (item=controller-2)\nok: [controller-2] => (item=controller-2)\nok: [controller-3 -> controller-2(199.19.213.210)] => (item=controller-2)\nok: [controller-1 -> controller-3(199.19.213.235)] => (item=controller-3)\nok: [controller-2 -> controller-3(199.19.213.235)] => (item=controller-3)\nok: [controller-3] => (item=controller-3)\n\nTASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****\nTuesday 17 March 2026 16:04:48 +0000 (0:00:01.004) 0:01:25.056 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***\nTuesday 17 March 2026 16:04:48 +0000 (0:00:00.070) 0:01:25.127 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********\nTuesday 17 March 2026 16:04:48 +0000 (0:00:00.085) 0:01:25.213 *********\nok: [controller-1] => {\n \"msg\": \"controller-1\"\n}\nok: [controller-2] => {\n \"msg\": \"controller-1\"\n}\nok: [controller-3] => {\n \"msg\": \"controller-1\"\n}\n\nTASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***\nTuesday 17 March 2026 16:04:48 +0000 (0:00:00.081) 0:01:25.294 *********\nskipping: [controller-2]\nskipping: [controller-3]\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.759) 0:01:26.053 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.081) 0:01:26.135 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.069) 0:01:26.205 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.072) 0:01:26.277 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.071) 0:01:26.349 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.072) 0:01:26.421 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.066) 0:01:26.488 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************\nTuesday 17 March 2026 16:04:49 +0000 (0:00:00.074) 0:01:26.563 *********\nchanged: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***\nTuesday 17 March 2026 16:05:23 +0000 (0:00:33.529) 0:02:00.093 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************\nTuesday 17 March 2026 16:05:23 +0000 (0:00:00.352) 0:02:00.445 *********\nskipping: [controller-1]\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/join-cluster.yml for controller-2, controller-3\n\nTASK [vexxhost.kubernetes.kubernetes : Generate control-plane certificates for joining cluster] ***\nTuesday 17 March 2026 16:05:23 +0000 (0:00:00.115) 0:02:00.561 *********\nok: [controller-2 -> controller-1(199.19.213.74)]\n\nTASK [vexxhost.kubernetes.kubernetes : Retrieve SHA256 certificate hash] *******\nTuesday 17 March 2026 16:05:24 +0000 (0:00:00.480) 0:02:01.042 *********\nok: [controller-2 -> controller-1(199.19.213.74)]\n\nTASK [vexxhost.kubernetes.kubernetes : Generate token for joining cluster] *****\nTuesday 17 March 2026 16:05:24 +0000 (0:00:00.552) 0:02:01.594 *********\nchanged: [controller-2 -> controller-1(199.19.213.74)]\n\nTASK [vexxhost.kubernetes.kubernetes : Upload kubeadm configuration] ***********\nTuesday 17 March 2026 16:05:25 +0000 (0:00:00.398) 0:02:01.993 *********\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************\nTuesday 17 March 2026 16:05:25 +0000 (0:00:00.780) 0:02:02.774 *********\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***\nTuesday 17 March 2026 16:06:36 +0000 (0:01:10.669) 0:03:13.443 *********\nchanged: [controller-2]\nchanged: [controller-3]\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***\nTuesday 17 March 2026 16:06:37 +0000 (0:00:00.506) 0:03:13.949 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******\nTuesday 17 March 2026 16:06:37 +0000 (0:00:00.371) 0:03:14.321 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************\nTuesday 17 March 2026 16:06:37 +0000 (0:00:00.346) 0:03:14.667 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***\nTuesday 17 March 2026 16:06:37 +0000 (0:00:00.081) 0:03:14.749 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************\nTuesday 17 March 2026 16:06:37 +0000 (0:00:00.078) 0:03:14.827 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***\nTuesday 17 March 2026 16:06:38 +0000 (0:00:00.071) 0:03:14.898 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***\nTuesday 17 March 2026 16:06:47 +0000 (0:00:09.354) 0:03:24.252 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************\nTuesday 17 March 2026 16:06:48 +0000 (0:00:00.977) 0:03:25.230 *********\nskipping: [controller-1] => (item=DaemonSet)\nskipping: [controller-1] => (item=ConfigMap)\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************\nTuesday 17 March 2026 16:06:48 +0000 (0:00:00.055) 0:03:25.285 *********\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***\nTuesday 17 March 2026 16:06:48 +0000 (0:00:00.044) 0:03:25.329 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***\nTuesday 17 March 2026 16:06:48 +0000 (0:00:00.076) 0:03:25.405 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************\nTuesday 17 March 2026 16:06:48 +0000 (0:00:00.108) 0:03:25.513 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***\nTuesday 17 March 2026 16:06:48 +0000 (0:00:00.071) 0:03:25.585 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***\nTuesday 17 March 2026 16:06:50 +0000 (0:00:01.475) 0:03:27.060 *********\nchanged: [controller-1]\n\nPLAY [Install control-plane components] ****************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:06:51 +0000 (0:00:01.139) 0:03:28.200 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:06:52 +0000 (0:00:00.898) 0:03:29.098 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:06:52 +0000 (0:00:00.342) 0:03:29.441 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nTuesday 17 March 2026 16:06:53 +0000 (0:00:01.118) 0:03:30.560 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:06:54 +0000 (0:00:00.366) 0:03:30.926 *********\nok: [controller-1] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:06:54 +0000 (0:00:00.077) 0:03:31.004 *********\nchanged: [controller-2]\nchanged: [controller-1]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:06:55 +0000 (0:00:01.837) 0:03:32.841 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************\nTuesday 17 March 2026 16:06:57 +0000 (0:00:01.845) 0:03:34.687 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************\nTuesday 17 March 2026 16:06:58 +0000 (0:00:00.455) 0:03:35.143 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************\nTuesday 17 March 2026 16:06:58 +0000 (0:00:00.367) 0:03:35.511 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***\nTuesday 17 March 2026 16:06:59 +0000 (0:00:00.407) 0:03:35.919 *********\nchanged: [controller-2]\nchanged: [controller-3]\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***\nTuesday 17 March 2026 16:06:59 +0000 (0:00:00.348) 0:03:36.267 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [Install plugin] **********************************************************\nTuesday 17 March 2026 16:06:59 +0000 (0:00:00.360) 0:03:36.628 *********\nincluded: vexxhost.containers.download_artifact for controller-1, controller-2, controller-3\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:06:59 +0000 (0:00:00.105) 0:03:36.733 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:06:59 +0000 (0:00:00.075) 0:03:36.809 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:07:01 +0000 (0:00:01.611) 0:03:38.421 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nTuesday 17 March 2026 16:07:03 +0000 (0:00:02.250) 0:03:40.672 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nTuesday 17 March 2026 16:07:03 +0000 (0:00:00.140) 0:03:40.812 *********\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************\nTuesday 17 March 2026 16:07:04 +0000 (0:00:00.855) 0:03:41.668 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************\nTuesday 17 March 2026 16:07:05 +0000 (0:00:01.027) 0:03:42.695 *********\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nTuesday 17 March 2026 16:07:08 +0000 (0:00:02.280) 0:03:44.975 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nTuesday 17 March 2026 16:07:08 +0000 (0:00:00.083) 0:03:45.059 *********\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************\nTuesday 17 March 2026 16:07:08 +0000 (0:00:00.690) 0:03:45.749 *********\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Capture envoy-gateway pod logs if helm failed] ***\nTuesday 17 March 2026 16:07:45 +0000 (0:00:36.212) 0:04:21.961 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Print envoy-gateway pod logs] ********\nTuesday 17 March 2026 16:07:45 +0000 (0:00:00.062) 0:04:22.024 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Fail with original helm error] *******\nTuesday 17 March 2026 16:07:45 +0000 (0:00:00.067) 0:04:22.091 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************\nTuesday 17 March 2026 16:07:45 +0000 (0:00:00.070) 0:04:22.162 *********\nchanged: [controller-1]\n\nPLAY [Wait for all nodes to become Ready] **************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:07:46 +0000 (0:00:00.959) 0:04:23.121 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [Wait for node to be Ready] ***********************************************\nTuesday 17 March 2026 16:07:47 +0000 (0:00:01.738) 0:04:24.860 *********\nok: [controller-2 -> controller-1(199.19.213.74)]\nok: [controller-1]\nok: [controller-3 -> controller-1(199.19.213.74)]\n\nPLAY RECAP *********************************************************************\ncontroller-1 : ok=120 changed=54 unreachable=0 failed=0 skipped=37 rescued=0 ignored=3\ncontroller-2 : ok=115 changed=49 unreachable=0 failed=0 skipped=34 rescued=0 ignored=2\ncontroller-3 : ok=112 changed=48 unreachable=0 failed=0 skipped=34 rescued=0 ignored=2\n\n\nTASKS RECAP ********************************************************************\nTuesday 17 March 2026 16:07:48 +0000 (0:00:01.005) 0:04:25.865 *********\n===============================================================================\nvexxhost.kubernetes.kubernetes : Join cluster -------------------------- 70.67s\nvexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------ 36.21s\nvexxhost.kubernetes.kubernetes : Initialize cluster -------------------- 33.53s\nvexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems --- 9.35s\nvexxhost.containers.containerd : Install AppArmor packages -------------- 6.40s\nInstall Debian packages ------------------------------------------------- 6.25s\nvexxhost.kubernetes.kubelet : Reload systemd ---------------------------- 3.48s\nvexxhost.kubernetes.kubelet : Install additional packages --------------- 3.41s\nvexxhost.containers.download_artifact : Extract archive ----------------- 3.31s\nvexxhost.containers.download_artifact : Extract archive ----------------- 3.16s\nGathering Facts --------------------------------------------------------- 2.83s\nvexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.44s\nvexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 2.28s\nvexxhost.containers.download_artifact : Extract archive ----------------- 2.25s\nGathering Facts --------------------------------------------------------- 1.86s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.85s\nvexxhost.containers.download_artifact : Download item ------------------- 1.84s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.81s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.81s\nGathering Facts --------------------------------------------------------- 1.74s\nINFO [cluster-upgrade > prepare] Executed: Successful\nINFO [cluster-upgrade > converge] Executing\n\nPLAY [Configure Kubernetes VIP] ************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:07:50 +0000 (0:00:00.018) 0:00:00.018 *********\n[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***\nTuesday 17 March 2026 16:07:51 +0000 (0:00:01.299) 0:00:01.318 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************\nTuesday 17 March 2026 16:07:52 +0000 (0:00:00.462) 0:00:01.781 *********\nok: [controller-1] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-3] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-2] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-1] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-3] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-2] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-1] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-3] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-2] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-3] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-1] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-1] => (item=/etc/kubernetes/manifests/haproxy.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/haproxy.yaml)\nok: [controller-3] => (item=/etc/kubernetes/manifests/haproxy.yaml)\n\nTASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****\nTuesday 17 March 2026 16:07:54 +0000 (0:00:01.962) 0:00:03.744 *********\nok: [controller-3] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)\nok: [controller-1] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)\nok: [controller-1] => (item=/etc/kubernetes/controller-manager.conf)\nok: [controller-2] => (item=/etc/kubernetes/controller-manager.conf)\nok: [controller-3] => (item=/etc/kubernetes/controller-manager.conf)\nok: [controller-1] => (item=/etc/kubernetes/scheduler.conf)\nok: [controller-2] => (item=/etc/kubernetes/scheduler.conf)\nok: [controller-3] => (item=/etc/kubernetes/scheduler.conf)\n\nTASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********\nTuesday 17 March 2026 16:07:56 +0000 (0:00:01.661) 0:00:05.405 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********\nTuesday 17 March 2026 16:07:56 +0000 (0:00:00.431) 0:00:05.836 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************\nTuesday 17 March 2026 16:07:56 +0000 (0:00:00.364) 0:00:06.200 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***\nTuesday 17 March 2026 16:07:56 +0000 (0:00:00.061) 0:00:06.262 *********\nok: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************\nTuesday 17 March 2026 16:07:56 +0000 (0:00:00.064) 0:00:06.327 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******\nTuesday 17 March 2026 16:07:57 +0000 (0:00:00.823) 0:00:07.150 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:07:58 +0000 (0:00:00.336) 0:00:07.487 *********\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:07:58 +0000 (0:00:00.005) 0:00:07.493 *********\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:07:58 +0000 (0:00:00.003) 0:00:07.496 *********\n\nPLAY [Install Kubernetes] ******************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:07:58 +0000 (0:00:00.062) 0:00:07.559 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:08:00 +0000 (0:00:02.072) 0:00:09.632 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:08:00 +0000 (0:00:00.402) 0:00:10.034 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nTuesday 17 March 2026 16:08:00 +0000 (0:00:00.081) 0:00:10.116 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:01 +0000 (0:00:00.366) 0:00:10.483 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:01 +0000 (0:00:00.115) 0:00:10.599 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:01 +0000 (0:00:00.598) 0:00:11.197 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:08:01 +0000 (0:00:00.103) 0:00:11.301 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:08:02 +0000 (0:00:00.363) 0:00:11.665 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:03 +0000 (0:00:01.268) 0:00:12.933 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:03 +0000 (0:00:00.117) 0:00:13.051 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:04 +0000 (0:00:00.537) 0:00:13.588 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nTuesday 17 March 2026 16:08:06 +0000 (0:00:02.510) 0:00:16.099 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nTuesday 17 March 2026 16:08:06 +0000 (0:00:00.061) 0:00:16.160 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nTuesday 17 March 2026 16:08:06 +0000 (0:00:00.066) 0:00:16.227 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nTuesday 17 March 2026 16:08:06 +0000 (0:00:00.070) 0:00:16.297 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nTuesday 17 March 2026 16:08:08 +0000 (0:00:01.123) 0:00:17.420 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nTuesday 17 March 2026 16:08:08 +0000 (0:00:00.768) 0:00:18.189 *********\nok: [controller-1] => (item={'path': '/etc/containerd'})\nok: [controller-2] => (item={'path': '/etc/containerd'})\nok: [controller-3] => (item={'path': '/etc/containerd'})\nok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nTuesday 17 March 2026 16:08:10 +0000 (0:00:01.550) 0:00:19.740 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:08:11 +0000 (0:00:00.864) 0:00:20.604 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:08:11 +0000 (0:00:00.006) 0:00:20.610 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:08:11 +0000 (0:00:00.005) 0:00:20.616 *********\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nTuesday 17 March 2026 16:08:11 +0000 (0:00:00.006) 0:00:20.622 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***\nTuesday 17 March 2026 16:08:11 +0000 (0:00:00.761) 0:00:21.383 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***\nTuesday 17 March 2026 16:08:12 +0000 (0:00:01.002) 0:00:22.385 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***\nTuesday 17 March 2026 16:08:13 +0000 (0:00:00.061) 0:00:22.447 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***\nTuesday 17 March 2026 16:08:13 +0000 (0:00:00.048) 0:00:22.495 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***\nTuesday 17 March 2026 16:08:13 +0000 (0:00:00.056) 0:00:22.552 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***\nTuesday 17 March 2026 16:08:13 +0000 (0:00:00.073) 0:00:22.626 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:08:13 +0000 (0:00:00.096) 0:00:22.722 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:13 +0000 (0:00:00.360) 0:00:23.083 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:13 +0000 (0:00:00.078) 0:00:23.161 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:15 +0000 (0:00:01.908) 0:00:25.069 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:08:15 +0000 (0:00:00.113) 0:00:25.182 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:16 +0000 (0:00:00.363) 0:00:25.546 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:16 +0000 (0:00:00.086) 0:00:25.632 *********\nchanged: [controller-3]\nchanged: [controller-1]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:17 +0000 (0:00:01.514) 0:00:27.146 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nTuesday 17 March 2026 16:08:17 +0000 (0:00:00.131) 0:00:27.278 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nTuesday 17 March 2026 16:08:17 +0000 (0:00:00.059) 0:00:27.337 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nTuesday 17 March 2026 16:08:18 +0000 (0:00:00.063) 0:00:27.401 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nTuesday 17 March 2026 16:08:18 +0000 (0:00:00.063) 0:00:27.464 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nTuesday 17 March 2026 16:08:19 +0000 (0:00:01.049) 0:00:28.514 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nTuesday 17 March 2026 16:08:19 +0000 (0:00:00.729) 0:00:29.244 *********\nok: [controller-1] => (item={'path': '/etc/containerd'})\nok: [controller-2] => (item={'path': '/etc/containerd'})\nok: [controller-3] => (item={'path': '/etc/containerd'})\nok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nTuesday 17 March 2026 16:08:21 +0000 (0:00:01.582) 0:00:30.827 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:08:22 +0000 (0:00:00.837) 0:00:31.664 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:08:22 +0000 (0:00:00.006) 0:00:31.671 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:08:22 +0000 (0:00:00.004) 0:00:31.676 *********\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nTuesday 17 March 2026 16:08:22 +0000 (0:00:00.005) 0:00:31.681 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:08:22 +0000 (0:00:00.547) 0:00:32.229 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:23 +0000 (0:00:00.380) 0:00:32.609 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:23 +0000 (0:00:00.113) 0:00:32.723 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:23 +0000 (0:00:00.515) 0:00:33.238 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:25 +0000 (0:00:01.542) 0:00:34.781 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:25 +0000 (0:00:00.101) 0:00:34.883 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:25 +0000 (0:00:00.516) 0:00:35.399 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.cri_tools : Create crictl config] ********************\nTuesday 17 March 2026 16:08:28 +0000 (0:00:02.441) 0:00:37.840 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********\nTuesday 17 March 2026 16:08:29 +0000 (0:00:00.751) 0:00:38.592 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:08:29 +0000 (0:00:00.383) 0:00:38.976 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:29 +0000 (0:00:00.381) 0:00:39.357 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:30 +0000 (0:00:00.093) 0:00:39.451 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:30 +0000 (0:00:00.538) 0:00:39.989 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***\nTuesday 17 March 2026 16:08:32 +0000 (0:00:02.342) 0:00:42.331 *********\nok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\nok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\nok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\n\nTASK [vexxhost.containers.cni_plugins : Install additional packages] ***********\nTuesday 17 March 2026 16:08:33 +0000 (0:00:00.081) 0:00:42.413 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************\nTuesday 17 March 2026 16:08:34 +0000 (0:00:01.190) 0:00:43.603 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********\nTuesday 17 March 2026 16:08:34 +0000 (0:00:00.501) 0:00:44.104 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******\nTuesday 17 March 2026 16:08:35 +0000 (0:00:00.701) 0:00:44.805 *********\nok: [controller-1] => (item=br_netfilter)\nok: [controller-2] => (item=br_netfilter)\nok: [controller-3] => (item=br_netfilter)\nok: [controller-1] => (item=ip_tables)\nok: [controller-2] => (item=ip_tables)\nok: [controller-3] => (item=ip_tables)\nok: [controller-1] => (item=ip6_tables)\nok: [controller-3] => (item=ip6_tables)\nok: [controller-2] => (item=ip6_tables)\nok: [controller-1] => (item=nf_conntrack)\nok: [controller-3] => (item=nf_conntrack)\nok: [controller-2] => (item=nf_conntrack)\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:08:36 +0000 (0:00:01.355) 0:00:46.161 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:08:37 +0000 (0:00:00.382) 0:00:46.543 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:08:37 +0000 (0:00:00.075) 0:00:46.619 *********\nchanged: [controller-1]\nchanged: [controller-3]\nchanged: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:08:38 +0000 (0:00:01.496) 0:00:48.116 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***\nTuesday 17 March 2026 16:08:38 +0000 (0:00:00.088) 0:00:48.204 *********\nok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\nok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\nok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\n\nTASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************\nTuesday 17 March 2026 16:08:38 +0000 (0:00:00.096) 0:00:48.301 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************\nTuesday 17 March 2026 16:08:38 +0000 (0:00:00.068) 0:00:48.370 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************\nTuesday 17 March 2026 16:08:40 +0000 (0:00:01.077) 0:00:49.447 *********\nok: [controller-1] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nok: [controller-2] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nok: [controller-3] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nok: [controller-3] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nok: [controller-1] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nok: [controller-3] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nok: [controller-1] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nok: [controller-3] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nok: [controller-1] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nok: [controller-3] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\nok: [controller-1] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\nok: [controller-2] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nok: [controller-2] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nok: [controller-2] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nok: [controller-2] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\n\nTASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***\nTuesday 17 March 2026 16:08:43 +0000 (0:00:03.335) 0:00:52.783 *********\nok: [controller-1] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller-2] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller-3] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller-1] => (item=/etc/kubernetes)\nok: [controller-3] => (item=/etc/kubernetes)\nok: [controller-2] => (item=/etc/kubernetes)\nok: [controller-1] => (item=/etc/kubernetes/manifests)\nok: [controller-3] => (item=/etc/kubernetes/manifests)\nok: [controller-2] => (item=/etc/kubernetes/manifests)\n\nTASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********\nTuesday 17 March 2026 16:08:44 +0000 (0:00:00.982) 0:00:53.766 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***\nTuesday 17 March 2026 16:08:45 +0000 (0:00:00.730) 0:00:54.497 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Check swap status] *************************\nTuesday 17 March 2026 16:08:45 +0000 (0:00:00.749) 0:00:55.246 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************\nTuesday 17 March 2026 16:08:46 +0000 (0:00:00.629) 0:00:55.875 *********\n[ERROR]: Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\n\nTask failed.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:78:7\n\n76 register: kubelet_swapon\n77\n78 - name: Disable swap\n ^ column 7\n\n<<< caused by >>>\n\nConditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11\n\n81 ignore_errors: \"{{ ansible_check_mode }}\"\n82 when:\n83 - kubelet_swapon.stdout\n ^ column 11\n\nBroken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.\n\nfatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\nfatal: [controller-2]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\nfatal: [controller-3]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\n...ignoring\n...ignoring\n...ignoring\n\nTASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********\nTuesday 17 March 2026 16:08:46 +0000 (0:00:00.067) 0:00:55.942 *********\nok: [controller-2] => (item=swap)\nok: [controller-1] => (item=swap)\nok: [controller-2] => (item=none)\nok: [controller-1] => (item=none)\nok: [controller-3] => (item=swap)\nok: [controller-3] => (item=none)\n\nTASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***\nTuesday 17 March 2026 16:08:48 +0000 (0:00:01.705) 0:00:57.648 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************\nTuesday 17 March 2026 16:08:51 +0000 (0:00:02.777) 0:01:00.425 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:08:51 +0000 (0:00:00.550) 0:01:00.975 *********\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:08:51 +0000 (0:00:00.007) 0:01:00.983 *********\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:08:51 +0000 (0:00:00.010) 0:01:00.993 *********\n\nTASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********\nTuesday 17 March 2026 16:08:51 +0000 (0:00:00.006) 0:01:00.999 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****\nTuesday 17 March 2026 16:08:52 +0000 (0:00:00.544) 0:01:01.543 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************\nTuesday 17 March 2026 16:08:53 +0000 (0:00:01.207) 0:01:02.751 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********\nTuesday 17 March 2026 16:08:54 +0000 (0:00:00.989) 0:01:03.741 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********\nTuesday 17 March 2026 16:08:54 +0000 (0:00:00.467) 0:01:04.208 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************\nTuesday 17 March 2026 16:08:55 +0000 (0:00:00.586) 0:01:04.794 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************\nTuesday 17 March 2026 16:08:55 +0000 (0:00:00.140) 0:01:04.935 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***\nTuesday 17 March 2026 16:08:55 +0000 (0:00:00.148) 0:01:05.084 *********\nok: [controller-1] => (item=controller-1)\nok: [controller-2 -> controller-1(199.19.213.74)] => (item=controller-1)\nok: [controller-3 -> controller-1(199.19.213.74)] => (item=controller-1)\nok: [controller-1 -> controller-2(199.19.213.210)] => (item=controller-2)\nok: [controller-2] => (item=controller-2)\nok: [controller-3 -> controller-2(199.19.213.210)] => (item=controller-2)\nok: [controller-1 -> controller-3(199.19.213.235)] => (item=controller-3)\nok: [controller-2 -> controller-3(199.19.213.235)] => (item=controller-3)\nok: [controller-3] => (item=controller-3)\n\nTASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****\nTuesday 17 March 2026 16:08:56 +0000 (0:00:01.001) 0:01:06.085 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***\nTuesday 17 March 2026 16:08:56 +0000 (0:00:00.084) 0:01:06.170 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********\nTuesday 17 March 2026 16:08:56 +0000 (0:00:00.073) 0:01:06.244 *********\nok: [controller-1] => {\n \"msg\": \"controller-1\"\n}\nok: [controller-2] => {\n \"msg\": \"controller-1\"\n}\nok: [controller-3] => {\n \"msg\": \"controller-1\"\n}\n\nTASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***\nTuesday 17 March 2026 16:08:56 +0000 (0:00:00.075) 0:01:06.320 *********\nskipping: [controller-2]\nskipping: [controller-3]\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************\nTuesday 17 March 2026 16:08:57 +0000 (0:00:00.926) 0:01:07.246 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************\nTuesday 17 March 2026 16:08:57 +0000 (0:00:00.076) 0:01:07.323 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************\nTuesday 17 March 2026 16:08:58 +0000 (0:00:00.087) 0:01:07.410 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************\nTuesday 17 March 2026 16:08:58 +0000 (0:00:00.081) 0:01:07.492 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************\nTuesday 17 March 2026 16:08:58 +0000 (0:00:00.081) 0:01:07.574 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************\nTuesday 17 March 2026 16:08:58 +0000 (0:00:00.081) 0:01:07.655 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************\nTuesday 17 March 2026 16:08:58 +0000 (0:00:00.078) 0:01:07.733 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************\nTuesday 17 March 2026 16:08:58 +0000 (0:00:00.079) 0:01:07.812 *********\nok: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***\nTuesday 17 March 2026 16:08:58 +0000 (0:00:00.362) 0:01:08.175 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************\nTuesday 17 March 2026 16:08:59 +0000 (0:00:00.702) 0:01:08.877 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***\nTuesday 17 March 2026 16:08:59 +0000 (0:00:00.065) 0:01:08.943 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***\nTuesday 17 March 2026 16:08:59 +0000 (0:00:00.364) 0:01:09.308 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******\nTuesday 17 March 2026 16:09:00 +0000 (0:00:00.377) 0:01:09.686 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************\nTuesday 17 March 2026 16:09:00 +0000 (0:00:00.362) 0:01:10.048 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***\nTuesday 17 March 2026 16:09:00 +0000 (0:00:00.074) 0:01:10.122 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************\nTuesday 17 March 2026 16:09:00 +0000 (0:00:00.076) 0:01:10.199 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***\nTuesday 17 March 2026 16:09:00 +0000 (0:00:00.067) 0:01:10.267 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***\nTuesday 17 March 2026 16:09:01 +0000 (0:00:01.117) 0:01:11.384 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************\nTuesday 17 March 2026 16:09:02 +0000 (0:00:00.910) 0:01:12.295 *********\nskipping: [controller-1] => (item=DaemonSet)\nskipping: [controller-1] => (item=ConfigMap)\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************\nTuesday 17 March 2026 16:09:02 +0000 (0:00:00.053) 0:01:12.349 *********\nchanged: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***\nTuesday 17 March 2026 16:12:20 +0000 (0:03:17.501) 0:04:29.850 *********\n[ERROR]: Task failed: Module failed: non-zero return code\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml:95:7\n\n93 kubeadm upgrade apply --v=5 --yes v{{ kubernetes_version }}\n94\n95 - name: Check if the Kubernetes API services is up to date\n ^ column 7\n\nfatal: [controller-2]: FAILED! => {\"changed\": false, \"cmd\": [\"grep\", \"-q\", \"v1.34.0\", \"/etc/kubernetes/manifests/kube-apiserver.yaml\"], \"delta\": \"0:00:00.004835\", \"end\": \"2026-03-17 16:12:20.928527\", \"msg\": \"non-zero return code\", \"rc\": 1, \"start\": \"2026-03-17 16:12:20.923692\", \"stderr\": \"\", \"stderr_lines\": [], \"stdout\": \"\", \"stdout_lines\": []}\nfatal: [controller-3]: FAILED! => {\"changed\": false, \"cmd\": [\"grep\", \"-q\", \"v1.34.0\", \"/etc/kubernetes/manifests/kube-apiserver.yaml\"], \"delta\": \"0:00:00.006825\", \"end\": \"2026-03-17 16:12:20.950894\", \"msg\": \"non-zero return code\", \"rc\": 1, \"start\": \"2026-03-17 16:12:20.944069\", \"stderr\": \"\", \"stderr_lines\": [], \"stdout\": \"\", \"stdout_lines\": []}\nok: [controller-1]\n...ignoring\n...ignoring\n\nTASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***\nTuesday 17 March 2026 16:12:20 +0000 (0:00:00.547) 0:04:30.398 *********\nskipping: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************\nTuesday 17 March 2026 16:18:29 +0000 (0:06:08.990) 0:10:39.388 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***\nTuesday 17 March 2026 16:18:30 +0000 (0:00:00.080) 0:10:39.469 *********\nchanged: [controller-1]\nchanged: [controller-2]\nchanged: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***\nTuesday 17 March 2026 16:19:06 +0000 (0:00:36.718) 0:11:16.187 *********\nchanged: [controller-1]\n\nPLAY [Install control-plane components] ****************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:19:07 +0000 (0:00:01.118) 0:11:17.305 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:19:08 +0000 (0:00:01.010) 0:11:18.315 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:19:09 +0000 (0:00:00.325) 0:11:18.641 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nTuesday 17 March 2026 16:19:10 +0000 (0:00:00.883) 0:11:19.524 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:19:10 +0000 (0:00:00.339) 0:11:19.864 *********\nok: [controller-1] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:19:10 +0000 (0:00:00.068) 0:11:19.933 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:19:10 +0000 (0:00:00.423) 0:11:20.356 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************\nTuesday 17 March 2026 16:19:12 +0000 (0:00:01.449) 0:11:21.806 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************\nTuesday 17 March 2026 16:19:12 +0000 (0:00:00.421) 0:11:22.228 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************\nTuesday 17 March 2026 16:19:13 +0000 (0:00:00.309) 0:11:22.537 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***\nTuesday 17 March 2026 16:19:13 +0000 (0:00:00.379) 0:11:22.916 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***\nTuesday 17 March 2026 16:19:13 +0000 (0:00:00.320) 0:11:23.237 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [Install plugin] **********************************************************\nTuesday 17 March 2026 16:19:14 +0000 (0:00:00.332) 0:11:23.569 *********\nincluded: vexxhost.containers.download_artifact for controller-1, controller-2, controller-3\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:19:14 +0000 (0:00:00.104) 0:11:23.674 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:19:14 +0000 (0:00:00.067) 0:11:23.741 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:19:14 +0000 (0:00:00.469) 0:11:24.211 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nTuesday 17 March 2026 16:19:16 +0000 (0:00:01.808) 0:11:26.020 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nTuesday 17 March 2026 16:19:16 +0000 (0:00:00.125) 0:11:26.145 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************\nTuesday 17 March 2026 16:19:17 +0000 (0:00:00.721) 0:11:26.866 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************\nTuesday 17 March 2026 16:19:18 +0000 (0:00:00.929) 0:11:27.796 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nTuesday 17 March 2026 16:19:26 +0000 (0:00:07.855) 0:11:35.652 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nTuesday 17 March 2026 16:19:26 +0000 (0:00:00.070) 0:11:35.723 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************\nTuesday 17 March 2026 16:19:26 +0000 (0:00:00.648) 0:11:36.372 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Capture envoy-gateway pod logs if helm failed] ***\nTuesday 17 March 2026 16:19:28 +0000 (0:00:01.879) 0:11:38.251 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Print envoy-gateway pod logs] ********\nTuesday 17 March 2026 16:19:28 +0000 (0:00:00.052) 0:11:38.304 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Fail with original helm error] *******\nTuesday 17 March 2026 16:19:28 +0000 (0:00:00.051) 0:11:38.355 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************\nTuesday 17 March 2026 16:19:29 +0000 (0:00:00.053) 0:11:38.408 *********\nok: [controller-1]\n\nPLAY RECAP *********************************************************************\ncontroller-1 : ok=119 changed=7 unreachable=0 failed=0 skipped=31 rescued=0 ignored=1\ncontroller-2 : ok=105 changed=5 unreachable=0 failed=0 skipped=32 rescued=0 ignored=2\ncontroller-3 : ok=105 changed=5 unreachable=0 failed=0 skipped=32 rescued=0 ignored=2\n\n\nTASKS RECAP ********************************************************************\nTuesday 17 March 2026 16:19:29 +0000 (0:00:00.798) 0:11:39.207 *********\n===============================================================================\nvexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services - 368.99s\nvexxhost.kubernetes.kubernetes : Start an upgrade --------------------- 197.50s\nvexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed) -- 36.72s\nvexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 7.86s\nvexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 3.34s\nvexxhost.kubernetes.kubelet : Create noswap systemd service config file --- 2.78s\nvexxhost.containers.download_artifact : Extract archive ----------------- 2.51s\nvexxhost.containers.download_artifact : Extract archive ----------------- 2.44s\nvexxhost.containers.download_artifact : Extract archive ----------------- 2.34s\nGathering Facts --------------------------------------------------------- 2.07s\nvexxhost.kubernetes.kube_vip : Uninstall legacy HA stack ---------------- 1.96s\nvexxhost.containers.download_artifact : Download item ------------------- 1.91s\nvexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------- 1.88s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.81s\nvexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab ----------- 1.71s\nvexxhost.kubernetes.kube_vip : Switch API server to run on port 6443 ---- 1.66s\nvexxhost.containers.containerd : Create folders for configuration ------- 1.58s\nvexxhost.containers.containerd : Create folders for configuration ------- 1.55s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.54s\nvexxhost.containers.download_artifact : Download item ------------------- 1.51s\nINFO [cluster-upgrade > converge] Executed: Successful\nINFO [cluster-upgrade > idempotence] Executing\n\nPLAY [Configure Kubernetes VIP] ************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:19:31 +0000 (0:00:00.016) 0:00:00.016 *********\n[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***\nTuesday 17 March 2026 16:19:33 +0000 (0:00:02.186) 0:00:02.202 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************\nTuesday 17 March 2026 16:19:33 +0000 (0:00:00.452) 0:00:02.654 *********\nok: [controller-1] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-2] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-3] => (item=/etc/keepalived/keepalived.conf)\nok: [controller-1] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-3] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-2] => (item=/etc/keepalived/check_apiserver.sh)\nok: [controller-1] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-3] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/keepalived.yaml)\nok: [controller-1] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-3] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-2] => (item=/etc/haproxy/haproxy.cfg)\nok: [controller-1] => (item=/etc/kubernetes/manifests/haproxy.yaml)\nok: [controller-3] => (item=/etc/kubernetes/manifests/haproxy.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/haproxy.yaml)\n\nTASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****\nTuesday 17 March 2026 16:19:35 +0000 (0:00:01.566) 0:00:04.221 *********\nok: [controller-1] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)\nok: [controller-3] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)\nok: [controller-2] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)\nok: [controller-1] => (item=/etc/kubernetes/controller-manager.conf)\nok: [controller-3] => (item=/etc/kubernetes/controller-manager.conf)\nok: [controller-2] => (item=/etc/kubernetes/controller-manager.conf)\nok: [controller-1] => (item=/etc/kubernetes/scheduler.conf)\nok: [controller-3] => (item=/etc/kubernetes/scheduler.conf)\nok: [controller-2] => (item=/etc/kubernetes/scheduler.conf)\n\nTASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********\nTuesday 17 March 2026 16:19:36 +0000 (0:00:00.998) 0:00:05.219 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********\nTuesday 17 March 2026 16:19:36 +0000 (0:00:00.411) 0:00:05.631 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************\nTuesday 17 March 2026 16:19:37 +0000 (0:00:00.315) 0:00:05.946 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***\nTuesday 17 March 2026 16:19:37 +0000 (0:00:00.057) 0:00:06.004 *********\nok: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************\nTuesday 17 March 2026 16:19:37 +0000 (0:00:00.051) 0:00:06.055 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******\nTuesday 17 March 2026 16:19:38 +0000 (0:00:00.788) 0:00:06.843 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:19:38 +0000 (0:00:00.344) 0:00:07.188 *********\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:19:38 +0000 (0:00:00.006) 0:00:07.194 *********\n\nTASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************\nTuesday 17 March 2026 16:19:38 +0000 (0:00:00.002) 0:00:07.197 *********\n\nPLAY [Install Kubernetes] ******************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:19:38 +0000 (0:00:00.061) 0:00:07.258 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:19:40 +0000 (0:00:02.002) 0:00:09.261 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:19:40 +0000 (0:00:00.380) 0:00:09.642 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nTuesday 17 March 2026 16:19:40 +0000 (0:00:00.074) 0:00:09.716 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:19:41 +0000 (0:00:00.362) 0:00:10.079 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:19:41 +0000 (0:00:00.095) 0:00:10.174 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:19:42 +0000 (0:00:00.552) 0:00:10.727 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:19:42 +0000 (0:00:00.092) 0:00:10.820 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:19:42 +0000 (0:00:00.346) 0:00:11.166 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:19:44 +0000 (0:00:02.005) 0:00:13.172 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:19:44 +0000 (0:00:00.103) 0:00:13.276 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:19:45 +0000 (0:00:00.514) 0:00:13.791 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nTuesday 17 March 2026 16:19:48 +0000 (0:00:03.337) 0:00:17.129 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nTuesday 17 March 2026 16:19:48 +0000 (0:00:00.069) 0:00:17.198 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nTuesday 17 March 2026 16:19:48 +0000 (0:00:00.068) 0:00:17.267 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nTuesday 17 March 2026 16:19:48 +0000 (0:00:00.067) 0:00:17.334 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nTuesday 17 March 2026 16:19:49 +0000 (0:00:01.273) 0:00:18.607 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nTuesday 17 March 2026 16:19:50 +0000 (0:00:00.731) 0:00:19.338 *********\nok: [controller-1] => (item={'path': '/etc/containerd'})\nok: [controller-2] => (item={'path': '/etc/containerd'})\nok: [controller-3] => (item={'path': '/etc/containerd'})\nok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nTuesday 17 March 2026 16:19:52 +0000 (0:00:01.478) 0:00:20.817 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:19:52 +0000 (0:00:00.797) 0:00:21.614 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:19:52 +0000 (0:00:00.007) 0:00:21.622 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:19:52 +0000 (0:00:00.006) 0:00:21.629 *********\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nTuesday 17 March 2026 16:19:52 +0000 (0:00:00.005) 0:00:21.634 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***\nTuesday 17 March 2026 16:19:53 +0000 (0:00:00.732) 0:00:22.367 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***\nTuesday 17 March 2026 16:19:54 +0000 (0:00:00.901) 0:00:23.268 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***\nTuesday 17 March 2026 16:19:54 +0000 (0:00:00.054) 0:00:23.322 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***\nTuesday 17 March 2026 16:19:54 +0000 (0:00:00.048) 0:00:23.371 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***\nTuesday 17 March 2026 16:19:54 +0000 (0:00:00.054) 0:00:23.425 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***\nTuesday 17 March 2026 16:19:54 +0000 (0:00:00.075) 0:00:23.500 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:19:54 +0000 (0:00:00.089) 0:00:23.590 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:19:55 +0000 (0:00:00.358) 0:00:23.948 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:19:55 +0000 (0:00:00.072) 0:00:24.020 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:19:55 +0000 (0:00:00.512) 0:00:24.532 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:19:55 +0000 (0:00:00.092) 0:00:24.625 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:19:56 +0000 (0:00:00.357) 0:00:24.983 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:19:56 +0000 (0:00:00.073) 0:00:25.056 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:19:56 +0000 (0:00:00.507) 0:00:25.564 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install SELinux packages] ***************\nTuesday 17 March 2026 16:19:56 +0000 (0:00:00.125) 0:00:25.689 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***\nTuesday 17 March 2026 16:19:57 +0000 (0:00:00.063) 0:00:25.753 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********\nTuesday 17 March 2026 16:19:57 +0000 (0:00:00.064) 0:00:25.817 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.containers.containerd : Install AppArmor packages] **************\nTuesday 17 March 2026 16:19:57 +0000 (0:00:00.061) 0:00:25.878 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***\nTuesday 17 March 2026 16:19:58 +0000 (0:00:00.958) 0:00:26.837 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.containerd : Create folders for configuration] *******\nTuesday 17 March 2026 16:19:58 +0000 (0:00:00.711) 0:00:27.548 *********\nok: [controller-1] => (item={'path': '/etc/containerd'})\nok: [controller-2] => (item={'path': '/etc/containerd'})\nok: [controller-3] => (item={'path': '/etc/containerd'})\nok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})\nok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\nok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})\n\nTASK [vexxhost.containers.containerd : Create containerd config file] **********\nTuesday 17 March 2026 16:20:00 +0000 (0:00:01.475) 0:00:29.023 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:20:01 +0000 (0:00:00.810) 0:00:29.834 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:20:01 +0000 (0:00:00.006) 0:00:29.841 *********\n\nTASK [vexxhost.containers.containerd : Force any restarts if necessary] ********\nTuesday 17 March 2026 16:20:01 +0000 (0:00:00.004) 0:00:29.845 *********\n\nTASK [vexxhost.containers.containerd : Enable and start service] ***************\nTuesday 17 March 2026 16:20:01 +0000 (0:00:00.005) 0:00:29.851 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:20:02 +0000 (0:00:01.501) 0:00:31.352 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:20:02 +0000 (0:00:00.363) 0:00:31.716 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:20:03 +0000 (0:00:00.092) 0:00:31.809 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:20:03 +0000 (0:00:00.479) 0:00:32.289 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:20:05 +0000 (0:00:01.452) 0:00:33.741 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:20:05 +0000 (0:00:00.098) 0:00:33.840 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:20:05 +0000 (0:00:00.497) 0:00:34.338 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.cri_tools : Create crictl config] ********************\nTuesday 17 March 2026 16:20:07 +0000 (0:00:01.486) 0:00:35.824 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********\nTuesday 17 March 2026 16:20:07 +0000 (0:00:00.753) 0:00:36.578 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:20:08 +0000 (0:00:00.374) 0:00:36.952 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:20:08 +0000 (0:00:00.380) 0:00:37.332 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:20:08 +0000 (0:00:00.101) 0:00:37.434 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:20:09 +0000 (0:00:00.506) 0:00:37.941 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***\nTuesday 17 March 2026 16:20:12 +0000 (0:00:03.318) 0:00:41.260 *********\nok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\nok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\nok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)\n\nTASK [vexxhost.containers.cni_plugins : Install additional packages] ***********\nTuesday 17 March 2026 16:20:12 +0000 (0:00:00.078) 0:00:41.338 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************\nTuesday 17 March 2026 16:20:13 +0000 (0:00:01.117) 0:00:42.455 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********\nTuesday 17 March 2026 16:20:14 +0000 (0:00:00.485) 0:00:42.941 *********\nok: [controller-2]\nok: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******\nTuesday 17 March 2026 16:20:14 +0000 (0:00:00.714) 0:00:43.655 *********\nok: [controller-1] => (item=br_netfilter)\nok: [controller-3] => (item=br_netfilter)\nok: [controller-2] => (item=br_netfilter)\nok: [controller-1] => (item=ip_tables)\nok: [controller-3] => (item=ip_tables)\nok: [controller-2] => (item=ip_tables)\nok: [controller-3] => (item=ip6_tables)\nok: [controller-1] => (item=ip6_tables)\nok: [controller-2] => (item=ip6_tables)\nok: [controller-1] => (item=nf_conntrack)\nok: [controller-3] => (item=nf_conntrack)\nok: [controller-2] => (item=nf_conntrack)\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:20:16 +0000 (0:00:01.337) 0:00:44.993 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:20:16 +0000 (0:00:00.362) 0:00:45.356 *********\nok: [controller-1] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"\n}\nok: [controller-2] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"\n}\nok: [controller-3] => {\n \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:20:16 +0000 (0:00:00.073) 0:00:45.429 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:20:17 +0000 (0:00:00.481) 0:00:45.911 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***\nTuesday 17 March 2026 16:20:17 +0000 (0:00:00.077) 0:00:45.988 *********\nok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\nok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\nok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)\n\nTASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************\nTuesday 17 March 2026 16:20:17 +0000 (0:00:00.085) 0:00:46.074 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************\nTuesday 17 March 2026 16:20:17 +0000 (0:00:00.068) 0:00:46.143 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************\nTuesday 17 March 2026 16:20:18 +0000 (0:00:00.912) 0:00:47.055 *********\nok: [controller-1] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nok: [controller-3] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nok: [controller-2] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})\nok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})\nok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})\nok: [controller-1] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nok: [controller-2] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nok: [controller-3] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})\nok: [controller-1] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nok: [controller-2] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nok: [controller-3] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})\nok: [controller-1] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nok: [controller-2] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nok: [controller-3] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})\nok: [controller-1] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\nok: [controller-2] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\nok: [controller-3] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})\n\nTASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***\nTuesday 17 March 2026 16:20:20 +0000 (0:00:02.329) 0:00:49.385 *********\nok: [controller-1] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller-2] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller-3] => (item=/etc/systemd/system/kubelet.service.d)\nok: [controller-1] => (item=/etc/kubernetes)\nok: [controller-2] => (item=/etc/kubernetes)\nok: [controller-3] => (item=/etc/kubernetes)\nok: [controller-1] => (item=/etc/kubernetes/manifests)\nok: [controller-3] => (item=/etc/kubernetes/manifests)\nok: [controller-2] => (item=/etc/kubernetes/manifests)\n\nTASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********\nTuesday 17 March 2026 16:20:21 +0000 (0:00:00.908) 0:00:50.294 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***\nTuesday 17 March 2026 16:20:22 +0000 (0:00:00.739) 0:00:51.033 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Check swap status] *************************\nTuesday 17 March 2026 16:20:23 +0000 (0:00:00.699) 0:00:51.732 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************\nTuesday 17 March 2026 16:20:23 +0000 (0:00:00.415) 0:00:52.147 *********\n[ERROR]: Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\n\nTask failed.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:78:7\n\n76 register: kubelet_swapon\n77\n78 - name: Disable swap\n ^ column 7\n\n<<< caused by >>>\n\nConditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\nOrigin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11\n\n81 ignore_errors: \"{{ ansible_check_mode }}\"\n82 when:\n83 - kubelet_swapon.stdout\n ^ column 11\n\nBroken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.\n\nfatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\nfatal: [controller-2]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\nfatal: [controller-3]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}\n...ignoring\n...ignoring\n...ignoring\n\nTASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********\nTuesday 17 March 2026 16:20:23 +0000 (0:00:00.075) 0:00:52.223 *********\nok: [controller-3] => (item=swap)\nok: [controller-1] => (item=swap)\nok: [controller-2] => (item=swap)\nok: [controller-3] => (item=none)\nok: [controller-1] => (item=none)\nok: [controller-2] => (item=none)\n\nTASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***\nTuesday 17 March 2026 16:20:24 +0000 (0:00:00.815) 0:00:53.039 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************\nTuesday 17 March 2026 16:20:24 +0000 (0:00:00.681) 0:00:53.720 *********\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:20:26 +0000 (0:00:01.500) 0:00:55.221 *********\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:20:26 +0000 (0:00:00.007) 0:00:55.229 *********\n\nTASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********\nTuesday 17 March 2026 16:20:26 +0000 (0:00:00.005) 0:00:55.234 *********\n\nTASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********\nTuesday 17 March 2026 16:20:26 +0000 (0:00:00.005) 0:00:55.240 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****\nTuesday 17 March 2026 16:20:27 +0000 (0:00:00.531) 0:00:55.772 *********\nok: [controller-3]\nok: [controller-1]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************\nTuesday 17 March 2026 16:20:28 +0000 (0:00:01.007) 0:00:56.779 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********\nTuesday 17 March 2026 16:20:28 +0000 (0:00:00.915) 0:00:57.694 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********\nTuesday 17 March 2026 16:20:29 +0000 (0:00:00.480) 0:00:58.175 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************\nTuesday 17 March 2026 16:20:30 +0000 (0:00:00.587) 0:00:58.762 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************\nTuesday 17 March 2026 16:20:30 +0000 (0:00:00.118) 0:00:58.881 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***\nTuesday 17 March 2026 16:20:30 +0000 (0:00:00.134) 0:00:59.016 *********\nok: [controller-1] => (item=controller-1)\nok: [controller-2 -> controller-1(199.19.213.74)] => (item=controller-1)\nok: [controller-3 -> controller-1(199.19.213.74)] => (item=controller-1)\nok: [controller-1 -> controller-2(199.19.213.210)] => (item=controller-2)\nok: [controller-2] => (item=controller-2)\nok: [controller-3 -> controller-2(199.19.213.210)] => (item=controller-2)\nok: [controller-1 -> controller-3(199.19.213.235)] => (item=controller-3)\nok: [controller-2 -> controller-3(199.19.213.235)] => (item=controller-3)\nok: [controller-3] => (item=controller-3)\n\nTASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****\nTuesday 17 March 2026 16:20:31 +0000 (0:00:00.951) 0:00:59.968 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***\nTuesday 17 March 2026 16:20:31 +0000 (0:00:00.085) 0:01:00.053 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********\nTuesday 17 March 2026 16:20:31 +0000 (0:00:00.073) 0:01:00.126 *********\nok: [controller-1] => {\n \"msg\": \"controller-1\"\n}\nok: [controller-2] => {\n \"msg\": \"controller-1\"\n}\nok: [controller-3] => {\n \"msg\": \"controller-1\"\n}\n\nTASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***\nTuesday 17 March 2026 16:20:31 +0000 (0:00:00.072) 0:01:00.199 *********\nskipping: [controller-2]\nskipping: [controller-3]\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.670) 0:01:00.869 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.064) 0:01:00.933 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.065) 0:01:00.999 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.064) 0:01:01.064 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.067) 0:01:01.131 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.070) 0:01:01.201 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.070) 0:01:01.272 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.065) 0:01:01.337 *********\nok: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***\nTuesday 17 March 2026 16:20:32 +0000 (0:00:00.335) 0:01:01.672 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************\nTuesday 17 March 2026 16:20:33 +0000 (0:00:00.340) 0:01:02.012 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***\nTuesday 17 March 2026 16:20:33 +0000 (0:00:00.066) 0:01:02.079 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***\nTuesday 17 March 2026 16:20:33 +0000 (0:00:00.342) 0:01:02.421 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******\nTuesday 17 March 2026 16:20:34 +0000 (0:00:00.345) 0:01:02.766 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************\nTuesday 17 March 2026 16:20:34 +0000 (0:00:00.337) 0:01:03.104 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***\nTuesday 17 March 2026 16:20:34 +0000 (0:00:00.069) 0:01:03.173 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************\nTuesday 17 March 2026 16:20:34 +0000 (0:00:00.072) 0:01:03.246 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***\nTuesday 17 March 2026 16:20:34 +0000 (0:00:00.074) 0:01:03.320 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***\nTuesday 17 March 2026 16:20:35 +0000 (0:00:01.124) 0:01:04.445 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************\nTuesday 17 March 2026 16:20:36 +0000 (0:00:00.846) 0:01:05.292 *********\nskipping: [controller-1] => (item=DaemonSet)\nskipping: [controller-1] => (item=ConfigMap)\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************\nTuesday 17 March 2026 16:20:36 +0000 (0:00:00.043) 0:01:05.336 *********\nskipping: [controller-1]\n\nTASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***\nTuesday 17 March 2026 16:20:36 +0000 (0:00:00.039) 0:01:05.375 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***\nTuesday 17 March 2026 16:20:36 +0000 (0:00:00.070) 0:01:05.446 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************\nTuesday 17 March 2026 16:20:36 +0000 (0:00:00.092) 0:01:05.538 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***\nTuesday 17 March 2026 16:20:36 +0000 (0:00:00.063) 0:01:05.602 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***\nTuesday 17 March 2026 16:20:38 +0000 (0:00:01.309) 0:01:06.911 *********\nok: [controller-1]\n\nPLAY [Install control-plane components] ****************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:20:39 +0000 (0:00:01.003) 0:01:07.915 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.containers.forget_package : Forget package] *********************\nTuesday 17 March 2026 16:20:41 +0000 (0:00:02.003) 0:01:09.919 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.package : Update state for tar] **********************\nTuesday 17 March 2026 16:20:41 +0000 (0:00:00.353) 0:01:10.272 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***\nTuesday 17 March 2026 16:20:42 +0000 (0:00:00.948) 0:01:11.221 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:20:42 +0000 (0:00:00.348) 0:01:11.570 *********\nok: [controller-1] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:20:42 +0000 (0:00:00.073) 0:01:11.643 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:20:43 +0000 (0:00:00.442) 0:01:12.086 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************\nTuesday 17 March 2026 16:20:44 +0000 (0:00:01.495) 0:01:13.582 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************\nTuesday 17 March 2026 16:20:45 +0000 (0:00:00.396) 0:01:13.978 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************\nTuesday 17 March 2026 16:20:45 +0000 (0:00:00.323) 0:01:14.302 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***\nTuesday 17 March 2026 16:20:45 +0000 (0:00:00.382) 0:01:14.685 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***\nTuesday 17 March 2026 16:20:46 +0000 (0:00:00.320) 0:01:15.005 *********\nok: [controller-1]\nok: [controller-3]\nok: [controller-2]\n\nTASK [Install plugin] **********************************************************\nTuesday 17 March 2026 16:20:46 +0000 (0:00:00.364) 0:01:15.369 *********\nincluded: vexxhost.containers.download_artifact for controller-1, controller-2, controller-3\n\nTASK [vexxhost.containers.download_artifact : Starting download of file] *******\nTuesday 17 March 2026 16:20:46 +0000 (0:00:00.094) 0:01:15.464 *********\nok: [controller-1] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\nok: [controller-2] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\nok: [controller-3] => {\n \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"\n}\n\nTASK [vexxhost.containers.download_artifact : Download item] *******************\nTuesday 17 March 2026 16:20:46 +0000 (0:00:00.063) 0:01:15.527 *********\nok: [controller-2]\nok: [controller-1]\nok: [controller-3]\n\nTASK [vexxhost.containers.download_artifact : Extract archive] *****************\nTuesday 17 March 2026 16:20:47 +0000 (0:00:00.468) 0:01:15.996 *********\nok: [controller-1]\nok: [controller-2]\nok: [controller-3]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nTuesday 17 March 2026 16:20:48 +0000 (0:00:01.725) 0:01:17.721 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nTuesday 17 March 2026 16:20:49 +0000 (0:00:00.112) 0:01:17.834 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************\nTuesday 17 March 2026 16:20:49 +0000 (0:00:00.740) 0:01:18.575 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************\nTuesday 17 March 2026 16:20:50 +0000 (0:00:00.995) 0:01:19.571 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***\nTuesday 17 March 2026 16:20:52 +0000 (0:00:01.798) 0:01:21.369 *********\nincluded: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3\n\nTASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************\nTuesday 17 March 2026 16:20:52 +0000 (0:00:00.062) 0:01:21.432 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************\nTuesday 17 March 2026 16:20:53 +0000 (0:00:00.629) 0:01:22.062 *********\nok: [controller-1]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Capture envoy-gateway pod logs if helm failed] ***\nTuesday 17 March 2026 16:20:55 +0000 (0:00:01.870) 0:01:23.933 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Print envoy-gateway pod logs] ********\nTuesday 17 March 2026 16:20:55 +0000 (0:00:00.056) 0:01:23.989 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Fail with original helm error] *******\nTuesday 17 March 2026 16:20:55 +0000 (0:00:00.056) 0:01:24.045 *********\nskipping: [controller-1]\nskipping: [controller-2]\nskipping: [controller-3]\n\nTASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************\nTuesday 17 March 2026 16:20:55 +0000 (0:00:00.054) 0:01:24.100 *********\nok: [controller-1]\n\nPLAY RECAP *********************************************************************\ncontroller-1 : ok=117 changed=0 unreachable=0 failed=0 skipped=33 rescued=0 ignored=1\ncontroller-2 : ok=103 changed=0 unreachable=0 failed=0 skipped=34 rescued=0 ignored=1\ncontroller-3 : ok=103 changed=0 unreachable=0 failed=0 skipped=34 rescued=0 ignored=1\n\n\nTASKS RECAP ********************************************************************\nTuesday 17 March 2026 16:20:56 +0000 (0:00:00.823) 0:01:24.924 *********\n===============================================================================\nvexxhost.containers.download_artifact : Extract archive ----------------- 3.34s\nvexxhost.containers.download_artifact : Extract archive ----------------- 3.32s\nvexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.33s\nGathering Facts --------------------------------------------------------- 2.19s\nvexxhost.containers.package : Update state for tar ---------------------- 2.01s\nGathering Facts --------------------------------------------------------- 2.00s\nGathering Facts --------------------------------------------------------- 2.00s\nvexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------- 1.87s\nvexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 1.80s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.73s\nvexxhost.kubernetes.kube_vip : Uninstall legacy HA stack ---------------- 1.57s\nvexxhost.containers.containerd : Enable and start service --------------- 1.50s\nvexxhost.kubernetes.kubelet : Enable noswap service --------------------- 1.50s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.50s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.49s\nvexxhost.containers.containerd : Create folders for configuration ------- 1.48s\nvexxhost.containers.containerd : Create folders for configuration ------- 1.48s\nvexxhost.containers.download_artifact : Extract archive ----------------- 1.45s\nvexxhost.containers.cni_plugins : Enable kernel modules in runtime ------ 1.34s\nvexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed) --- 1.31s\nINFO [cluster-upgrade > idempotence] Executed: Successful\nINFO [cluster-upgrade > side_effect] Executing\nWARNING [cluster-upgrade > side_effect] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [cluster-upgrade > verify] Executing\n\nPLAY [Verify] ******************************************************************\n\nTASK [Gathering Facts] *********************************************************\nTuesday 17 March 2026 16:20:57 +0000 (0:00:00.009) 0:00:00.009 *********\n[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\n[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.\nok: [controller-3]\nok: [controller-2]\nok: [controller-1]\n\nTASK [Search for all Cilium pods] **********************************************\nTuesday 17 March 2026 16:20:59 +0000 (0:00:02.256) 0:00:02.266 *********\nok: [controller-1]\n\nTASK [Verify Cilium operator pods have not been restarted] *********************\nTuesday 17 March 2026 16:21:00 +0000 (0:00:00.980) 0:00:03.246 *********\nok: [controller-1] => (item={'metadata': {'name': 'cilium-gdv57', 'generateName': 'cilium-', 'namespace': 'kube-system', 'uid': 'af3a298f-2aa7-492f-b9ef-f370ddb55ecc', 'resourceVersion': '4691', 'generation': 1, 'creationTimestamp': '2026-03-17T16:07:07Z', 'labels': {'app.kubernetes.io/name': 'cilium-agent', 'app.kubernetes.io/part-of': 'cilium', 'controller-revision-hash': 'f8b6c767c', 'k8s-app': 'cilium', 'pod-template-generation': '1'}, 'annotations': {'container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/cilium-agent': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/clean-cilium-state': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/mount-cgroup': 'unconfined'}, 'ownerReferences': [{'apiVersion': 'apps/v1', 'kind': 'DaemonSet', 'name': 'cilium', 'uid': 'd9698def-91cb-4d80-b757-fcff33e36771', 'controller': True, 'blockOwnerDeletion': True}], 'managedFields': [{'manager': 'kube-controller-manager', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:07:07Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:metadata': {'f:annotations': {'.': {}, 'f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': {}, 'f:container.apparmor.security.beta.kubernetes.io/cilium-agent': {}, 'f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state': {}, 'f:container.apparmor.security.beta.kubernetes.io/mount-cgroup': {}}, 'f:generateName': {}, 'f:labels': {'.': {}, 'f:app.kubernetes.io/name': {}, 'f:app.kubernetes.io/part-of': {}, 'f:controller-revision-hash': {}, 'f:k8s-app': {}, 'f:pod-template-generation': {}}, 'f:ownerReferences': {'.': {}, 'k:{\"uid\":\"d9698def-91cb-4d80-b757-fcff33e36771\"}': {}}}, 'f:spec': {'f:affinity': {'.': {}, 'f:nodeAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}, 'f:podAntiAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}}, 'f:automountServiceAccountToken': {}, 'f:containers': {'k:{\"name\":\"cilium-agent\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_CLUSTERMESH_CONFIG\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:lifecycle': {'.': {}, 'f:postStart': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}, 'f:preStop': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}}, 'f:livenessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:name': {}, 'f:readinessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:startupProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/etc/cni/net.d\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/kernel\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/net\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/lib/modules\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/run/xtables.lock\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/lib/cilium/clustermesh\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:dnsPolicy': {}, 'f:enableServiceLinks': {}, 'f:hostNetwork': {}, 'f:initContainers': {'.': {}, 'k:{\"name\":\"apply-sysctl-overwrites\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"clean-cilium-state\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_ALL_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}, 'k:{\"name\":\"CILIUM_BPF_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/run/cilium/cgroupv2\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"config\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"install-cni-binaries\"}': {'.': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {'.': {}, 'f:requests': {'.': {}, 'f:cpu': {}, 'f:memory': {}}}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/opt/cni/bin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-bpf-fs\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:privileged': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-cgroup\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CGROUP_ROOT\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:nodeSelector': {}, 'f:priorityClassName': {}, 'f:restartPolicy': {}, 'f:schedulerName': {}, 'f:securityContext': {}, 'f:serviceAccount': {}, 'f:serviceAccountName': {}, 'f:terminationGracePeriodSeconds': {}, 'f:tolerations': {}, 'f:volumes': {'.': {}, 'k:{\"name\":\"bpf-maps\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-cgroup\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-run\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"clustermesh-secrets\"}': {'.': {}, 'f:name': {}, 'f:projected': {'.': {}, 'f:defaultMode': {}, 'f:sources': {}}}, 'k:{\"name\":\"cni-path\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"etc-cni-netd\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-kernel\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-net\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"hostproc\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"lib-modules\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"tmp\"}': {'.': {}, 'f:emptyDir': {}, 'f:name': {}}, 'k:{\"name\":\"xtables-lock\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}}}}}, {'manager': 'kubelet', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:19:31Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:status': {'f:conditions': {'k:{\"type\":\"ContainersReady\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"Initialized\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodReadyToStartContainers\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodScheduled\"}': {'f:observedGeneration': {}}, 'k:{\"type\":\"Ready\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}}, 'f:containerStatuses': {}, 'f:hostIP': {}, 'f:hostIPs': {}, 'f:initContainerStatuses': {}, 'f:observedGeneration': {}, 'f:phase': {}, 'f:podIP': {}, 'f:podIPs': {'.': {}, 'k:{\"ip\":\"199.19.213.210\"}': {'.': {}, 'f:ip': {}}}, 'f:startTime': {}}}, 'subresource': 'status'}]}, 'spec': {'volumes': [{'name': 'tmp', 'emptyDir': {}}, {'name': 'cilium-run', 'hostPath': {'path': '/var/run/cilium', 'type': 'DirectoryOrCreate'}}, {'name': 'bpf-maps', 'hostPath': {'path': '/sys/fs/bpf', 'type': 'DirectoryOrCreate'}}, {'name': 'hostproc', 'hostPath': {'path': '/proc', 'type': 'Directory'}}, {'name': 'cilium-cgroup', 'hostPath': {'path': '/run/cilium/cgroupv2', 'type': 'DirectoryOrCreate'}}, {'name': 'cni-path', 'hostPath': {'path': '/opt/cni/bin', 'type': 'DirectoryOrCreate'}}, {'name': 'etc-cni-netd', 'hostPath': {'path': '/etc/cni/net.d', 'type': 'DirectoryOrCreate'}}, {'name': 'lib-modules', 'hostPath': {'path': '/lib/modules', 'type': ''}}, {'name': 'xtables-lock', 'hostPath': {'path': '/run/xtables.lock', 'type': 'FileOrCreate'}}, {'name': 'clustermesh-secrets', 'projected': {'sources': [{'secret': {'name': 'cilium-clustermesh', 'optional': True}}, {'secret': {'name': 'clustermesh-apiserver-remote-cert', 'items': [{'key': 'tls.key', 'path': 'common-etcd-client.key'}, {'key': 'tls.crt', 'path': 'common-etcd-client.crt'}, {'key': 'ca.crt', 'path': 'common-etcd-client-ca.crt'}], 'optional': True}}], 'defaultMode': 256}}, {'name': 'host-proc-sys-net', 'hostPath': {'path': '/proc/sys/net', 'type': 'Directory'}}, {'name': 'host-proc-sys-kernel', 'hostPath': {'path': '/proc/sys/kernel', 'type': 'Directory'}}, {'name': 'kube-api-access-kmjmg', 'projected': {'sources': [{'serviceAccountToken': {'expirationSeconds': 3607, 'path': 'token'}}, {'configMap': {'name': 'kube-root-ca.crt', 'items': [{'key': 'ca.crt', 'path': 'ca.crt'}]}}, {'downwardAPI': {'items': [{'path': 'namespace', 'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}]}}], 'defaultMode': 420}}], 'initContainers': [{'name': 'config', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium', 'build-config'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}], 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent'}, {'name': 'mount-cgroup', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-mount\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n'], 'env': [{'name': 'CGROUP_ROOT', 'value': '/run/cilium/cgroupv2'}, {'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'apply-sysctl-overwrites', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-sysctlfix\";\\nrm /hostbin/cilium-sysctlfix\\n'], 'env': [{'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'mount-bpf-fs', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/bin/bash', '-c', '--'], 'args': ['mount | grep \"/sys/fs/bpf type bpf\" || mount -t bpf bpf /sys/fs/bpf'], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'Bidirectional'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'privileged': True}}, {'name': 'clean-cilium-state', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/init-container.sh'], 'env': [{'name': 'CILIUM_ALL_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-state', 'optional': True}}}, {'name': 'CILIUM_BPF_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-bpf-state', 'optional': True}}}], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['NET_ADMIN', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'install-cni-binaries', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/install-plugin.sh'], 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}}}], 'containers': [{'name': 'cilium-agent', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium-agent'], 'args': ['--config-dir=/tmp/cilium/config-map'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}, {'name': 'CILIUM_CLUSTERMESH_CONFIG', 'value': '/var/lib/cilium/clustermesh/'}], 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'readOnly': True, 'mountPath': '/var/lib/cilium/clustermesh'}, {'name': 'lib-modules', 'readOnly': True, 'mountPath': '/lib/modules'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'livenessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 10}, 'readinessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 3}, 'startupProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 1, 'periodSeconds': 2, 'successThreshold': 1, 'failureThreshold': 105}, 'lifecycle': {'postStart': {'exec': {'command': ['bash', '-c', 'set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it\\'s likely that \\'aws-node\\' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a \\'postStart\\' hook since this may need to run\\n# for nodes which might have already been init\\'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \"$(iptables-save | grep -E -c \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\')\" != \"0\" ]];\\nthen\\n echo \\'Deleting iptables rules created by the AWS CNI VPC plugin\\'\\n iptables-save | grep -E -v \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\' | iptables-restore\\nfi\\necho \\'Done!\\'\\n']}}, 'preStop': {'exec': {'command': ['/cni-uninstall.sh']}}}, 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['CHOWN', 'KILL', 'NET_ADMIN', 'NET_RAW', 'IPC_LOCK', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE', 'DAC_OVERRIDE', 'FOWNER', 'SETGID', 'SETUID'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}], 'restartPolicy': 'Always', 'terminationGracePeriodSeconds': 1, 'dnsPolicy': 'ClusterFirst', 'nodeSelector': {'kubernetes.io/os': 'linux'}, 'serviceAccountName': 'cilium', 'serviceAccount': 'cilium', 'automountServiceAccountToken': True, 'nodeName': 'controller-2', 'hostNetwork': True, 'securityContext': {}, 'affinity': {'nodeAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': {'nodeSelectorTerms': [{'matchFields': [{'key': 'metadata.name', 'operator': 'In', 'values': ['controller-2']}]}]}}, 'podAntiAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': [{'labelSelector': {'matchLabels': {'k8s-app': 'cilium'}}, 'topologyKey': 'kubernetes.io/hostname'}]}}, 'schedulerName': 'default-scheduler', 'tolerations': [{'operator': 'Exists'}, {'key': 'node.kubernetes.io/not-ready', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/unreachable', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/disk-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/memory-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/pid-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/unschedulable', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/network-unavailable', 'operator': 'Exists', 'effect': 'NoSchedule'}], 'priorityClassName': 'system-node-critical', 'priority': 2000001000, 'enableServiceLinks': True, 'preemptionPolicy': 'PreemptLowerPriority'}, 'status': {'observedGeneration': 1, 'phase': 'Running', 'conditions': [{'type': 'PodReadyToStartContainers', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:17Z'}, {'type': 'Initialized', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:25Z'}, {'type': 'Ready', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:09Z'}, {'type': 'ContainersReady', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:09Z'}, {'type': 'PodScheduled', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:07Z'}], 'hostIP': '199.19.213.210', 'hostIPs': [{'ip': '199.19.213.210'}], 'podIP': '199.19.213.210', 'podIPs': [{'ip': '199.19.213.210'}], 'startTime': '2026-03-17T16:07:07Z', 'initContainerStatuses': [{'name': 'config', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:17Z', 'finishedAt': '2026-03-17T16:07:17Z', 'containerID': 'containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-cgroup', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:20Z', 'finishedAt': '2026-03-17T16:07:20Z', 'containerID': 'containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'apply-sysctl-overwrites', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:21Z', 'finishedAt': '2026-03-17T16:07:21Z', 'containerID': 'containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-bpf-fs', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:22Z', 'finishedAt': '2026-03-17T16:07:22Z', 'containerID': 'containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'clean-cilium-state', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:23Z', 'finishedAt': '2026-03-17T16:07:23Z', 'containerID': 'containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'install-cni-binaries', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:24Z', 'finishedAt': '2026-03-17T16:07:24Z', 'containerID': 'containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486', 'started': False, 'allocatedResources': {'cpu': '100m', 'memory': '10Mi'}, 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'containerStatuses': [{'name': 'cilium-agent', 'state': {'running': {'startedAt': '2026-03-17T16:07:25Z'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://56a83dcd2323adebd2c986a7eec3e95def81cae723e8c9b1923e7d95931dc20b', 'started': True, 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'mountPath': '/var/lib/cilium/clustermesh', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'lib-modules', 'mountPath': '/lib/modules', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'qosClass': 'Burstable'}, 'apiVersion': 'v1', 'kind': 'Pod'}) => {\n \"ansible_loop_var\": \"item\",\n \"changed\": false,\n \"item\": {\n \"apiVersion\": \"v1\",\n \"kind\": \"Pod\",\n \"metadata\": {\n \"annotations\": {\n \"container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/cilium-agent\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/mount-cgroup\": \"unconfined\"\n },\n \"creationTimestamp\": \"2026-03-17T16:07:07Z\",\n \"generateName\": \"cilium-\",\n \"generation\": 1,\n \"labels\": {\n \"app.kubernetes.io/name\": \"cilium-agent\",\n \"app.kubernetes.io/part-of\": \"cilium\",\n \"controller-revision-hash\": \"f8b6c767c\",\n \"k8s-app\": \"cilium\",\n \"pod-template-generation\": \"1\"\n },\n \"managedFields\": [\n {\n \"apiVersion\": \"v1\",\n \"fieldsType\": \"FieldsV1\",\n \"fieldsV1\": {\n \"f:metadata\": {\n \"f:annotations\": {\n \".\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/cilium-agent\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/mount-cgroup\": {}\n },\n \"f:generateName\": {},\n \"f:labels\": {\n \".\": {},\n \"f:app.kubernetes.io/name\": {},\n \"f:app.kubernetes.io/part-of\": {},\n \"f:controller-revision-hash\": {},\n \"f:k8s-app\": {},\n \"f:pod-template-generation\": {}\n },\n \"f:ownerReferences\": {\n \".\": {},\n \"k:{\\\"uid\\\":\\\"d9698def-91cb-4d80-b757-fcff33e36771\\\"}\": {}\n }\n },\n \"f:spec\": {\n \"f:affinity\": {\n \".\": {},\n \"f:nodeAffinity\": {\n \".\": {},\n \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}\n },\n \"f:podAntiAffinity\": {\n \".\": {},\n \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}\n }\n },\n \"f:automountServiceAccountToken\": {},\n \"f:containers\": {\n \"k:{\\\"name\\\":\\\"cilium-agent\\\"}\": {\n \".\": {},\n \"f:args\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_CLUSTERMESH_CONFIG\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n },\n \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:lifecycle\": {\n \".\": {},\n \"f:postStart\": {\n \".\": {},\n \"f:exec\": {\n \".\": {},\n \"f:command\": {}\n }\n },\n \"f:preStop\": {\n \".\": {},\n \"f:exec\": {\n \".\": {},\n \"f:command\": {}\n }\n }\n },\n \"f:livenessProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:name\": {},\n \"f:readinessProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:startupProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/host/etc/cni/net.d\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/kernel\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/net\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/lib/modules\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {},\n \"f:readOnly\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/run/xtables.lock\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/lib/cilium/clustermesh\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {},\n \"f:readOnly\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n }\n },\n \"f:dnsPolicy\": {},\n \"f:enableServiceLinks\": {},\n \"f:hostNetwork\": {},\n \"f:initContainers\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"apply-sysctl-overwrites\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"clean-cilium-state\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_ALL_STATE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:configMapKeyRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"CILIUM_BPF_STATE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:configMapKeyRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/run/cilium/cgroupv2\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"config\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"install-cni-binaries\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {\n \".\": {},\n \"f:requests\": {\n \".\": {},\n \"f:cpu\": {},\n \"f:memory\": {}\n }\n },\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/host/opt/cni/bin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"mount-bpf-fs\\\"}\": {\n \".\": {},\n \"f:args\": {},\n \"f:command\": {},\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:privileged\": {}\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"mount-cgroup\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n },\n \"k:{\\\"name\\\":\\\"CGROUP_ROOT\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n }\n },\n \"f:nodeSelector\": {},\n \"f:priorityClassName\": {},\n \"f:restartPolicy\": {},\n \"f:schedulerName\": {},\n \"f:securityContext\": {},\n \"f:serviceAccount\": {},\n \"f:serviceAccountName\": {},\n \"f:terminationGracePeriodSeconds\": {},\n \"f:tolerations\": {},\n \"f:volumes\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"bpf-maps\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"cilium-cgroup\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"cilium-run\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"clustermesh-secrets\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:projected\": {\n \".\": {},\n \"f:defaultMode\": {},\n \"f:sources\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"cni-path\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"etc-cni-netd\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"host-proc-sys-kernel\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"host-proc-sys-net\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"hostproc\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"lib-modules\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"tmp\\\"}\": {\n \".\": {},\n \"f:emptyDir\": {},\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"xtables-lock\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n }\n }\n }\n },\n \"manager\": \"kube-controller-manager\",\n \"operation\": \"Update\",\n \"time\": \"2026-03-17T16:07:07Z\"\n },\n {\n \"apiVersion\": \"v1\",\n \"fieldsType\": \"FieldsV1\",\n \"fieldsV1\": {\n \"f:status\": {\n \"f:conditions\": {\n \"k:{\\\"type\\\":\\\"ContainersReady\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"Initialized\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"PodReadyToStartContainers\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"PodScheduled\\\"}\": {\n \"f:observedGeneration\": {}\n },\n \"k:{\\\"type\\\":\\\"Ready\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n }\n },\n \"f:containerStatuses\": {},\n \"f:hostIP\": {},\n \"f:hostIPs\": {},\n \"f:initContainerStatuses\": {},\n \"f:observedGeneration\": {},\n \"f:phase\": {},\n \"f:podIP\": {},\n \"f:podIPs\": {\n \".\": {},\n \"k:{\\\"ip\\\":\\\"199.19.213.210\\\"}\": {\n \".\": {},\n \"f:ip\": {}\n }\n },\n \"f:startTime\": {}\n }\n },\n \"manager\": \"kubelet\",\n \"operation\": \"Update\",\n \"subresource\": \"status\",\n \"time\": \"2026-03-17T16:19:31Z\"\n }\n ],\n \"name\": \"cilium-gdv57\",\n \"namespace\": \"kube-system\",\n \"ownerReferences\": [\n {\n \"apiVersion\": \"apps/v1\",\n \"blockOwnerDeletion\": true,\n \"controller\": true,\n \"kind\": \"DaemonSet\",\n \"name\": \"cilium\",\n \"uid\": \"d9698def-91cb-4d80-b757-fcff33e36771\"\n }\n ],\n \"resourceVersion\": \"4691\",\n \"uid\": \"af3a298f-2aa7-492f-b9ef-f370ddb55ecc\"\n },\n \"spec\": {\n \"affinity\": {\n \"nodeAffinity\": {\n \"requiredDuringSchedulingIgnoredDuringExecution\": {\n \"nodeSelectorTerms\": [\n {\n \"matchFields\": [\n {\n \"key\": \"metadata.name\",\n \"operator\": \"In\",\n \"values\": [\n \"controller-2\"\n ]\n }\n ]\n }\n ]\n }\n },\n \"podAntiAffinity\": {\n \"requiredDuringSchedulingIgnoredDuringExecution\": [\n {\n \"labelSelector\": {\n \"matchLabels\": {\n \"k8s-app\": \"cilium\"\n }\n },\n \"topologyKey\": \"kubernetes.io/hostname\"\n }\n ]\n }\n },\n \"automountServiceAccountToken\": true,\n \"containers\": [\n {\n \"args\": [\n \"--config-dir=/tmp/cilium/config-map\"\n ],\n \"command\": [\n \"cilium-agent\"\n ],\n \"env\": [\n {\n \"name\": \"K8S_NODE_NAME\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"spec.nodeName\"\n }\n }\n },\n {\n \"name\": \"CILIUM_K8S_NAMESPACE\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n }\n }\n },\n {\n \"name\": \"CILIUM_CLUSTERMESH_CONFIG\",\n \"value\": \"/var/lib/cilium/clustermesh/\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"lifecycle\": {\n \"postStart\": {\n \"exec\": {\n \"command\": [\n \"bash\",\n \"-c\",\n \"set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it's likely that 'aws-node' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a 'postStart' hook since this may need to run\\n# for nodes which might have already been init'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \\\"$(iptables-save | grep -E -c 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN')\\\" != \\\"0\\\" ]];\\nthen\\n echo 'Deleting iptables rules created by the AWS CNI VPC plugin'\\n iptables-save | grep -E -v 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN' | iptables-restore\\nfi\\necho 'Done!'\\n\"\n ]\n }\n },\n \"preStop\": {\n \"exec\": {\n \"command\": [\n \"/cni-uninstall.sh\"\n ]\n }\n }\n },\n \"livenessProbe\": {\n \"failureThreshold\": 10,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 30,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 5\n },\n \"name\": \"cilium-agent\",\n \"readinessProbe\": {\n \"failureThreshold\": 3,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 30,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 5\n },\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"CHOWN\",\n \"KILL\",\n \"NET_ADMIN\",\n \"NET_RAW\",\n \"IPC_LOCK\",\n \"SYS_MODULE\",\n \"SYS_ADMIN\",\n \"SYS_RESOURCE\",\n \"DAC_OVERRIDE\",\n \"FOWNER\",\n \"SETGID\",\n \"SETUID\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"startupProbe\": {\n \"failureThreshold\": 105,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 2,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 1\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/proc/sys/net\",\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"mountPath\": \"/host/proc/sys/kernel\",\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"mountPropagation\": \"HostToContainer\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/host/etc/cni/net.d\",\n \"name\": \"etc-cni-netd\"\n },\n {\n \"mountPath\": \"/var/lib/cilium/clustermesh\",\n \"name\": \"clustermesh-secrets\",\n \"readOnly\": true\n },\n {\n \"mountPath\": \"/lib/modules\",\n \"name\": \"lib-modules\",\n \"readOnly\": true\n },\n {\n \"mountPath\": \"/run/xtables.lock\",\n \"name\": \"xtables-lock\"\n },\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true\n }\n ]\n }\n ],\n \"dnsPolicy\": \"ClusterFirst\",\n \"enableServiceLinks\": true,\n \"hostNetwork\": true,\n \"initContainers\": [\n {\n \"command\": [\n \"cilium\",\n \"build-config\"\n ],\n \"env\": [\n {\n \"name\": \"K8S_NODE_NAME\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"spec.nodeName\"\n }\n }\n },\n {\n \"name\": \"CILIUM_K8S_NAMESPACE\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n }\n }\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"config\",\n \"resources\": {},\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"sh\",\n \"-ec\",\n \"cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-mount\\\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n\"\n ],\n \"env\": [\n {\n \"name\": \"CGROUP_ROOT\",\n \"value\": \"/run/cilium/cgroupv2\"\n },\n {\n \"name\": \"BIN_PATH\",\n \"value\": \"/opt/cni/bin\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"mount-cgroup\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"SYS_ADMIN\",\n \"SYS_CHROOT\",\n \"SYS_PTRACE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"sh\",\n \"-ec\",\n \"cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-sysctlfix\\\";\\nrm /hostbin/cilium-sysctlfix\\n\"\n ],\n \"env\": [\n {\n \"name\": \"BIN_PATH\",\n \"value\": \"/opt/cni/bin\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"apply-sysctl-overwrites\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"SYS_ADMIN\",\n \"SYS_CHROOT\",\n \"SYS_PTRACE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"args\": [\n \"mount | grep \\\"/sys/fs/bpf type bpf\\\" || mount -t bpf bpf /sys/fs/bpf\"\n ],\n \"command\": [\n \"/bin/bash\",\n \"-c\",\n \"--\"\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"mount-bpf-fs\",\n \"resources\": {},\n \"securityContext\": {\n \"privileged\": true\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"mountPropagation\": \"Bidirectional\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"/init-container.sh\"\n ],\n \"env\": [\n {\n \"name\": \"CILIUM_ALL_STATE\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"clean-cilium-state\",\n \"name\": \"cilium-config\",\n \"optional\": true\n }\n }\n },\n {\n \"name\": \"CILIUM_BPF_STATE\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"clean-cilium-bpf-state\",\n \"name\": \"cilium-config\",\n \"optional\": true\n }\n }\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"clean-cilium-state\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"NET_ADMIN\",\n \"SYS_MODULE\",\n \"SYS_ADMIN\",\n \"SYS_RESOURCE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/run/cilium/cgroupv2\",\n \"mountPropagation\": \"HostToContainer\",\n \"name\": \"cilium-cgroup\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"/install-plugin.sh\"\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"install-cni-binaries\",\n \"resources\": {\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n }\n },\n \"securityContext\": {\n \"capabilities\": {\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/opt/cni/bin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true\n }\n ]\n }\n ],\n \"nodeName\": \"controller-2\",\n \"nodeSelector\": {\n \"kubernetes.io/os\": \"linux\"\n },\n \"preemptionPolicy\": \"PreemptLowerPriority\",\n \"priority\": 2000001000,\n \"priorityClassName\": \"system-node-critical\",\n \"restartPolicy\": \"Always\",\n \"schedulerName\": \"default-scheduler\",\n \"securityContext\": {},\n \"serviceAccount\": \"cilium\",\n \"serviceAccountName\": \"cilium\",\n \"terminationGracePeriodSeconds\": 1,\n \"tolerations\": [\n {\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoExecute\",\n \"key\": \"node.kubernetes.io/not-ready\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoExecute\",\n \"key\": \"node.kubernetes.io/unreachable\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/disk-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/memory-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/pid-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/unschedulable\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/network-unavailable\",\n \"operator\": \"Exists\"\n }\n ],\n \"volumes\": [\n {\n \"emptyDir\": {},\n \"name\": \"tmp\"\n },\n {\n \"hostPath\": {\n \"path\": \"/var/run/cilium\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cilium-run\"\n },\n {\n \"hostPath\": {\n \"path\": \"/sys/fs/bpf\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"bpf-maps\"\n },\n {\n \"hostPath\": {\n \"path\": \"/proc\",\n \"type\": \"Directory\"\n },\n \"name\": \"hostproc\"\n },\n {\n \"hostPath\": {\n \"path\": \"/run/cilium/cgroupv2\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cilium-cgroup\"\n },\n {\n \"hostPath\": {\n \"path\": \"/opt/cni/bin\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cni-path\"\n },\n {\n \"hostPath\": {\n \"path\": \"/etc/cni/net.d\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"etc-cni-netd\"\n },\n {\n \"hostPath\": {\n \"path\": \"/lib/modules\",\n \"type\": \"\"\n },\n \"name\": \"lib-modules\"\n },\n {\n \"hostPath\": {\n \"path\": \"/run/xtables.lock\",\n \"type\": \"FileOrCreate\"\n },\n \"name\": \"xtables-lock\"\n },\n {\n \"name\": \"clustermesh-secrets\",\n \"projected\": {\n \"defaultMode\": 256,\n \"sources\": [\n {\n \"secret\": {\n \"name\": \"cilium-clustermesh\",\n \"optional\": true\n }\n },\n {\n \"secret\": {\n \"items\": [\n {\n \"key\": \"tls.key\",\n \"path\": \"common-etcd-client.key\"\n },\n {\n \"key\": \"tls.crt\",\n \"path\": \"common-etcd-client.crt\"\n },\n {\n \"key\": \"ca.crt\",\n \"path\": \"common-etcd-client-ca.crt\"\n }\n ],\n \"name\": \"clustermesh-apiserver-remote-cert\",\n \"optional\": true\n }\n }\n ]\n }\n },\n {\n \"hostPath\": {\n \"path\": \"/proc/sys/net\",\n \"type\": \"Directory\"\n },\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"hostPath\": {\n \"path\": \"/proc/sys/kernel\",\n \"type\": \"Directory\"\n },\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"name\": \"kube-api-access-kmjmg\",\n \"projected\": {\n \"defaultMode\": 420,\n \"sources\": [\n {\n \"serviceAccountToken\": {\n \"expirationSeconds\": 3607,\n \"path\": \"token\"\n }\n },\n {\n \"configMap\": {\n \"items\": [\n {\n \"key\": \"ca.crt\",\n \"path\": \"ca.crt\"\n }\n ],\n \"name\": \"kube-root-ca.crt\"\n }\n },\n {\n \"downwardAPI\": {\n \"items\": [\n {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n },\n \"path\": \"namespace\"\n }\n ]\n }\n }\n ]\n }\n }\n ]\n },\n \"status\": {\n \"conditions\": [\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:17Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"PodReadyToStartContainers\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:25Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"Initialized\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:19:09Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"Ready\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:19:09Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"ContainersReady\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:07Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"PodScheduled\"\n }\n ],\n \"containerStatuses\": [\n {\n \"containerID\": \"containerd://56a83dcd2323adebd2c986a7eec3e95def81cae723e8c9b1923e7d95931dc20b\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"cilium-agent\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": true,\n \"state\": {\n \"running\": {\n \"startedAt\": \"2026-03-17T16:07:25Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/proc/sys/net\",\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"mountPath\": \"/host/proc/sys/kernel\",\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/host/etc/cni/net.d\",\n \"name\": \"etc-cni-netd\"\n },\n {\n \"mountPath\": \"/var/lib/cilium/clustermesh\",\n \"name\": \"clustermesh-secrets\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n },\n {\n \"mountPath\": \"/lib/modules\",\n \"name\": \"lib-modules\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n },\n {\n \"mountPath\": \"/run/xtables.lock\",\n \"name\": \"xtables-lock\"\n },\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n }\n ],\n \"hostIP\": \"199.19.213.210\",\n \"hostIPs\": [\n {\n \"ip\": \"199.19.213.210\"\n }\n ],\n \"initContainerStatuses\": [\n {\n \"containerID\": \"containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"config\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:17Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:17Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"mount-cgroup\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:20Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:20Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"apply-sysctl-overwrites\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:21Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:21Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"mount-bpf-fs\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:22Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:22Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"clean-cilium-state\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:23Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:23Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/run/cilium/cgroupv2\",\n \"name\": \"cilium-cgroup\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"allocatedResources\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n },\n \"containerID\": \"containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"install-cni-binaries\",\n \"ready\": true,\n \"resources\": {\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n }\n },\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:24Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:24Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/opt/cni/bin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-kmjmg\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n }\n ],\n \"observedGeneration\": 1,\n \"phase\": \"Running\",\n \"podIP\": \"199.19.213.210\",\n \"podIPs\": [\n {\n \"ip\": \"199.19.213.210\"\n }\n ],\n \"qosClass\": \"Burstable\",\n \"startTime\": \"2026-03-17T16:07:07Z\"\n }\n },\n \"msg\": \"Cilium pods have not been restarted\"\n}\nok: [controller-1] => (item={'metadata': {'name': 'cilium-kl6qt', 'generateName': 'cilium-', 'namespace': 'kube-system', 'uid': '07358b1c-f861-47f5-97d9-e53ccc91588a', 'resourceVersion': '4789', 'generation': 1, 'creationTimestamp': '2026-03-17T16:07:07Z', 'labels': {'app.kubernetes.io/name': 'cilium-agent', 'app.kubernetes.io/part-of': 'cilium', 'controller-revision-hash': 'f8b6c767c', 'k8s-app': 'cilium', 'pod-template-generation': '1'}, 'annotations': {'container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/cilium-agent': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/clean-cilium-state': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/mount-cgroup': 'unconfined'}, 'ownerReferences': [{'apiVersion': 'apps/v1', 'kind': 'DaemonSet', 'name': 'cilium', 'uid': 'd9698def-91cb-4d80-b757-fcff33e36771', 'controller': True, 'blockOwnerDeletion': True}], 'managedFields': [{'manager': 'kube-controller-manager', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:07:07Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:metadata': {'f:annotations': {'.': {}, 'f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': {}, 'f:container.apparmor.security.beta.kubernetes.io/cilium-agent': {}, 'f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state': {}, 'f:container.apparmor.security.beta.kubernetes.io/mount-cgroup': {}}, 'f:generateName': {}, 'f:labels': {'.': {}, 'f:app.kubernetes.io/name': {}, 'f:app.kubernetes.io/part-of': {}, 'f:controller-revision-hash': {}, 'f:k8s-app': {}, 'f:pod-template-generation': {}}, 'f:ownerReferences': {'.': {}, 'k:{\"uid\":\"d9698def-91cb-4d80-b757-fcff33e36771\"}': {}}}, 'f:spec': {'f:affinity': {'.': {}, 'f:nodeAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}, 'f:podAntiAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}}, 'f:automountServiceAccountToken': {}, 'f:containers': {'k:{\"name\":\"cilium-agent\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_CLUSTERMESH_CONFIG\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:lifecycle': {'.': {}, 'f:postStart': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}, 'f:preStop': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}}, 'f:livenessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:name': {}, 'f:readinessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:startupProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/etc/cni/net.d\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/kernel\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/net\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/lib/modules\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/run/xtables.lock\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/lib/cilium/clustermesh\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:dnsPolicy': {}, 'f:enableServiceLinks': {}, 'f:hostNetwork': {}, 'f:initContainers': {'.': {}, 'k:{\"name\":\"apply-sysctl-overwrites\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"clean-cilium-state\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_ALL_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}, 'k:{\"name\":\"CILIUM_BPF_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/run/cilium/cgroupv2\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"config\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"install-cni-binaries\"}': {'.': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {'.': {}, 'f:requests': {'.': {}, 'f:cpu': {}, 'f:memory': {}}}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/opt/cni/bin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-bpf-fs\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:privileged': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-cgroup\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CGROUP_ROOT\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:nodeSelector': {}, 'f:priorityClassName': {}, 'f:restartPolicy': {}, 'f:schedulerName': {}, 'f:securityContext': {}, 'f:serviceAccount': {}, 'f:serviceAccountName': {}, 'f:terminationGracePeriodSeconds': {}, 'f:tolerations': {}, 'f:volumes': {'.': {}, 'k:{\"name\":\"bpf-maps\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-cgroup\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-run\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"clustermesh-secrets\"}': {'.': {}, 'f:name': {}, 'f:projected': {'.': {}, 'f:defaultMode': {}, 'f:sources': {}}}, 'k:{\"name\":\"cni-path\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"etc-cni-netd\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-kernel\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-net\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"hostproc\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"lib-modules\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"tmp\"}': {'.': {}, 'f:emptyDir': {}, 'f:name': {}}, 'k:{\"name\":\"xtables-lock\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}}}}}, {'manager': 'kubelet', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:19:36Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:status': {'f:conditions': {'k:{\"type\":\"ContainersReady\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"Initialized\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodReadyToStartContainers\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodScheduled\"}': {'f:observedGeneration': {}}, 'k:{\"type\":\"Ready\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}}, 'f:containerStatuses': {}, 'f:hostIP': {}, 'f:hostIPs': {}, 'f:initContainerStatuses': {}, 'f:observedGeneration': {}, 'f:phase': {}, 'f:podIP': {}, 'f:podIPs': {'.': {}, 'k:{\"ip\":\"199.19.213.235\"}': {'.': {}, 'f:ip': {}}}, 'f:startTime': {}}}, 'subresource': 'status'}]}, 'spec': {'volumes': [{'name': 'tmp', 'emptyDir': {}}, {'name': 'cilium-run', 'hostPath': {'path': '/var/run/cilium', 'type': 'DirectoryOrCreate'}}, {'name': 'bpf-maps', 'hostPath': {'path': '/sys/fs/bpf', 'type': 'DirectoryOrCreate'}}, {'name': 'hostproc', 'hostPath': {'path': '/proc', 'type': 'Directory'}}, {'name': 'cilium-cgroup', 'hostPath': {'path': '/run/cilium/cgroupv2', 'type': 'DirectoryOrCreate'}}, {'name': 'cni-path', 'hostPath': {'path': '/opt/cni/bin', 'type': 'DirectoryOrCreate'}}, {'name': 'etc-cni-netd', 'hostPath': {'path': '/etc/cni/net.d', 'type': 'DirectoryOrCreate'}}, {'name': 'lib-modules', 'hostPath': {'path': '/lib/modules', 'type': ''}}, {'name': 'xtables-lock', 'hostPath': {'path': '/run/xtables.lock', 'type': 'FileOrCreate'}}, {'name': 'clustermesh-secrets', 'projected': {'sources': [{'secret': {'name': 'cilium-clustermesh', 'optional': True}}, {'secret': {'name': 'clustermesh-apiserver-remote-cert', 'items': [{'key': 'tls.key', 'path': 'common-etcd-client.key'}, {'key': 'tls.crt', 'path': 'common-etcd-client.crt'}, {'key': 'ca.crt', 'path': 'common-etcd-client-ca.crt'}], 'optional': True}}], 'defaultMode': 256}}, {'name': 'host-proc-sys-net', 'hostPath': {'path': '/proc/sys/net', 'type': 'Directory'}}, {'name': 'host-proc-sys-kernel', 'hostPath': {'path': '/proc/sys/kernel', 'type': 'Directory'}}, {'name': 'kube-api-access-qkzsr', 'projected': {'sources': [{'serviceAccountToken': {'expirationSeconds': 3607, 'path': 'token'}}, {'configMap': {'name': 'kube-root-ca.crt', 'items': [{'key': 'ca.crt', 'path': 'ca.crt'}]}}, {'downwardAPI': {'items': [{'path': 'namespace', 'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}]}}], 'defaultMode': 420}}], 'initContainers': [{'name': 'config', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium', 'build-config'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}], 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent'}, {'name': 'mount-cgroup', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-mount\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n'], 'env': [{'name': 'CGROUP_ROOT', 'value': '/run/cilium/cgroupv2'}, {'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'apply-sysctl-overwrites', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-sysctlfix\";\\nrm /hostbin/cilium-sysctlfix\\n'], 'env': [{'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'mount-bpf-fs', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/bin/bash', '-c', '--'], 'args': ['mount | grep \"/sys/fs/bpf type bpf\" || mount -t bpf bpf /sys/fs/bpf'], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'Bidirectional'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'privileged': True}}, {'name': 'clean-cilium-state', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/init-container.sh'], 'env': [{'name': 'CILIUM_ALL_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-state', 'optional': True}}}, {'name': 'CILIUM_BPF_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-bpf-state', 'optional': True}}}], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['NET_ADMIN', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'install-cni-binaries', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/install-plugin.sh'], 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}}}], 'containers': [{'name': 'cilium-agent', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium-agent'], 'args': ['--config-dir=/tmp/cilium/config-map'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}, {'name': 'CILIUM_CLUSTERMESH_CONFIG', 'value': '/var/lib/cilium/clustermesh/'}], 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'readOnly': True, 'mountPath': '/var/lib/cilium/clustermesh'}, {'name': 'lib-modules', 'readOnly': True, 'mountPath': '/lib/modules'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'livenessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 10}, 'readinessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 3}, 'startupProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 1, 'periodSeconds': 2, 'successThreshold': 1, 'failureThreshold': 105}, 'lifecycle': {'postStart': {'exec': {'command': ['bash', '-c', 'set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it\\'s likely that \\'aws-node\\' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a \\'postStart\\' hook since this may need to run\\n# for nodes which might have already been init\\'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \"$(iptables-save | grep -E -c \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\')\" != \"0\" ]];\\nthen\\n echo \\'Deleting iptables rules created by the AWS CNI VPC plugin\\'\\n iptables-save | grep -E -v \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\' | iptables-restore\\nfi\\necho \\'Done!\\'\\n']}}, 'preStop': {'exec': {'command': ['/cni-uninstall.sh']}}}, 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['CHOWN', 'KILL', 'NET_ADMIN', 'NET_RAW', 'IPC_LOCK', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE', 'DAC_OVERRIDE', 'FOWNER', 'SETGID', 'SETUID'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}], 'restartPolicy': 'Always', 'terminationGracePeriodSeconds': 1, 'dnsPolicy': 'ClusterFirst', 'nodeSelector': {'kubernetes.io/os': 'linux'}, 'serviceAccountName': 'cilium', 'serviceAccount': 'cilium', 'automountServiceAccountToken': True, 'nodeName': 'controller-3', 'hostNetwork': True, 'securityContext': {}, 'affinity': {'nodeAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': {'nodeSelectorTerms': [{'matchFields': [{'key': 'metadata.name', 'operator': 'In', 'values': ['controller-3']}]}]}}, 'podAntiAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': [{'labelSelector': {'matchLabels': {'k8s-app': 'cilium'}}, 'topologyKey': 'kubernetes.io/hostname'}]}}, 'schedulerName': 'default-scheduler', 'tolerations': [{'operator': 'Exists'}, {'key': 'node.kubernetes.io/not-ready', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/unreachable', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/disk-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/memory-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/pid-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/unschedulable', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/network-unavailable', 'operator': 'Exists', 'effect': 'NoSchedule'}], 'priorityClassName': 'system-node-critical', 'priority': 2000001000, 'enableServiceLinks': True, 'preemptionPolicy': 'PreemptLowerPriority'}, 'status': {'observedGeneration': 1, 'phase': 'Running', 'conditions': [{'type': 'PodReadyToStartContainers', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:16Z'}, {'type': 'Initialized', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:23Z'}, {'type': 'Ready', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:13Z'}, {'type': 'ContainersReady', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:13Z'}, {'type': 'PodScheduled', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:07Z'}], 'hostIP': '199.19.213.235', 'hostIPs': [{'ip': '199.19.213.235'}], 'podIP': '199.19.213.235', 'podIPs': [{'ip': '199.19.213.235'}], 'startTime': '2026-03-17T16:07:07Z', 'initContainerStatuses': [{'name': 'config', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:16Z', 'finishedAt': '2026-03-17T16:07:16Z', 'containerID': 'containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-cgroup', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:18Z', 'finishedAt': '2026-03-17T16:07:18Z', 'containerID': 'containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'apply-sysctl-overwrites', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:19Z', 'finishedAt': '2026-03-17T16:07:19Z', 'containerID': 'containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-bpf-fs', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:20Z', 'finishedAt': '2026-03-17T16:07:20Z', 'containerID': 'containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'clean-cilium-state', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:21Z', 'finishedAt': '2026-03-17T16:07:21Z', 'containerID': 'containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'install-cni-binaries', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:22Z', 'finishedAt': '2026-03-17T16:07:22Z', 'containerID': 'containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898', 'started': False, 'allocatedResources': {'cpu': '100m', 'memory': '10Mi'}, 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'containerStatuses': [{'name': 'cilium-agent', 'state': {'running': {'startedAt': '2026-03-17T16:07:23Z'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://572e5b5bc6513797dde50f76a0e808465fc158abfbcae1a1d4e215ba63571b4d', 'started': True, 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'mountPath': '/var/lib/cilium/clustermesh', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'lib-modules', 'mountPath': '/lib/modules', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'qosClass': 'Burstable'}, 'apiVersion': 'v1', 'kind': 'Pod'}) => {\n \"ansible_loop_var\": \"item\",\n \"changed\": false,\n \"item\": {\n \"apiVersion\": \"v1\",\n \"kind\": \"Pod\",\n \"metadata\": {\n \"annotations\": {\n \"container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/cilium-agent\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/mount-cgroup\": \"unconfined\"\n },\n \"creationTimestamp\": \"2026-03-17T16:07:07Z\",\n \"generateName\": \"cilium-\",\n \"generation\": 1,\n \"labels\": {\n \"app.kubernetes.io/name\": \"cilium-agent\",\n \"app.kubernetes.io/part-of\": \"cilium\",\n \"controller-revision-hash\": \"f8b6c767c\",\n \"k8s-app\": \"cilium\",\n \"pod-template-generation\": \"1\"\n },\n \"managedFields\": [\n {\n \"apiVersion\": \"v1\",\n \"fieldsType\": \"FieldsV1\",\n \"fieldsV1\": {\n \"f:metadata\": {\n \"f:annotations\": {\n \".\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/cilium-agent\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/mount-cgroup\": {}\n },\n \"f:generateName\": {},\n \"f:labels\": {\n \".\": {},\n \"f:app.kubernetes.io/name\": {},\n \"f:app.kubernetes.io/part-of\": {},\n \"f:controller-revision-hash\": {},\n \"f:k8s-app\": {},\n \"f:pod-template-generation\": {}\n },\n \"f:ownerReferences\": {\n \".\": {},\n \"k:{\\\"uid\\\":\\\"d9698def-91cb-4d80-b757-fcff33e36771\\\"}\": {}\n }\n },\n \"f:spec\": {\n \"f:affinity\": {\n \".\": {},\n \"f:nodeAffinity\": {\n \".\": {},\n \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}\n },\n \"f:podAntiAffinity\": {\n \".\": {},\n \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}\n }\n },\n \"f:automountServiceAccountToken\": {},\n \"f:containers\": {\n \"k:{\\\"name\\\":\\\"cilium-agent\\\"}\": {\n \".\": {},\n \"f:args\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_CLUSTERMESH_CONFIG\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n },\n \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:lifecycle\": {\n \".\": {},\n \"f:postStart\": {\n \".\": {},\n \"f:exec\": {\n \".\": {},\n \"f:command\": {}\n }\n },\n \"f:preStop\": {\n \".\": {},\n \"f:exec\": {\n \".\": {},\n \"f:command\": {}\n }\n }\n },\n \"f:livenessProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:name\": {},\n \"f:readinessProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:startupProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/host/etc/cni/net.d\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/kernel\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/net\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/lib/modules\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {},\n \"f:readOnly\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/run/xtables.lock\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/lib/cilium/clustermesh\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {},\n \"f:readOnly\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n }\n },\n \"f:dnsPolicy\": {},\n \"f:enableServiceLinks\": {},\n \"f:hostNetwork\": {},\n \"f:initContainers\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"apply-sysctl-overwrites\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"clean-cilium-state\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_ALL_STATE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:configMapKeyRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"CILIUM_BPF_STATE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:configMapKeyRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/run/cilium/cgroupv2\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"config\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"install-cni-binaries\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {\n \".\": {},\n \"f:requests\": {\n \".\": {},\n \"f:cpu\": {},\n \"f:memory\": {}\n }\n },\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/host/opt/cni/bin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"mount-bpf-fs\\\"}\": {\n \".\": {},\n \"f:args\": {},\n \"f:command\": {},\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:privileged\": {}\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"mount-cgroup\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n },\n \"k:{\\\"name\\\":\\\"CGROUP_ROOT\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n }\n },\n \"f:nodeSelector\": {},\n \"f:priorityClassName\": {},\n \"f:restartPolicy\": {},\n \"f:schedulerName\": {},\n \"f:securityContext\": {},\n \"f:serviceAccount\": {},\n \"f:serviceAccountName\": {},\n \"f:terminationGracePeriodSeconds\": {},\n \"f:tolerations\": {},\n \"f:volumes\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"bpf-maps\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"cilium-cgroup\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"cilium-run\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"clustermesh-secrets\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:projected\": {\n \".\": {},\n \"f:defaultMode\": {},\n \"f:sources\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"cni-path\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"etc-cni-netd\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"host-proc-sys-kernel\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"host-proc-sys-net\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"hostproc\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"lib-modules\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"tmp\\\"}\": {\n \".\": {},\n \"f:emptyDir\": {},\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"xtables-lock\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n }\n }\n }\n },\n \"manager\": \"kube-controller-manager\",\n \"operation\": \"Update\",\n \"time\": \"2026-03-17T16:07:07Z\"\n },\n {\n \"apiVersion\": \"v1\",\n \"fieldsType\": \"FieldsV1\",\n \"fieldsV1\": {\n \"f:status\": {\n \"f:conditions\": {\n \"k:{\\\"type\\\":\\\"ContainersReady\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"Initialized\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"PodReadyToStartContainers\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"PodScheduled\\\"}\": {\n \"f:observedGeneration\": {}\n },\n \"k:{\\\"type\\\":\\\"Ready\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n }\n },\n \"f:containerStatuses\": {},\n \"f:hostIP\": {},\n \"f:hostIPs\": {},\n \"f:initContainerStatuses\": {},\n \"f:observedGeneration\": {},\n \"f:phase\": {},\n \"f:podIP\": {},\n \"f:podIPs\": {\n \".\": {},\n \"k:{\\\"ip\\\":\\\"199.19.213.235\\\"}\": {\n \".\": {},\n \"f:ip\": {}\n }\n },\n \"f:startTime\": {}\n }\n },\n \"manager\": \"kubelet\",\n \"operation\": \"Update\",\n \"subresource\": \"status\",\n \"time\": \"2026-03-17T16:19:36Z\"\n }\n ],\n \"name\": \"cilium-kl6qt\",\n \"namespace\": \"kube-system\",\n \"ownerReferences\": [\n {\n \"apiVersion\": \"apps/v1\",\n \"blockOwnerDeletion\": true,\n \"controller\": true,\n \"kind\": \"DaemonSet\",\n \"name\": \"cilium\",\n \"uid\": \"d9698def-91cb-4d80-b757-fcff33e36771\"\n }\n ],\n \"resourceVersion\": \"4789\",\n \"uid\": \"07358b1c-f861-47f5-97d9-e53ccc91588a\"\n },\n \"spec\": {\n \"affinity\": {\n \"nodeAffinity\": {\n \"requiredDuringSchedulingIgnoredDuringExecution\": {\n \"nodeSelectorTerms\": [\n {\n \"matchFields\": [\n {\n \"key\": \"metadata.name\",\n \"operator\": \"In\",\n \"values\": [\n \"controller-3\"\n ]\n }\n ]\n }\n ]\n }\n },\n \"podAntiAffinity\": {\n \"requiredDuringSchedulingIgnoredDuringExecution\": [\n {\n \"labelSelector\": {\n \"matchLabels\": {\n \"k8s-app\": \"cilium\"\n }\n },\n \"topologyKey\": \"kubernetes.io/hostname\"\n }\n ]\n }\n },\n \"automountServiceAccountToken\": true,\n \"containers\": [\n {\n \"args\": [\n \"--config-dir=/tmp/cilium/config-map\"\n ],\n \"command\": [\n \"cilium-agent\"\n ],\n \"env\": [\n {\n \"name\": \"K8S_NODE_NAME\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"spec.nodeName\"\n }\n }\n },\n {\n \"name\": \"CILIUM_K8S_NAMESPACE\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n }\n }\n },\n {\n \"name\": \"CILIUM_CLUSTERMESH_CONFIG\",\n \"value\": \"/var/lib/cilium/clustermesh/\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"lifecycle\": {\n \"postStart\": {\n \"exec\": {\n \"command\": [\n \"bash\",\n \"-c\",\n \"set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it's likely that 'aws-node' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a 'postStart' hook since this may need to run\\n# for nodes which might have already been init'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \\\"$(iptables-save | grep -E -c 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN')\\\" != \\\"0\\\" ]];\\nthen\\n echo 'Deleting iptables rules created by the AWS CNI VPC plugin'\\n iptables-save | grep -E -v 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN' | iptables-restore\\nfi\\necho 'Done!'\\n\"\n ]\n }\n },\n \"preStop\": {\n \"exec\": {\n \"command\": [\n \"/cni-uninstall.sh\"\n ]\n }\n }\n },\n \"livenessProbe\": {\n \"failureThreshold\": 10,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 30,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 5\n },\n \"name\": \"cilium-agent\",\n \"readinessProbe\": {\n \"failureThreshold\": 3,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 30,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 5\n },\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"CHOWN\",\n \"KILL\",\n \"NET_ADMIN\",\n \"NET_RAW\",\n \"IPC_LOCK\",\n \"SYS_MODULE\",\n \"SYS_ADMIN\",\n \"SYS_RESOURCE\",\n \"DAC_OVERRIDE\",\n \"FOWNER\",\n \"SETGID\",\n \"SETUID\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"startupProbe\": {\n \"failureThreshold\": 105,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 2,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 1\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/proc/sys/net\",\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"mountPath\": \"/host/proc/sys/kernel\",\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"mountPropagation\": \"HostToContainer\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/host/etc/cni/net.d\",\n \"name\": \"etc-cni-netd\"\n },\n {\n \"mountPath\": \"/var/lib/cilium/clustermesh\",\n \"name\": \"clustermesh-secrets\",\n \"readOnly\": true\n },\n {\n \"mountPath\": \"/lib/modules\",\n \"name\": \"lib-modules\",\n \"readOnly\": true\n },\n {\n \"mountPath\": \"/run/xtables.lock\",\n \"name\": \"xtables-lock\"\n },\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true\n }\n ]\n }\n ],\n \"dnsPolicy\": \"ClusterFirst\",\n \"enableServiceLinks\": true,\n \"hostNetwork\": true,\n \"initContainers\": [\n {\n \"command\": [\n \"cilium\",\n \"build-config\"\n ],\n \"env\": [\n {\n \"name\": \"K8S_NODE_NAME\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"spec.nodeName\"\n }\n }\n },\n {\n \"name\": \"CILIUM_K8S_NAMESPACE\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n }\n }\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"config\",\n \"resources\": {},\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"sh\",\n \"-ec\",\n \"cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-mount\\\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n\"\n ],\n \"env\": [\n {\n \"name\": \"CGROUP_ROOT\",\n \"value\": \"/run/cilium/cgroupv2\"\n },\n {\n \"name\": \"BIN_PATH\",\n \"value\": \"/opt/cni/bin\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"mount-cgroup\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"SYS_ADMIN\",\n \"SYS_CHROOT\",\n \"SYS_PTRACE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"sh\",\n \"-ec\",\n \"cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-sysctlfix\\\";\\nrm /hostbin/cilium-sysctlfix\\n\"\n ],\n \"env\": [\n {\n \"name\": \"BIN_PATH\",\n \"value\": \"/opt/cni/bin\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"apply-sysctl-overwrites\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"SYS_ADMIN\",\n \"SYS_CHROOT\",\n \"SYS_PTRACE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"args\": [\n \"mount | grep \\\"/sys/fs/bpf type bpf\\\" || mount -t bpf bpf /sys/fs/bpf\"\n ],\n \"command\": [\n \"/bin/bash\",\n \"-c\",\n \"--\"\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"mount-bpf-fs\",\n \"resources\": {},\n \"securityContext\": {\n \"privileged\": true\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"mountPropagation\": \"Bidirectional\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"/init-container.sh\"\n ],\n \"env\": [\n {\n \"name\": \"CILIUM_ALL_STATE\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"clean-cilium-state\",\n \"name\": \"cilium-config\",\n \"optional\": true\n }\n }\n },\n {\n \"name\": \"CILIUM_BPF_STATE\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"clean-cilium-bpf-state\",\n \"name\": \"cilium-config\",\n \"optional\": true\n }\n }\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"clean-cilium-state\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"NET_ADMIN\",\n \"SYS_MODULE\",\n \"SYS_ADMIN\",\n \"SYS_RESOURCE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/run/cilium/cgroupv2\",\n \"mountPropagation\": \"HostToContainer\",\n \"name\": \"cilium-cgroup\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"/install-plugin.sh\"\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"install-cni-binaries\",\n \"resources\": {\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n }\n },\n \"securityContext\": {\n \"capabilities\": {\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/opt/cni/bin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true\n }\n ]\n }\n ],\n \"nodeName\": \"controller-3\",\n \"nodeSelector\": {\n \"kubernetes.io/os\": \"linux\"\n },\n \"preemptionPolicy\": \"PreemptLowerPriority\",\n \"priority\": 2000001000,\n \"priorityClassName\": \"system-node-critical\",\n \"restartPolicy\": \"Always\",\n \"schedulerName\": \"default-scheduler\",\n \"securityContext\": {},\n \"serviceAccount\": \"cilium\",\n \"serviceAccountName\": \"cilium\",\n \"terminationGracePeriodSeconds\": 1,\n \"tolerations\": [\n {\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoExecute\",\n \"key\": \"node.kubernetes.io/not-ready\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoExecute\",\n \"key\": \"node.kubernetes.io/unreachable\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/disk-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/memory-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/pid-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/unschedulable\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/network-unavailable\",\n \"operator\": \"Exists\"\n }\n ],\n \"volumes\": [\n {\n \"emptyDir\": {},\n \"name\": \"tmp\"\n },\n {\n \"hostPath\": {\n \"path\": \"/var/run/cilium\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cilium-run\"\n },\n {\n \"hostPath\": {\n \"path\": \"/sys/fs/bpf\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"bpf-maps\"\n },\n {\n \"hostPath\": {\n \"path\": \"/proc\",\n \"type\": \"Directory\"\n },\n \"name\": \"hostproc\"\n },\n {\n \"hostPath\": {\n \"path\": \"/run/cilium/cgroupv2\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cilium-cgroup\"\n },\n {\n \"hostPath\": {\n \"path\": \"/opt/cni/bin\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cni-path\"\n },\n {\n \"hostPath\": {\n \"path\": \"/etc/cni/net.d\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"etc-cni-netd\"\n },\n {\n \"hostPath\": {\n \"path\": \"/lib/modules\",\n \"type\": \"\"\n },\n \"name\": \"lib-modules\"\n },\n {\n \"hostPath\": {\n \"path\": \"/run/xtables.lock\",\n \"type\": \"FileOrCreate\"\n },\n \"name\": \"xtables-lock\"\n },\n {\n \"name\": \"clustermesh-secrets\",\n \"projected\": {\n \"defaultMode\": 256,\n \"sources\": [\n {\n \"secret\": {\n \"name\": \"cilium-clustermesh\",\n \"optional\": true\n }\n },\n {\n \"secret\": {\n \"items\": [\n {\n \"key\": \"tls.key\",\n \"path\": \"common-etcd-client.key\"\n },\n {\n \"key\": \"tls.crt\",\n \"path\": \"common-etcd-client.crt\"\n },\n {\n \"key\": \"ca.crt\",\n \"path\": \"common-etcd-client-ca.crt\"\n }\n ],\n \"name\": \"clustermesh-apiserver-remote-cert\",\n \"optional\": true\n }\n }\n ]\n }\n },\n {\n \"hostPath\": {\n \"path\": \"/proc/sys/net\",\n \"type\": \"Directory\"\n },\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"hostPath\": {\n \"path\": \"/proc/sys/kernel\",\n \"type\": \"Directory\"\n },\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"name\": \"kube-api-access-qkzsr\",\n \"projected\": {\n \"defaultMode\": 420,\n \"sources\": [\n {\n \"serviceAccountToken\": {\n \"expirationSeconds\": 3607,\n \"path\": \"token\"\n }\n },\n {\n \"configMap\": {\n \"items\": [\n {\n \"key\": \"ca.crt\",\n \"path\": \"ca.crt\"\n }\n ],\n \"name\": \"kube-root-ca.crt\"\n }\n },\n {\n \"downwardAPI\": {\n \"items\": [\n {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n },\n \"path\": \"namespace\"\n }\n ]\n }\n }\n ]\n }\n }\n ]\n },\n \"status\": {\n \"conditions\": [\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:16Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"PodReadyToStartContainers\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:23Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"Initialized\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:19:13Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"Ready\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:19:13Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"ContainersReady\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:07Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"PodScheduled\"\n }\n ],\n \"containerStatuses\": [\n {\n \"containerID\": \"containerd://572e5b5bc6513797dde50f76a0e808465fc158abfbcae1a1d4e215ba63571b4d\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"cilium-agent\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": true,\n \"state\": {\n \"running\": {\n \"startedAt\": \"2026-03-17T16:07:23Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/proc/sys/net\",\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"mountPath\": \"/host/proc/sys/kernel\",\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/host/etc/cni/net.d\",\n \"name\": \"etc-cni-netd\"\n },\n {\n \"mountPath\": \"/var/lib/cilium/clustermesh\",\n \"name\": \"clustermesh-secrets\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n },\n {\n \"mountPath\": \"/lib/modules\",\n \"name\": \"lib-modules\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n },\n {\n \"mountPath\": \"/run/xtables.lock\",\n \"name\": \"xtables-lock\"\n },\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n }\n ],\n \"hostIP\": \"199.19.213.235\",\n \"hostIPs\": [\n {\n \"ip\": \"199.19.213.235\"\n }\n ],\n \"initContainerStatuses\": [\n {\n \"containerID\": \"containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"config\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:16Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:16Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"mount-cgroup\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:18Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:18Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"apply-sysctl-overwrites\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:19Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:19Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"mount-bpf-fs\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:20Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:20Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"clean-cilium-state\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:21Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:21Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/run/cilium/cgroupv2\",\n \"name\": \"cilium-cgroup\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"allocatedResources\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n },\n \"containerID\": \"containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"install-cni-binaries\",\n \"ready\": true,\n \"resources\": {\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n }\n },\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:22Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:22Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/opt/cni/bin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-qkzsr\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n }\n ],\n \"observedGeneration\": 1,\n \"phase\": \"Running\",\n \"podIP\": \"199.19.213.235\",\n \"podIPs\": [\n {\n \"ip\": \"199.19.213.235\"\n }\n ],\n \"qosClass\": \"Burstable\",\n \"startTime\": \"2026-03-17T16:07:07Z\"\n }\n },\n \"msg\": \"Cilium pods have not been restarted\"\n}\nok: [controller-1] => (item={'metadata': {'name': 'cilium-qwc95', 'generateName': 'cilium-', 'namespace': 'kube-system', 'uid': 'baebf6dc-4b2b-4168-9c81-713c5a477011', 'resourceVersion': '4467', 'generation': 1, 'creationTimestamp': '2026-03-17T16:07:07Z', 'labels': {'app.kubernetes.io/name': 'cilium-agent', 'app.kubernetes.io/part-of': 'cilium', 'controller-revision-hash': 'f8b6c767c', 'k8s-app': 'cilium', 'pod-template-generation': '1'}, 'annotations': {'container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/cilium-agent': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/clean-cilium-state': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/mount-cgroup': 'unconfined'}, 'ownerReferences': [{'apiVersion': 'apps/v1', 'kind': 'DaemonSet', 'name': 'cilium', 'uid': 'd9698def-91cb-4d80-b757-fcff33e36771', 'controller': True, 'blockOwnerDeletion': True}], 'managedFields': [{'manager': 'kube-controller-manager', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:07:07Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:metadata': {'f:annotations': {'.': {}, 'f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': {}, 'f:container.apparmor.security.beta.kubernetes.io/cilium-agent': {}, 'f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state': {}, 'f:container.apparmor.security.beta.kubernetes.io/mount-cgroup': {}}, 'f:generateName': {}, 'f:labels': {'.': {}, 'f:app.kubernetes.io/name': {}, 'f:app.kubernetes.io/part-of': {}, 'f:controller-revision-hash': {}, 'f:k8s-app': {}, 'f:pod-template-generation': {}}, 'f:ownerReferences': {'.': {}, 'k:{\"uid\":\"d9698def-91cb-4d80-b757-fcff33e36771\"}': {}}}, 'f:spec': {'f:affinity': {'.': {}, 'f:nodeAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}, 'f:podAntiAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}}, 'f:automountServiceAccountToken': {}, 'f:containers': {'k:{\"name\":\"cilium-agent\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_CLUSTERMESH_CONFIG\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:lifecycle': {'.': {}, 'f:postStart': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}, 'f:preStop': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}}, 'f:livenessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:name': {}, 'f:readinessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:startupProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/etc/cni/net.d\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/kernel\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/net\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/lib/modules\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/run/xtables.lock\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/lib/cilium/clustermesh\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:dnsPolicy': {}, 'f:enableServiceLinks': {}, 'f:hostNetwork': {}, 'f:initContainers': {'.': {}, 'k:{\"name\":\"apply-sysctl-overwrites\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"clean-cilium-state\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_ALL_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}, 'k:{\"name\":\"CILIUM_BPF_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/run/cilium/cgroupv2\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"config\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"install-cni-binaries\"}': {'.': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {'.': {}, 'f:requests': {'.': {}, 'f:cpu': {}, 'f:memory': {}}}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/opt/cni/bin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-bpf-fs\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:privileged': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-cgroup\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CGROUP_ROOT\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:nodeSelector': {}, 'f:priorityClassName': {}, 'f:restartPolicy': {}, 'f:schedulerName': {}, 'f:securityContext': {}, 'f:serviceAccount': {}, 'f:serviceAccountName': {}, 'f:terminationGracePeriodSeconds': {}, 'f:tolerations': {}, 'f:volumes': {'.': {}, 'k:{\"name\":\"bpf-maps\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-cgroup\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-run\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"clustermesh-secrets\"}': {'.': {}, 'f:name': {}, 'f:projected': {'.': {}, 'f:defaultMode': {}, 'f:sources': {}}}, 'k:{\"name\":\"cni-path\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"etc-cni-netd\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-kernel\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-net\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"hostproc\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"lib-modules\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"tmp\"}': {'.': {}, 'f:emptyDir': {}, 'f:name': {}}, 'k:{\"name\":\"xtables-lock\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}}}}}, {'manager': 'kubelet', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:19:05Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:status': {'f:conditions': {'k:{\"type\":\"ContainersReady\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"Initialized\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodReadyToStartContainers\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodScheduled\"}': {'f:observedGeneration': {}}, 'k:{\"type\":\"Ready\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}}, 'f:containerStatuses': {}, 'f:hostIP': {}, 'f:hostIPs': {}, 'f:initContainerStatuses': {}, 'f:observedGeneration': {}, 'f:phase': {}, 'f:podIP': {}, 'f:podIPs': {'.': {}, 'k:{\"ip\":\"199.19.213.74\"}': {'.': {}, 'f:ip': {}}}, 'f:startTime': {}}}, 'subresource': 'status'}]}, 'spec': {'volumes': [{'name': 'tmp', 'emptyDir': {}}, {'name': 'cilium-run', 'hostPath': {'path': '/var/run/cilium', 'type': 'DirectoryOrCreate'}}, {'name': 'bpf-maps', 'hostPath': {'path': '/sys/fs/bpf', 'type': 'DirectoryOrCreate'}}, {'name': 'hostproc', 'hostPath': {'path': '/proc', 'type': 'Directory'}}, {'name': 'cilium-cgroup', 'hostPath': {'path': '/run/cilium/cgroupv2', 'type': 'DirectoryOrCreate'}}, {'name': 'cni-path', 'hostPath': {'path': '/opt/cni/bin', 'type': 'DirectoryOrCreate'}}, {'name': 'etc-cni-netd', 'hostPath': {'path': '/etc/cni/net.d', 'type': 'DirectoryOrCreate'}}, {'name': 'lib-modules', 'hostPath': {'path': '/lib/modules', 'type': ''}}, {'name': 'xtables-lock', 'hostPath': {'path': '/run/xtables.lock', 'type': 'FileOrCreate'}}, {'name': 'clustermesh-secrets', 'projected': {'sources': [{'secret': {'name': 'cilium-clustermesh', 'optional': True}}, {'secret': {'name': 'clustermesh-apiserver-remote-cert', 'items': [{'key': 'tls.key', 'path': 'common-etcd-client.key'}, {'key': 'tls.crt', 'path': 'common-etcd-client.crt'}, {'key': 'ca.crt', 'path': 'common-etcd-client-ca.crt'}], 'optional': True}}], 'defaultMode': 256}}, {'name': 'host-proc-sys-net', 'hostPath': {'path': '/proc/sys/net', 'type': 'Directory'}}, {'name': 'host-proc-sys-kernel', 'hostPath': {'path': '/proc/sys/kernel', 'type': 'Directory'}}, {'name': 'kube-api-access-dz2nk', 'projected': {'sources': [{'serviceAccountToken': {'expirationSeconds': 3607, 'path': 'token'}}, {'configMap': {'name': 'kube-root-ca.crt', 'items': [{'key': 'ca.crt', 'path': 'ca.crt'}]}}, {'downwardAPI': {'items': [{'path': 'namespace', 'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}]}}], 'defaultMode': 420}}], 'initContainers': [{'name': 'config', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium', 'build-config'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}], 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent'}, {'name': 'mount-cgroup', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-mount\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n'], 'env': [{'name': 'CGROUP_ROOT', 'value': '/run/cilium/cgroupv2'}, {'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'apply-sysctl-overwrites', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-sysctlfix\";\\nrm /hostbin/cilium-sysctlfix\\n'], 'env': [{'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'mount-bpf-fs', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/bin/bash', '-c', '--'], 'args': ['mount | grep \"/sys/fs/bpf type bpf\" || mount -t bpf bpf /sys/fs/bpf'], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'Bidirectional'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'privileged': True}}, {'name': 'clean-cilium-state', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/init-container.sh'], 'env': [{'name': 'CILIUM_ALL_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-state', 'optional': True}}}, {'name': 'CILIUM_BPF_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-bpf-state', 'optional': True}}}], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['NET_ADMIN', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'install-cni-binaries', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/install-plugin.sh'], 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}}}], 'containers': [{'name': 'cilium-agent', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium-agent'], 'args': ['--config-dir=/tmp/cilium/config-map'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}, {'name': 'CILIUM_CLUSTERMESH_CONFIG', 'value': '/var/lib/cilium/clustermesh/'}], 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'readOnly': True, 'mountPath': '/var/lib/cilium/clustermesh'}, {'name': 'lib-modules', 'readOnly': True, 'mountPath': '/lib/modules'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'livenessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 10}, 'readinessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 3}, 'startupProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 1, 'periodSeconds': 2, 'successThreshold': 1, 'failureThreshold': 105}, 'lifecycle': {'postStart': {'exec': {'command': ['bash', '-c', 'set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it\\'s likely that \\'aws-node\\' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a \\'postStart\\' hook since this may need to run\\n# for nodes which might have already been init\\'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \"$(iptables-save | grep -E -c \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\')\" != \"0\" ]];\\nthen\\n echo \\'Deleting iptables rules created by the AWS CNI VPC plugin\\'\\n iptables-save | grep -E -v \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\' | iptables-restore\\nfi\\necho \\'Done!\\'\\n']}}, 'preStop': {'exec': {'command': ['/cni-uninstall.sh']}}}, 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['CHOWN', 'KILL', 'NET_ADMIN', 'NET_RAW', 'IPC_LOCK', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE', 'DAC_OVERRIDE', 'FOWNER', 'SETGID', 'SETUID'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}], 'restartPolicy': 'Always', 'terminationGracePeriodSeconds': 1, 'dnsPolicy': 'ClusterFirst', 'nodeSelector': {'kubernetes.io/os': 'linux'}, 'serviceAccountName': 'cilium', 'serviceAccount': 'cilium', 'automountServiceAccountToken': True, 'nodeName': 'controller-1', 'hostNetwork': True, 'securityContext': {}, 'affinity': {'nodeAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': {'nodeSelectorTerms': [{'matchFields': [{'key': 'metadata.name', 'operator': 'In', 'values': ['controller-1']}]}]}}, 'podAntiAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': [{'labelSelector': {'matchLabels': {'k8s-app': 'cilium'}}, 'topologyKey': 'kubernetes.io/hostname'}]}}, 'schedulerName': 'default-scheduler', 'tolerations': [{'operator': 'Exists'}, {'key': 'node.kubernetes.io/not-ready', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/unreachable', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/disk-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/memory-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/pid-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/unschedulable', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/network-unavailable', 'operator': 'Exists', 'effect': 'NoSchedule'}], 'priorityClassName': 'system-node-critical', 'priority': 2000001000, 'enableServiceLinks': True, 'preemptionPolicy': 'PreemptLowerPriority'}, 'status': {'observedGeneration': 1, 'phase': 'Running', 'conditions': [{'type': 'PodReadyToStartContainers', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:17Z'}, {'type': 'Initialized', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:25Z'}, {'type': 'Ready', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:18:40Z'}, {'type': 'ContainersReady', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:18:40Z'}, {'type': 'PodScheduled', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:07Z'}], 'hostIP': '199.19.213.74', 'hostIPs': [{'ip': '199.19.213.74'}], 'podIP': '199.19.213.74', 'podIPs': [{'ip': '199.19.213.74'}], 'startTime': '2026-03-17T16:07:07Z', 'initContainerStatuses': [{'name': 'config', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:17Z', 'finishedAt': '2026-03-17T16:07:17Z', 'containerID': 'containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-cgroup', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:21Z', 'finishedAt': '2026-03-17T16:07:21Z', 'containerID': 'containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'apply-sysctl-overwrites', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:22Z', 'finishedAt': '2026-03-17T16:07:22Z', 'containerID': 'containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-bpf-fs', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:23Z', 'finishedAt': '2026-03-17T16:07:23Z', 'containerID': 'containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'clean-cilium-state', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:24Z', 'finishedAt': '2026-03-17T16:07:24Z', 'containerID': 'containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'install-cni-binaries', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:25Z', 'finishedAt': '2026-03-17T16:07:25Z', 'containerID': 'containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9', 'started': False, 'allocatedResources': {'cpu': '100m', 'memory': '10Mi'}, 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'containerStatuses': [{'name': 'cilium-agent', 'state': {'running': {'startedAt': '2026-03-17T16:07:26Z'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://1e0d632bfe9cc6f346ad09991702d5841509c52bfccc6b09f6a288da0efd9c4f', 'started': True, 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'mountPath': '/var/lib/cilium/clustermesh', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'lib-modules', 'mountPath': '/lib/modules', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'qosClass': 'Burstable'}, 'apiVersion': 'v1', 'kind': 'Pod'}) => {\n \"ansible_loop_var\": \"item\",\n \"changed\": false,\n \"item\": {\n \"apiVersion\": \"v1\",\n \"kind\": \"Pod\",\n \"metadata\": {\n \"annotations\": {\n \"container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/cilium-agent\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": \"unconfined\",\n \"container.apparmor.security.beta.kubernetes.io/mount-cgroup\": \"unconfined\"\n },\n \"creationTimestamp\": \"2026-03-17T16:07:07Z\",\n \"generateName\": \"cilium-\",\n \"generation\": 1,\n \"labels\": {\n \"app.kubernetes.io/name\": \"cilium-agent\",\n \"app.kubernetes.io/part-of\": \"cilium\",\n \"controller-revision-hash\": \"f8b6c767c\",\n \"k8s-app\": \"cilium\",\n \"pod-template-generation\": \"1\"\n },\n \"managedFields\": [\n {\n \"apiVersion\": \"v1\",\n \"fieldsType\": \"FieldsV1\",\n \"fieldsV1\": {\n \"f:metadata\": {\n \"f:annotations\": {\n \".\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/cilium-agent\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": {},\n \"f:container.apparmor.security.beta.kubernetes.io/mount-cgroup\": {}\n },\n \"f:generateName\": {},\n \"f:labels\": {\n \".\": {},\n \"f:app.kubernetes.io/name\": {},\n \"f:app.kubernetes.io/part-of\": {},\n \"f:controller-revision-hash\": {},\n \"f:k8s-app\": {},\n \"f:pod-template-generation\": {}\n },\n \"f:ownerReferences\": {\n \".\": {},\n \"k:{\\\"uid\\\":\\\"d9698def-91cb-4d80-b757-fcff33e36771\\\"}\": {}\n }\n },\n \"f:spec\": {\n \"f:affinity\": {\n \".\": {},\n \"f:nodeAffinity\": {\n \".\": {},\n \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}\n },\n \"f:podAntiAffinity\": {\n \".\": {},\n \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}\n }\n },\n \"f:automountServiceAccountToken\": {},\n \"f:containers\": {\n \"k:{\\\"name\\\":\\\"cilium-agent\\\"}\": {\n \".\": {},\n \"f:args\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_CLUSTERMESH_CONFIG\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n },\n \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:lifecycle\": {\n \".\": {},\n \"f:postStart\": {\n \".\": {},\n \"f:exec\": {\n \".\": {},\n \"f:command\": {}\n }\n },\n \"f:preStop\": {\n \".\": {},\n \"f:exec\": {\n \".\": {},\n \"f:command\": {}\n }\n }\n },\n \"f:livenessProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:name\": {},\n \"f:readinessProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:startupProbe\": {\n \".\": {},\n \"f:failureThreshold\": {},\n \"f:httpGet\": {\n \".\": {},\n \"f:host\": {},\n \"f:httpHeaders\": {},\n \"f:path\": {},\n \"f:port\": {},\n \"f:scheme\": {}\n },\n \"f:periodSeconds\": {},\n \"f:successThreshold\": {},\n \"f:timeoutSeconds\": {}\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/host/etc/cni/net.d\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/kernel\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/net\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/lib/modules\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {},\n \"f:readOnly\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/run/xtables.lock\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/lib/cilium/clustermesh\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {},\n \"f:readOnly\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n }\n },\n \"f:dnsPolicy\": {},\n \"f:enableServiceLinks\": {},\n \"f:hostNetwork\": {},\n \"f:initContainers\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"apply-sysctl-overwrites\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"clean-cilium-state\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_ALL_STATE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:configMapKeyRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"CILIUM_BPF_STATE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:configMapKeyRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/run/cilium/cgroupv2\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"config\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:valueFrom\": {\n \".\": {},\n \"f:fieldRef\": {}\n }\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"install-cni-binaries\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {\n \".\": {},\n \"f:requests\": {\n \".\": {},\n \"f:cpu\": {},\n \"f:memory\": {}\n }\n },\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/host/opt/cni/bin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"mount-bpf-fs\\\"}\": {\n \".\": {},\n \"f:args\": {},\n \"f:command\": {},\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:privileged\": {}\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:mountPropagation\": {},\n \"f:name\": {}\n }\n }\n },\n \"k:{\\\"name\\\":\\\"mount-cgroup\\\"}\": {\n \".\": {},\n \"f:command\": {},\n \"f:env\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n },\n \"k:{\\\"name\\\":\\\"CGROUP_ROOT\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:value\": {}\n }\n },\n \"f:image\": {},\n \"f:imagePullPolicy\": {},\n \"f:name\": {},\n \"f:resources\": {},\n \"f:securityContext\": {\n \".\": {},\n \"f:capabilities\": {\n \".\": {},\n \"f:add\": {},\n \"f:drop\": {}\n },\n \"f:seLinuxOptions\": {\n \".\": {},\n \"f:level\": {},\n \"f:type\": {}\n }\n },\n \"f:terminationMessagePath\": {},\n \"f:terminationMessagePolicy\": {},\n \"f:volumeMounts\": {\n \".\": {},\n \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n },\n \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {\n \".\": {},\n \"f:mountPath\": {},\n \"f:name\": {}\n }\n }\n }\n },\n \"f:nodeSelector\": {},\n \"f:priorityClassName\": {},\n \"f:restartPolicy\": {},\n \"f:schedulerName\": {},\n \"f:securityContext\": {},\n \"f:serviceAccount\": {},\n \"f:serviceAccountName\": {},\n \"f:terminationGracePeriodSeconds\": {},\n \"f:tolerations\": {},\n \"f:volumes\": {\n \".\": {},\n \"k:{\\\"name\\\":\\\"bpf-maps\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"cilium-cgroup\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"cilium-run\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"clustermesh-secrets\\\"}\": {\n \".\": {},\n \"f:name\": {},\n \"f:projected\": {\n \".\": {},\n \"f:defaultMode\": {},\n \"f:sources\": {}\n }\n },\n \"k:{\\\"name\\\":\\\"cni-path\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"etc-cni-netd\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"host-proc-sys-kernel\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"host-proc-sys-net\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"hostproc\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"lib-modules\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"tmp\\\"}\": {\n \".\": {},\n \"f:emptyDir\": {},\n \"f:name\": {}\n },\n \"k:{\\\"name\\\":\\\"xtables-lock\\\"}\": {\n \".\": {},\n \"f:hostPath\": {\n \".\": {},\n \"f:path\": {},\n \"f:type\": {}\n },\n \"f:name\": {}\n }\n }\n }\n },\n \"manager\": \"kube-controller-manager\",\n \"operation\": \"Update\",\n \"time\": \"2026-03-17T16:07:07Z\"\n },\n {\n \"apiVersion\": \"v1\",\n \"fieldsType\": \"FieldsV1\",\n \"fieldsV1\": {\n \"f:status\": {\n \"f:conditions\": {\n \"k:{\\\"type\\\":\\\"ContainersReady\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"Initialized\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"PodReadyToStartContainers\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n },\n \"k:{\\\"type\\\":\\\"PodScheduled\\\"}\": {\n \"f:observedGeneration\": {}\n },\n \"k:{\\\"type\\\":\\\"Ready\\\"}\": {\n \".\": {},\n \"f:lastProbeTime\": {},\n \"f:lastTransitionTime\": {},\n \"f:observedGeneration\": {},\n \"f:status\": {},\n \"f:type\": {}\n }\n },\n \"f:containerStatuses\": {},\n \"f:hostIP\": {},\n \"f:hostIPs\": {},\n \"f:initContainerStatuses\": {},\n \"f:observedGeneration\": {},\n \"f:phase\": {},\n \"f:podIP\": {},\n \"f:podIPs\": {\n \".\": {},\n \"k:{\\\"ip\\\":\\\"199.19.213.74\\\"}\": {\n \".\": {},\n \"f:ip\": {}\n }\n },\n \"f:startTime\": {}\n }\n },\n \"manager\": \"kubelet\",\n \"operation\": \"Update\",\n \"subresource\": \"status\",\n \"time\": \"2026-03-17T16:19:05Z\"\n }\n ],\n \"name\": \"cilium-qwc95\",\n \"namespace\": \"kube-system\",\n \"ownerReferences\": [\n {\n \"apiVersion\": \"apps/v1\",\n \"blockOwnerDeletion\": true,\n \"controller\": true,\n \"kind\": \"DaemonSet\",\n \"name\": \"cilium\",\n \"uid\": \"d9698def-91cb-4d80-b757-fcff33e36771\"\n }\n ],\n \"resourceVersion\": \"4467\",\n \"uid\": \"baebf6dc-4b2b-4168-9c81-713c5a477011\"\n },\n \"spec\": {\n \"affinity\": {\n \"nodeAffinity\": {\n \"requiredDuringSchedulingIgnoredDuringExecution\": {\n \"nodeSelectorTerms\": [\n {\n \"matchFields\": [\n {\n \"key\": \"metadata.name\",\n \"operator\": \"In\",\n \"values\": [\n \"controller-1\"\n ]\n }\n ]\n }\n ]\n }\n },\n \"podAntiAffinity\": {\n \"requiredDuringSchedulingIgnoredDuringExecution\": [\n {\n \"labelSelector\": {\n \"matchLabels\": {\n \"k8s-app\": \"cilium\"\n }\n },\n \"topologyKey\": \"kubernetes.io/hostname\"\n }\n ]\n }\n },\n \"automountServiceAccountToken\": true,\n \"containers\": [\n {\n \"args\": [\n \"--config-dir=/tmp/cilium/config-map\"\n ],\n \"command\": [\n \"cilium-agent\"\n ],\n \"env\": [\n {\n \"name\": \"K8S_NODE_NAME\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"spec.nodeName\"\n }\n }\n },\n {\n \"name\": \"CILIUM_K8S_NAMESPACE\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n }\n }\n },\n {\n \"name\": \"CILIUM_CLUSTERMESH_CONFIG\",\n \"value\": \"/var/lib/cilium/clustermesh/\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"lifecycle\": {\n \"postStart\": {\n \"exec\": {\n \"command\": [\n \"bash\",\n \"-c\",\n \"set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it's likely that 'aws-node' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a 'postStart' hook since this may need to run\\n# for nodes which might have already been init'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \\\"$(iptables-save | grep -E -c 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN')\\\" != \\\"0\\\" ]];\\nthen\\n echo 'Deleting iptables rules created by the AWS CNI VPC plugin'\\n iptables-save | grep -E -v 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN' | iptables-restore\\nfi\\necho 'Done!'\\n\"\n ]\n }\n },\n \"preStop\": {\n \"exec\": {\n \"command\": [\n \"/cni-uninstall.sh\"\n ]\n }\n }\n },\n \"livenessProbe\": {\n \"failureThreshold\": 10,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 30,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 5\n },\n \"name\": \"cilium-agent\",\n \"readinessProbe\": {\n \"failureThreshold\": 3,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 30,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 5\n },\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"CHOWN\",\n \"KILL\",\n \"NET_ADMIN\",\n \"NET_RAW\",\n \"IPC_LOCK\",\n \"SYS_MODULE\",\n \"SYS_ADMIN\",\n \"SYS_RESOURCE\",\n \"DAC_OVERRIDE\",\n \"FOWNER\",\n \"SETGID\",\n \"SETUID\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"startupProbe\": {\n \"failureThreshold\": 105,\n \"httpGet\": {\n \"host\": \"127.0.0.1\",\n \"httpHeaders\": [\n {\n \"name\": \"brief\",\n \"value\": \"true\"\n }\n ],\n \"path\": \"/healthz\",\n \"port\": 9879,\n \"scheme\": \"HTTP\"\n },\n \"periodSeconds\": 2,\n \"successThreshold\": 1,\n \"timeoutSeconds\": 1\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/proc/sys/net\",\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"mountPath\": \"/host/proc/sys/kernel\",\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"mountPropagation\": \"HostToContainer\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/host/etc/cni/net.d\",\n \"name\": \"etc-cni-netd\"\n },\n {\n \"mountPath\": \"/var/lib/cilium/clustermesh\",\n \"name\": \"clustermesh-secrets\",\n \"readOnly\": true\n },\n {\n \"mountPath\": \"/lib/modules\",\n \"name\": \"lib-modules\",\n \"readOnly\": true\n },\n {\n \"mountPath\": \"/run/xtables.lock\",\n \"name\": \"xtables-lock\"\n },\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true\n }\n ]\n }\n ],\n \"dnsPolicy\": \"ClusterFirst\",\n \"enableServiceLinks\": true,\n \"hostNetwork\": true,\n \"initContainers\": [\n {\n \"command\": [\n \"cilium\",\n \"build-config\"\n ],\n \"env\": [\n {\n \"name\": \"K8S_NODE_NAME\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"spec.nodeName\"\n }\n }\n },\n {\n \"name\": \"CILIUM_K8S_NAMESPACE\",\n \"valueFrom\": {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n }\n }\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"config\",\n \"resources\": {},\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"sh\",\n \"-ec\",\n \"cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-mount\\\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n\"\n ],\n \"env\": [\n {\n \"name\": \"CGROUP_ROOT\",\n \"value\": \"/run/cilium/cgroupv2\"\n },\n {\n \"name\": \"BIN_PATH\",\n \"value\": \"/opt/cni/bin\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"mount-cgroup\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"SYS_ADMIN\",\n \"SYS_CHROOT\",\n \"SYS_PTRACE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"sh\",\n \"-ec\",\n \"cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-sysctlfix\\\";\\nrm /hostbin/cilium-sysctlfix\\n\"\n ],\n \"env\": [\n {\n \"name\": \"BIN_PATH\",\n \"value\": \"/opt/cni/bin\"\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"apply-sysctl-overwrites\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"SYS_ADMIN\",\n \"SYS_CHROOT\",\n \"SYS_PTRACE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"args\": [\n \"mount | grep \\\"/sys/fs/bpf type bpf\\\" || mount -t bpf bpf /sys/fs/bpf\"\n ],\n \"command\": [\n \"/bin/bash\",\n \"-c\",\n \"--\"\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"mount-bpf-fs\",\n \"resources\": {},\n \"securityContext\": {\n \"privileged\": true\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"mountPropagation\": \"Bidirectional\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"/init-container.sh\"\n ],\n \"env\": [\n {\n \"name\": \"CILIUM_ALL_STATE\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"clean-cilium-state\",\n \"name\": \"cilium-config\",\n \"optional\": true\n }\n }\n },\n {\n \"name\": \"CILIUM_BPF_STATE\",\n \"valueFrom\": {\n \"configMapKeyRef\": {\n \"key\": \"clean-cilium-bpf-state\",\n \"name\": \"cilium-config\",\n \"optional\": true\n }\n }\n }\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"clean-cilium-state\",\n \"resources\": {},\n \"securityContext\": {\n \"appArmorProfile\": {\n \"type\": \"Unconfined\"\n },\n \"capabilities\": {\n \"add\": [\n \"NET_ADMIN\",\n \"SYS_MODULE\",\n \"SYS_ADMIN\",\n \"SYS_RESOURCE\"\n ],\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/run/cilium/cgroupv2\",\n \"mountPropagation\": \"HostToContainer\",\n \"name\": \"cilium-cgroup\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true\n }\n ]\n },\n {\n \"command\": [\n \"/install-plugin.sh\"\n ],\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imagePullPolicy\": \"IfNotPresent\",\n \"name\": \"install-cni-binaries\",\n \"resources\": {\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n }\n },\n \"securityContext\": {\n \"capabilities\": {\n \"drop\": [\n \"ALL\"\n ]\n },\n \"seLinuxOptions\": {\n \"level\": \"s0\",\n \"type\": \"spc_t\"\n }\n },\n \"terminationMessagePath\": \"/dev/termination-log\",\n \"terminationMessagePolicy\": \"FallbackToLogsOnError\",\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/opt/cni/bin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true\n }\n ]\n }\n ],\n \"nodeName\": \"controller-1\",\n \"nodeSelector\": {\n \"kubernetes.io/os\": \"linux\"\n },\n \"preemptionPolicy\": \"PreemptLowerPriority\",\n \"priority\": 2000001000,\n \"priorityClassName\": \"system-node-critical\",\n \"restartPolicy\": \"Always\",\n \"schedulerName\": \"default-scheduler\",\n \"securityContext\": {},\n \"serviceAccount\": \"cilium\",\n \"serviceAccountName\": \"cilium\",\n \"terminationGracePeriodSeconds\": 1,\n \"tolerations\": [\n {\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoExecute\",\n \"key\": \"node.kubernetes.io/not-ready\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoExecute\",\n \"key\": \"node.kubernetes.io/unreachable\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/disk-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/memory-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/pid-pressure\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/unschedulable\",\n \"operator\": \"Exists\"\n },\n {\n \"effect\": \"NoSchedule\",\n \"key\": \"node.kubernetes.io/network-unavailable\",\n \"operator\": \"Exists\"\n }\n ],\n \"volumes\": [\n {\n \"emptyDir\": {},\n \"name\": \"tmp\"\n },\n {\n \"hostPath\": {\n \"path\": \"/var/run/cilium\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cilium-run\"\n },\n {\n \"hostPath\": {\n \"path\": \"/sys/fs/bpf\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"bpf-maps\"\n },\n {\n \"hostPath\": {\n \"path\": \"/proc\",\n \"type\": \"Directory\"\n },\n \"name\": \"hostproc\"\n },\n {\n \"hostPath\": {\n \"path\": \"/run/cilium/cgroupv2\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cilium-cgroup\"\n },\n {\n \"hostPath\": {\n \"path\": \"/opt/cni/bin\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"cni-path\"\n },\n {\n \"hostPath\": {\n \"path\": \"/etc/cni/net.d\",\n \"type\": \"DirectoryOrCreate\"\n },\n \"name\": \"etc-cni-netd\"\n },\n {\n \"hostPath\": {\n \"path\": \"/lib/modules\",\n \"type\": \"\"\n },\n \"name\": \"lib-modules\"\n },\n {\n \"hostPath\": {\n \"path\": \"/run/xtables.lock\",\n \"type\": \"FileOrCreate\"\n },\n \"name\": \"xtables-lock\"\n },\n {\n \"name\": \"clustermesh-secrets\",\n \"projected\": {\n \"defaultMode\": 256,\n \"sources\": [\n {\n \"secret\": {\n \"name\": \"cilium-clustermesh\",\n \"optional\": true\n }\n },\n {\n \"secret\": {\n \"items\": [\n {\n \"key\": \"tls.key\",\n \"path\": \"common-etcd-client.key\"\n },\n {\n \"key\": \"tls.crt\",\n \"path\": \"common-etcd-client.crt\"\n },\n {\n \"key\": \"ca.crt\",\n \"path\": \"common-etcd-client-ca.crt\"\n }\n ],\n \"name\": \"clustermesh-apiserver-remote-cert\",\n \"optional\": true\n }\n }\n ]\n }\n },\n {\n \"hostPath\": {\n \"path\": \"/proc/sys/net\",\n \"type\": \"Directory\"\n },\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"hostPath\": {\n \"path\": \"/proc/sys/kernel\",\n \"type\": \"Directory\"\n },\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"name\": \"kube-api-access-dz2nk\",\n \"projected\": {\n \"defaultMode\": 420,\n \"sources\": [\n {\n \"serviceAccountToken\": {\n \"expirationSeconds\": 3607,\n \"path\": \"token\"\n }\n },\n {\n \"configMap\": {\n \"items\": [\n {\n \"key\": \"ca.crt\",\n \"path\": \"ca.crt\"\n }\n ],\n \"name\": \"kube-root-ca.crt\"\n }\n },\n {\n \"downwardAPI\": {\n \"items\": [\n {\n \"fieldRef\": {\n \"apiVersion\": \"v1\",\n \"fieldPath\": \"metadata.namespace\"\n },\n \"path\": \"namespace\"\n }\n ]\n }\n }\n ]\n }\n }\n ]\n },\n \"status\": {\n \"conditions\": [\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:17Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"PodReadyToStartContainers\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:25Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"Initialized\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:18:40Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"Ready\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:18:40Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"ContainersReady\"\n },\n {\n \"lastProbeTime\": null,\n \"lastTransitionTime\": \"2026-03-17T16:07:07Z\",\n \"observedGeneration\": 1,\n \"status\": \"True\",\n \"type\": \"PodScheduled\"\n }\n ],\n \"containerStatuses\": [\n {\n \"containerID\": \"containerd://1e0d632bfe9cc6f346ad09991702d5841509c52bfccc6b09f6a288da0efd9c4f\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"cilium-agent\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": true,\n \"state\": {\n \"running\": {\n \"startedAt\": \"2026-03-17T16:07:26Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/proc/sys/net\",\n \"name\": \"host-proc-sys-net\"\n },\n {\n \"mountPath\": \"/host/proc/sys/kernel\",\n \"name\": \"host-proc-sys-kernel\"\n },\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/host/etc/cni/net.d\",\n \"name\": \"etc-cni-netd\"\n },\n {\n \"mountPath\": \"/var/lib/cilium/clustermesh\",\n \"name\": \"clustermesh-secrets\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n },\n {\n \"mountPath\": \"/lib/modules\",\n \"name\": \"lib-modules\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n },\n {\n \"mountPath\": \"/run/xtables.lock\",\n \"name\": \"xtables-lock\"\n },\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n }\n ],\n \"hostIP\": \"199.19.213.74\",\n \"hostIPs\": [\n {\n \"ip\": \"199.19.213.74\"\n }\n ],\n \"initContainerStatuses\": [\n {\n \"containerID\": \"containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"config\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:17Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:17Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/tmp\",\n \"name\": \"tmp\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"mount-cgroup\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:21Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:21Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"apply-sysctl-overwrites\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:22Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:22Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/hostproc\",\n \"name\": \"hostproc\"\n },\n {\n \"mountPath\": \"/hostbin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"mount-bpf-fs\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:23Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:23Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"containerID\": \"containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"clean-cilium-state\",\n \"ready\": true,\n \"resources\": {},\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:24Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:24Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/sys/fs/bpf\",\n \"name\": \"bpf-maps\"\n },\n {\n \"mountPath\": \"/run/cilium/cgroupv2\",\n \"name\": \"cilium-cgroup\"\n },\n {\n \"mountPath\": \"/var/run/cilium\",\n \"name\": \"cilium-run\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n },\n {\n \"allocatedResources\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n },\n \"containerID\": \"containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9\",\n \"image\": \"quay.io/cilium/cilium:v1.14.8\",\n \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",\n \"lastState\": {},\n \"name\": \"install-cni-binaries\",\n \"ready\": true,\n \"resources\": {\n \"requests\": {\n \"cpu\": \"100m\",\n \"memory\": \"10Mi\"\n }\n },\n \"restartCount\": 0,\n \"started\": false,\n \"state\": {\n \"terminated\": {\n \"containerID\": \"containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9\",\n \"exitCode\": 0,\n \"finishedAt\": \"2026-03-17T16:07:25Z\",\n \"reason\": \"Completed\",\n \"startedAt\": \"2026-03-17T16:07:25Z\"\n }\n },\n \"user\": {\n \"linux\": {\n \"gid\": 0,\n \"supplementalGroups\": [\n 0\n ],\n \"uid\": 0\n }\n },\n \"volumeMounts\": [\n {\n \"mountPath\": \"/host/opt/cni/bin\",\n \"name\": \"cni-path\"\n },\n {\n \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",\n \"name\": \"kube-api-access-dz2nk\",\n \"readOnly\": true,\n \"recursiveReadOnly\": \"Disabled\"\n }\n ]\n }\n ],\n \"observedGeneration\": 1,\n \"phase\": \"Running\",\n \"podIP\": \"199.19.213.74\",\n \"podIPs\": [\n {\n \"ip\": \"199.19.213.74\"\n }\n ],\n \"qosClass\": \"Burstable\",\n \"startTime\": \"2026-03-17T16:07:07Z\"\n }\n },\n \"msg\": \"Cilium pods have not been restarted\"\n}\n\nPLAY RECAP *********************************************************************\ncontroller-1 : ok=3 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\ncontroller-2 : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\ncontroller-3 : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0\n\n\nTASKS RECAP ********************************************************************\nTuesday 17 March 2026 16:21:00 +0000 (0:00:00.531) 0:00:03.777 *********\n===============================================================================\nGathering Facts --------------------------------------------------------- 2.26s\nSearch for all Cilium pods ---------------------------------------------- 0.98s\nVerify Cilium operator pods have not been restarted --------------------- 0.53s\nINFO [cluster-upgrade > verify] Executed: Successful\nINFO [cluster-upgrade > cleanup] Executing\nWARNING [cluster-upgrade > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)\nINFO [cluster-upgrade > destroy] Executing\nWARNING [cluster-upgrade > destroy] Skipping, '--destroy=never' requested.\nINFO [cluster-upgrade > destroy] Executed: Successful\nWARNING Molecule executed 1 scenario (1 missing files)", "stdout_lines": [ "Using CPython 3.13.5 interpreter at: /usr/bin/python3", "Creating virtual environment at: .venv", "Downloading ansible-core (2.3MiB)", "Downloading pygments (1.2MiB)", "Downloading cryptography (4.3MiB)", " Downloading cryptography", " Downloading pygments", " Downloading ansible-core", "Installed 36 packages in 52ms", "INFO Collection 'vexxhost.kubernetes' detected.", "INFO Scenarios will be used from 'extensions/molecule'", "CRITICAL 'extensions/molecule/default/molecule.yml' glob failed. Exiting.", "INFO default scenario not found, disabling shared state.", "INFO [cluster-upgrade > discovery] scenario test matrix: dependency, cleanup, destroy, syntax, create, prepare, converge, idempotence, side_effect, verify, cleanup, destroy", "INFO [cluster-upgrade > prerun] Performing prerun with role_name_check=0...", "INFO [cluster-upgrade > dependency] Executing", "WARNING [cluster-upgrade > dependency] Missing roles requirements file: requirements.yml", "WARNING [cluster-upgrade > dependency] Missing collections requirements file: collections.yml", "WARNING [cluster-upgrade > dependency] Executed: 2 missing (Remove from test_sequence to suppress)", "INFO [cluster-upgrade > cleanup] Executing", "WARNING [cluster-upgrade > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [cluster-upgrade > destroy] Executing", "WARNING [cluster-upgrade > destroy] Skipping, '--destroy=never' requested.", "INFO [cluster-upgrade > destroy] Executed: Successful", "INFO [cluster-upgrade > syntax] Executing", "", "playbook: /home/zuul/src/github.com/vexxhost/ansible-collection-kubernetes/extensions/molecule/cluster-upgrade/converge.yml", "INFO [cluster-upgrade > syntax] Executed: Successful", "INFO [cluster-upgrade > create] Executing", "WARNING [cluster-upgrade > create] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [cluster-upgrade > prepare] Executing", "", "PLAY [Prepare] *****************************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:03:23 +0000 (0:00:00.034) 0:00:00.034 *********", "[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [Install Debian packages] *************************************************", "Tuesday 17 March 2026 16:03:24 +0000 (0:00:01.297) 0:00:01.332 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "PLAY [Configure Kubernetes VIP] ************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:03:30 +0000 (0:00:06.245) 0:00:07.577 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***", "Tuesday 17 March 2026 16:03:33 +0000 (0:00:02.831) 0:00:10.409 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************", "Tuesday 17 March 2026 16:03:34 +0000 (0:00:00.480) 0:00:10.889 *********", "ok: [controller-3] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-1] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-2] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-3] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-1] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-2] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-3] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-1] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-3] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-1] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-2] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-3] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "ok: [controller-1] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "", "TASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****", "Tuesday 17 March 2026 16:03:35 +0000 (0:00:01.502) 0:00:12.392 *********", "[ERROR]: Task failed: Module failed: Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3", "", "30 - Restart \"kubelet\" service", "31", "32 - name: Switch API server to run on port 6443", " ^ column 3", "", "failed: [controller-2] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}", "failed: [controller-3] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}", "failed: [controller-1] (item=/etc/kubernetes/manifests/kube-apiserver.yaml) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/manifests/kube-apiserver.yaml\", \"msg\": \"Path /etc/kubernetes/manifests/kube-apiserver.yaml does not exist !\", \"rc\": 257}", "[ERROR]: Task failed: Module failed: Path /etc/kubernetes/controller-manager.conf does not exist !", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3", "", "30 - Restart \"kubelet\" service", "31", "32 - name: Switch API server to run on port 6443", " ^ column 3", "", "failed: [controller-2] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}", "failed: [controller-3] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}", "failed: [controller-1] (item=/etc/kubernetes/controller-manager.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/controller-manager.conf\", \"msg\": \"Path /etc/kubernetes/controller-manager.conf does not exist !\", \"rc\": 257}", "[ERROR]: Task failed: Module failed: Path /etc/kubernetes/scheduler.conf does not exist !", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kube_vip/tasks/main.yml:32:3", "", "30 - Restart \"kubelet\" service", "31", "32 - name: Switch API server to run on port 6443", " ^ column 3", "", "failed: [controller-3] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}", "failed: [controller-2] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}", "failed: [controller-1] (item=/etc/kubernetes/scheduler.conf) => {\"ansible_loop_var\": \"item\", \"changed\": false, \"item\": \"/etc/kubernetes/scheduler.conf\", \"msg\": \"Path /etc/kubernetes/scheduler.conf does not exist !\", \"rc\": 257}", "...ignoring", "...ignoring", "...ignoring", "", "TASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********", "Tuesday 17 March 2026 16:03:36 +0000 (0:00:01.012) 0:00:13.404 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********", "Tuesday 17 March 2026 16:03:36 +0000 (0:00:00.422) 0:00:13.827 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************", "Tuesday 17 March 2026 16:03:37 +0000 (0:00:00.318) 0:00:14.145 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***", "Tuesday 17 March 2026 16:03:37 +0000 (0:00:00.056) 0:00:14.201 *********", "ok: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************", "Tuesday 17 March 2026 16:03:37 +0000 (0:00:00.063) 0:00:14.265 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******", "Tuesday 17 March 2026 16:03:38 +0000 (0:00:00.983) 0:00:15.248 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:03:38 +0000 (0:00:00.327) 0:00:15.576 *********", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:03:38 +0000 (0:00:00.005) 0:00:15.581 *********", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:03:38 +0000 (0:00:00.003) 0:00:15.584 *********", "", "PLAY [Install Kubernetes] ******************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:03:38 +0000 (0:00:00.061) 0:00:15.646 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:03:40 +0000 (0:00:01.857) 0:00:17.504 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:03:41 +0000 (0:00:00.439) 0:00:17.943 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Tuesday 17 March 2026 16:03:41 +0000 (0:00:00.091) 0:00:18.034 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:03:41 +0000 (0:00:00.388) 0:00:18.423 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:03:41 +0000 (0:00:00.108) 0:00:18.532 *********", "[WARNING]: Module remote_tmp /root/.ansible/tmp did not exist and was created with a mode of 0700, this may cause issues when running as another user. To avoid this, create the remote_tmp dir with the correct permissions manually", "changed: [controller-2]", "changed: [controller-3]", "changed: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:03:42 +0000 (0:00:00.988) 0:00:19.520 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:03:42 +0000 (0:00:00.111) 0:00:19.632 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:03:43 +0000 (0:00:00.383) 0:00:20.015 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:03:44 +0000 (0:00:01.253) 0:00:21.269 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:03:44 +0000 (0:00:00.117) 0:00:21.386 *********", "changed: [controller-3]", "changed: [controller-2]", "changed: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:03:45 +0000 (0:00:01.052) 0:00:22.438 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Tuesday 17 March 2026 16:03:48 +0000 (0:00:03.310) 0:00:25.748 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Tuesday 17 March 2026 16:03:48 +0000 (0:00:00.067) 0:00:25.816 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Tuesday 17 March 2026 16:03:49 +0000 (0:00:00.079) 0:00:25.896 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Tuesday 17 March 2026 16:03:49 +0000 (0:00:00.068) 0:00:25.965 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Tuesday 17 March 2026 16:03:55 +0000 (0:00:06.400) 0:00:32.366 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Tuesday 17 March 2026 16:03:56 +0000 (0:00:00.790) 0:00:33.156 *********", "changed: [controller-1] => (item={'path': '/etc/containerd'})", "changed: [controller-3] => (item={'path': '/etc/containerd'})", "changed: [controller-2] => (item={'path': '/etc/containerd'})", "changed: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "changed: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "changed: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "changed: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})", "changed: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})", "changed: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})", "changed: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "changed: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "changed: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "changed: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "changed: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "changed: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Tuesday 17 March 2026 16:03:57 +0000 (0:00:01.630) 0:00:34.787 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:03:58 +0000 (0:00:00.862) 0:00:35.649 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:03:58 +0000 (0:00:00.007) 0:00:35.657 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:03:58 +0000 (0:00:00.005) 0:00:35.662 *********", "", "RUNNING HANDLER [vexxhost.containers.containerd : Restart containerd] **********", "Tuesday 17 March 2026 16:03:58 +0000 (0:00:00.007) 0:00:35.670 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "RUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************", "Tuesday 17 March 2026 16:03:59 +0000 (0:00:00.936) 0:00:36.606 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Tuesday 17 March 2026 16:04:01 +0000 (0:00:01.823) 0:00:38.429 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***", "Tuesday 17 March 2026 16:04:02 +0000 (0:00:00.803) 0:00:39.233 *********", "[ERROR]: Task failed: Module failed: Failed to import the required Python library (kubernetes) on np0000159414's Python /usr/bin/python3.13. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes_upgrade_check/tasks/main.yml:16:3", "", "14", "15 ---", "16 - name: Retrieve the \"kubeadm-config\" ConfigMap", " ^ column 3", "", "fatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Failed to import the required Python library (kubernetes) on np0000159414's Python /usr/bin/python3.13. Please read the module documentation and install it in the appropriate location. If the required library is installed, but Ansible is using the wrong Python interpreter, please consult the documentation on ansible_python_interpreter\"}", "...ignoring", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.688) 0:00:39.921 *********", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.041) 0:00:39.963 *********", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.048) 0:00:40.011 *********", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.044) 0:00:40.055 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.066) 0:00:40.122 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.079) 0:00:40.201 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.357) 0:00:40.558 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubeadm\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubeadm\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubeadm\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:04:03 +0000 (0:00:00.069) 0:00:40.628 *********", "changed: [controller-2]", "changed: [controller-1]", "changed: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:04:04 +0000 (0:00:01.118) 0:00:41.746 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:04:04 +0000 (0:00:00.091) 0:00:41.838 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:04:05 +0000 (0:00:00.364) 0:00:42.202 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubectl\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubectl\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubectl\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:04:05 +0000 (0:00:00.091) 0:00:42.293 *********", "changed: [controller-2]", "changed: [controller-1]", "changed: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:04:06 +0000 (0:00:01.117) 0:00:43.411 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Tuesday 17 March 2026 16:04:06 +0000 (0:00:00.110) 0:00:43.522 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Tuesday 17 March 2026 16:04:06 +0000 (0:00:00.065) 0:00:43.587 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Tuesday 17 March 2026 16:04:06 +0000 (0:00:00.069) 0:00:43.656 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Tuesday 17 March 2026 16:04:06 +0000 (0:00:00.057) 0:00:43.714 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Tuesday 17 March 2026 16:04:07 +0000 (0:00:01.010) 0:00:44.724 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Tuesday 17 March 2026 16:04:08 +0000 (0:00:00.728) 0:00:45.452 *********", "ok: [controller-2] => (item={'path': '/etc/containerd'})", "ok: [controller-3] => (item={'path': '/etc/containerd'})", "ok: [controller-1] => (item={'path': '/etc/containerd'})", "ok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Tuesday 17 March 2026 16:04:10 +0000 (0:00:01.514) 0:00:46.967 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:04:10 +0000 (0:00:00.807) 0:00:47.775 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:04:10 +0000 (0:00:00.007) 0:00:47.782 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:04:10 +0000 (0:00:00.009) 0:00:47.792 *********", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Tuesday 17 March 2026 16:04:10 +0000 (0:00:00.006) 0:00:47.799 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:04:11 +0000 (0:00:00.557) 0:00:48.356 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:04:11 +0000 (0:00:00.382) 0:00:48.739 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:04:11 +0000 (0:00:00.109) 0:00:48.848 *********", "changed: [controller-3]", "changed: [controller-2]", "changed: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:04:12 +0000 (0:00:00.929) 0:00:49.777 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:04:14 +0000 (0:00:01.808) 0:00:51.585 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:04:14 +0000 (0:00:00.097) 0:00:51.683 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:04:15 +0000 (0:00:00.908) 0:00:52.591 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.containers.cri_tools : Create crictl config] ********************", "Tuesday 17 March 2026 16:04:17 +0000 (0:00:01.808) 0:00:54.399 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********", "Tuesday 17 March 2026 16:04:18 +0000 (0:00:00.785) 0:00:55.185 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:04:18 +0000 (0:00:00.389) 0:00:55.575 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:04:19 +0000 (0:00:00.380) 0:00:55.955 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:04:19 +0000 (0:00:00.102) 0:00:56.058 *********", "changed: [controller-3]", "changed: [controller-2]", "changed: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:04:20 +0000 (0:00:01.275) 0:00:57.333 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***", "Tuesday 17 March 2026 16:04:23 +0000 (0:00:03.156) 0:01:00.489 *********", "ok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "ok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "ok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "", "TASK [vexxhost.containers.cni_plugins : Install additional packages] ***********", "Tuesday 17 March 2026 16:04:23 +0000 (0:00:00.091) 0:01:00.581 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************", "Tuesday 17 March 2026 16:04:24 +0000 (0:00:01.020) 0:01:01.601 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********", "Tuesday 17 March 2026 16:04:25 +0000 (0:00:00.490) 0:01:02.091 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******", "Tuesday 17 March 2026 16:04:25 +0000 (0:00:00.766) 0:01:02.858 *********", "changed: [controller-1] => (item=br_netfilter)", "changed: [controller-2] => (item=br_netfilter)", "changed: [controller-3] => (item=br_netfilter)", "ok: [controller-2] => (item=ip_tables)", "ok: [controller-1] => (item=ip_tables)", "ok: [controller-3] => (item=ip_tables)", "changed: [controller-2] => (item=ip6_tables)", "changed: [controller-1] => (item=ip6_tables)", "changed: [controller-3] => (item=ip6_tables)", "changed: [controller-1] => (item=nf_conntrack)", "changed: [controller-2] => (item=nf_conntrack)", "changed: [controller-3] => (item=nf_conntrack)", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:04:27 +0000 (0:00:01.591) 0:01:04.449 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:04:27 +0000 (0:00:00.363) 0:01:04.813 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubelet\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubelet\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.33.4/bin/linux/amd64/kubelet\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:04:28 +0000 (0:00:00.086) 0:01:04.899 *********", "changed: [controller-2]", "changed: [controller-3]", "changed: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:04:29 +0000 (0:00:01.660) 0:01:06.560 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***", "Tuesday 17 March 2026 16:04:29 +0000 (0:00:00.085) 0:01:06.645 *********", "ok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "ok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "ok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "", "TASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************", "Tuesday 17 March 2026 16:04:29 +0000 (0:00:00.095) 0:01:06.741 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************", "Tuesday 17 March 2026 16:04:29 +0000 (0:00:00.069) 0:01:06.810 *********", "changed: [controller-3]", "changed: [controller-2]", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************", "Tuesday 17 March 2026 16:04:33 +0000 (0:00:03.409) 0:01:10.220 *********", "changed: [controller-1] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "changed: [controller-2] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "changed: [controller-3] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "changed: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "changed: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "changed: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "changed: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "changed: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "changed: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "changed: [controller-1] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "changed: [controller-2] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "changed: [controller-3] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "changed: [controller-2] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "changed: [controller-1] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "changed: [controller-3] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "changed: [controller-2] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "changed: [controller-1] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "changed: [controller-3] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "changed: [controller-2] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "changed: [controller-1] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "changed: [controller-3] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "", "TASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***", "Tuesday 17 March 2026 16:04:35 +0000 (0:00:02.436) 0:01:12.657 *********", "changed: [controller-1] => (item=/etc/systemd/system/kubelet.service.d)", "changed: [controller-2] => (item=/etc/systemd/system/kubelet.service.d)", "changed: [controller-3] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller-2] => (item=/etc/kubernetes)", "ok: [controller-1] => (item=/etc/kubernetes)", "ok: [controller-3] => (item=/etc/kubernetes)", "ok: [controller-2] => (item=/etc/kubernetes/manifests)", "ok: [controller-1] => (item=/etc/kubernetes/manifests)", "ok: [controller-3] => (item=/etc/kubernetes/manifests)", "", "TASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********", "Tuesday 17 March 2026 16:04:36 +0000 (0:00:00.972) 0:01:13.629 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***", "Tuesday 17 March 2026 16:04:37 +0000 (0:00:00.759) 0:01:14.389 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Check swap status] *************************", "Tuesday 17 March 2026 16:04:38 +0000 (0:00:00.776) 0:01:15.165 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************", "Tuesday 17 March 2026 16:04:38 +0000 (0:00:00.427) 0:01:15.593 *********", "[ERROR]: Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.", "", "Task failed.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:78:7", "", "76 register: kubelet_swapon", "77", "78 - name: Disable swap", " ^ column 7", "", "<<< caused by >>>", "", "Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11", "", "81 ignore_errors: \"{{ ansible_check_mode }}\"", "82 when:", "83 - kubelet_swapon.stdout", " ^ column 11", "", "Broken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.", "", "fatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "fatal: [controller-2]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "fatal: [controller-3]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "...ignoring", "...ignoring", "...ignoring", "", "TASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********", "Tuesday 17 March 2026 16:04:38 +0000 (0:00:00.075) 0:01:15.668 *********", "ok: [controller-1] => (item=swap)", "ok: [controller-2] => (item=swap)", "ok: [controller-3] => (item=swap)", "ok: [controller-1] => (item=none)", "ok: [controller-2] => (item=none)", "ok: [controller-3] => (item=none)", "", "TASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***", "Tuesday 17 March 2026 16:04:39 +0000 (0:00:00.861) 0:01:16.530 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************", "Tuesday 17 March 2026 16:04:40 +0000 (0:00:00.755) 0:01:17.286 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:04:41 +0000 (0:00:00.795) 0:01:18.082 *********", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:04:41 +0000 (0:00:00.010) 0:01:18.092 *********", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:04:41 +0000 (0:00:00.007) 0:01:18.099 *********", "", "RUNNING HANDLER [vexxhost.kubernetes.kubelet : Reload systemd] *****************", "Tuesday 17 March 2026 16:04:41 +0000 (0:00:00.005) 0:01:18.104 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********", "Tuesday 17 March 2026 16:04:42 +0000 (0:00:01.656) 0:01:19.761 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****", "Tuesday 17 March 2026 16:04:43 +0000 (0:00:00.859) 0:01:20.621 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************", "Tuesday 17 March 2026 16:04:44 +0000 (0:00:01.096) 0:01:21.717 *********", "changed: [controller-2]", "changed: [controller-1]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********", "Tuesday 17 March 2026 16:04:45 +0000 (0:00:00.946) 0:01:22.663 *********", "changed: [controller-3]", "changed: [controller-2]", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********", "Tuesday 17 March 2026 16:04:46 +0000 (0:00:00.480) 0:01:23.144 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************", "Tuesday 17 March 2026 16:04:46 +0000 (0:00:00.589) 0:01:23.734 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************", "Tuesday 17 March 2026 16:04:47 +0000 (0:00:00.163) 0:01:23.897 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***", "Tuesday 17 March 2026 16:04:47 +0000 (0:00:00.154) 0:01:24.052 *********", "ok: [controller-1] => (item=controller-1)", "ok: [controller-2 -> controller-1(199.19.213.74)] => (item=controller-1)", "ok: [controller-3 -> controller-1(199.19.213.74)] => (item=controller-1)", "ok: [controller-1 -> controller-2(199.19.213.210)] => (item=controller-2)", "ok: [controller-2] => (item=controller-2)", "ok: [controller-3 -> controller-2(199.19.213.210)] => (item=controller-2)", "ok: [controller-1 -> controller-3(199.19.213.235)] => (item=controller-3)", "ok: [controller-2 -> controller-3(199.19.213.235)] => (item=controller-3)", "ok: [controller-3] => (item=controller-3)", "", "TASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****", "Tuesday 17 March 2026 16:04:48 +0000 (0:00:01.004) 0:01:25.056 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***", "Tuesday 17 March 2026 16:04:48 +0000 (0:00:00.070) 0:01:25.127 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********", "Tuesday 17 March 2026 16:04:48 +0000 (0:00:00.085) 0:01:25.213 *********", "ok: [controller-1] => {", " \"msg\": \"controller-1\"", "}", "ok: [controller-2] => {", " \"msg\": \"controller-1\"", "}", "ok: [controller-3] => {", " \"msg\": \"controller-1\"", "}", "", "TASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***", "Tuesday 17 March 2026 16:04:48 +0000 (0:00:00.081) 0:01:25.294 *********", "skipping: [controller-2]", "skipping: [controller-3]", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.759) 0:01:26.053 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.081) 0:01:26.135 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.069) 0:01:26.205 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.072) 0:01:26.277 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.071) 0:01:26.349 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.072) 0:01:26.421 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.066) 0:01:26.488 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************", "Tuesday 17 March 2026 16:04:49 +0000 (0:00:00.074) 0:01:26.563 *********", "changed: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***", "Tuesday 17 March 2026 16:05:23 +0000 (0:00:33.529) 0:02:00.093 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************", "Tuesday 17 March 2026 16:05:23 +0000 (0:00:00.352) 0:02:00.445 *********", "skipping: [controller-1]", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/join-cluster.yml for controller-2, controller-3", "", "TASK [vexxhost.kubernetes.kubernetes : Generate control-plane certificates for joining cluster] ***", "Tuesday 17 March 2026 16:05:23 +0000 (0:00:00.115) 0:02:00.561 *********", "ok: [controller-2 -> controller-1(199.19.213.74)]", "", "TASK [vexxhost.kubernetes.kubernetes : Retrieve SHA256 certificate hash] *******", "Tuesday 17 March 2026 16:05:24 +0000 (0:00:00.480) 0:02:01.042 *********", "ok: [controller-2 -> controller-1(199.19.213.74)]", "", "TASK [vexxhost.kubernetes.kubernetes : Generate token for joining cluster] *****", "Tuesday 17 March 2026 16:05:24 +0000 (0:00:00.552) 0:02:01.594 *********", "changed: [controller-2 -> controller-1(199.19.213.74)]", "", "TASK [vexxhost.kubernetes.kubernetes : Upload kubeadm configuration] ***********", "Tuesday 17 March 2026 16:05:25 +0000 (0:00:00.398) 0:02:01.993 *********", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************", "Tuesday 17 March 2026 16:05:25 +0000 (0:00:00.780) 0:02:02.774 *********", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***", "Tuesday 17 March 2026 16:06:36 +0000 (0:01:10.669) 0:03:13.443 *********", "changed: [controller-2]", "changed: [controller-3]", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***", "Tuesday 17 March 2026 16:06:37 +0000 (0:00:00.506) 0:03:13.949 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******", "Tuesday 17 March 2026 16:06:37 +0000 (0:00:00.371) 0:03:14.321 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************", "Tuesday 17 March 2026 16:06:37 +0000 (0:00:00.346) 0:03:14.667 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***", "Tuesday 17 March 2026 16:06:37 +0000 (0:00:00.081) 0:03:14.749 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************", "Tuesday 17 March 2026 16:06:37 +0000 (0:00:00.078) 0:03:14.827 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***", "Tuesday 17 March 2026 16:06:38 +0000 (0:00:00.071) 0:03:14.898 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***", "Tuesday 17 March 2026 16:06:47 +0000 (0:00:09.354) 0:03:24.252 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************", "Tuesday 17 March 2026 16:06:48 +0000 (0:00:00.977) 0:03:25.230 *********", "skipping: [controller-1] => (item=DaemonSet)", "skipping: [controller-1] => (item=ConfigMap)", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************", "Tuesday 17 March 2026 16:06:48 +0000 (0:00:00.055) 0:03:25.285 *********", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***", "Tuesday 17 March 2026 16:06:48 +0000 (0:00:00.044) 0:03:25.329 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***", "Tuesday 17 March 2026 16:06:48 +0000 (0:00:00.076) 0:03:25.405 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************", "Tuesday 17 March 2026 16:06:48 +0000 (0:00:00.108) 0:03:25.513 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***", "Tuesday 17 March 2026 16:06:48 +0000 (0:00:00.071) 0:03:25.585 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***", "Tuesday 17 March 2026 16:06:50 +0000 (0:00:01.475) 0:03:27.060 *********", "changed: [controller-1]", "", "PLAY [Install control-plane components] ****************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:06:51 +0000 (0:00:01.139) 0:03:28.200 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:06:52 +0000 (0:00:00.898) 0:03:29.098 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:06:52 +0000 (0:00:00.342) 0:03:29.441 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Tuesday 17 March 2026 16:06:53 +0000 (0:00:01.118) 0:03:30.560 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:06:54 +0000 (0:00:00.366) 0:03:30.926 *********", "ok: [controller-1] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:06:54 +0000 (0:00:00.077) 0:03:31.004 *********", "changed: [controller-2]", "changed: [controller-1]", "changed: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:06:55 +0000 (0:00:01.837) 0:03:32.841 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************", "Tuesday 17 March 2026 16:06:57 +0000 (0:00:01.845) 0:03:34.687 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************", "Tuesday 17 March 2026 16:06:58 +0000 (0:00:00.455) 0:03:35.143 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************", "Tuesday 17 March 2026 16:06:58 +0000 (0:00:00.367) 0:03:35.511 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***", "Tuesday 17 March 2026 16:06:59 +0000 (0:00:00.407) 0:03:35.919 *********", "changed: [controller-2]", "changed: [controller-3]", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***", "Tuesday 17 March 2026 16:06:59 +0000 (0:00:00.348) 0:03:36.267 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [Install plugin] **********************************************************", "Tuesday 17 March 2026 16:06:59 +0000 (0:00:00.360) 0:03:36.628 *********", "included: vexxhost.containers.download_artifact for controller-1, controller-2, controller-3", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:06:59 +0000 (0:00:00.105) 0:03:36.733 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:06:59 +0000 (0:00:00.075) 0:03:36.809 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:07:01 +0000 (0:00:01.611) 0:03:38.421 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Tuesday 17 March 2026 16:07:03 +0000 (0:00:02.250) 0:03:40.672 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Tuesday 17 March 2026 16:07:03 +0000 (0:00:00.140) 0:03:40.812 *********", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************", "Tuesday 17 March 2026 16:07:04 +0000 (0:00:00.855) 0:03:41.668 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************", "Tuesday 17 March 2026 16:07:05 +0000 (0:00:01.027) 0:03:42.695 *********", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Tuesday 17 March 2026 16:07:08 +0000 (0:00:02.280) 0:03:44.975 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Tuesday 17 March 2026 16:07:08 +0000 (0:00:00.083) 0:03:45.059 *********", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************", "Tuesday 17 March 2026 16:07:08 +0000 (0:00:00.690) 0:03:45.749 *********", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Capture envoy-gateway pod logs if helm failed] ***", "Tuesday 17 March 2026 16:07:45 +0000 (0:00:36.212) 0:04:21.961 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Print envoy-gateway pod logs] ********", "Tuesday 17 March 2026 16:07:45 +0000 (0:00:00.062) 0:04:22.024 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Fail with original helm error] *******", "Tuesday 17 March 2026 16:07:45 +0000 (0:00:00.067) 0:04:22.091 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************", "Tuesday 17 March 2026 16:07:45 +0000 (0:00:00.070) 0:04:22.162 *********", "changed: [controller-1]", "", "PLAY [Wait for all nodes to become Ready] **************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:07:46 +0000 (0:00:00.959) 0:04:23.121 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [Wait for node to be Ready] ***********************************************", "Tuesday 17 March 2026 16:07:47 +0000 (0:00:01.738) 0:04:24.860 *********", "ok: [controller-2 -> controller-1(199.19.213.74)]", "ok: [controller-1]", "ok: [controller-3 -> controller-1(199.19.213.74)]", "", "PLAY RECAP *********************************************************************", "controller-1 : ok=120 changed=54 unreachable=0 failed=0 skipped=37 rescued=0 ignored=3", "controller-2 : ok=115 changed=49 unreachable=0 failed=0 skipped=34 rescued=0 ignored=2", "controller-3 : ok=112 changed=48 unreachable=0 failed=0 skipped=34 rescued=0 ignored=2", "", "", "TASKS RECAP ********************************************************************", "Tuesday 17 March 2026 16:07:48 +0000 (0:00:01.005) 0:04:25.865 *********", "===============================================================================", "vexxhost.kubernetes.kubernetes : Join cluster -------------------------- 70.67s", "vexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------ 36.21s", "vexxhost.kubernetes.kubernetes : Initialize cluster -------------------- 33.53s", "vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems --- 9.35s", "vexxhost.containers.containerd : Install AppArmor packages -------------- 6.40s", "Install Debian packages ------------------------------------------------- 6.25s", "vexxhost.kubernetes.kubelet : Reload systemd ---------------------------- 3.48s", "vexxhost.kubernetes.kubelet : Install additional packages --------------- 3.41s", "vexxhost.containers.download_artifact : Extract archive ----------------- 3.31s", "vexxhost.containers.download_artifact : Extract archive ----------------- 3.16s", "Gathering Facts --------------------------------------------------------- 2.83s", "vexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.44s", "vexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 2.28s", "vexxhost.containers.download_artifact : Extract archive ----------------- 2.25s", "Gathering Facts --------------------------------------------------------- 1.86s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.85s", "vexxhost.containers.download_artifact : Download item ------------------- 1.84s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.81s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.81s", "Gathering Facts --------------------------------------------------------- 1.74s", "INFO [cluster-upgrade > prepare] Executed: Successful", "INFO [cluster-upgrade > converge] Executing", "", "PLAY [Configure Kubernetes VIP] ************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:07:50 +0000 (0:00:00.018) 0:00:00.018 *********", "[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***", "Tuesday 17 March 2026 16:07:51 +0000 (0:00:01.299) 0:00:01.318 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************", "Tuesday 17 March 2026 16:07:52 +0000 (0:00:00.462) 0:00:01.781 *********", "ok: [controller-1] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-3] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-2] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-1] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-3] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-2] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-1] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-3] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-2] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-3] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-1] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-1] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "ok: [controller-3] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "", "TASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****", "Tuesday 17 March 2026 16:07:54 +0000 (0:00:01.962) 0:00:03.744 *********", "ok: [controller-3] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)", "ok: [controller-1] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)", "ok: [controller-1] => (item=/etc/kubernetes/controller-manager.conf)", "ok: [controller-2] => (item=/etc/kubernetes/controller-manager.conf)", "ok: [controller-3] => (item=/etc/kubernetes/controller-manager.conf)", "ok: [controller-1] => (item=/etc/kubernetes/scheduler.conf)", "ok: [controller-2] => (item=/etc/kubernetes/scheduler.conf)", "ok: [controller-3] => (item=/etc/kubernetes/scheduler.conf)", "", "TASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********", "Tuesday 17 March 2026 16:07:56 +0000 (0:00:01.661) 0:00:05.405 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********", "Tuesday 17 March 2026 16:07:56 +0000 (0:00:00.431) 0:00:05.836 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************", "Tuesday 17 March 2026 16:07:56 +0000 (0:00:00.364) 0:00:06.200 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***", "Tuesday 17 March 2026 16:07:56 +0000 (0:00:00.061) 0:00:06.262 *********", "ok: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************", "Tuesday 17 March 2026 16:07:56 +0000 (0:00:00.064) 0:00:06.327 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******", "Tuesday 17 March 2026 16:07:57 +0000 (0:00:00.823) 0:00:07.150 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:07:58 +0000 (0:00:00.336) 0:00:07.487 *********", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:07:58 +0000 (0:00:00.005) 0:00:07.493 *********", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:07:58 +0000 (0:00:00.003) 0:00:07.496 *********", "", "PLAY [Install Kubernetes] ******************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:07:58 +0000 (0:00:00.062) 0:00:07.559 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:08:00 +0000 (0:00:02.072) 0:00:09.632 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:08:00 +0000 (0:00:00.402) 0:00:10.034 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Tuesday 17 March 2026 16:08:00 +0000 (0:00:00.081) 0:00:10.116 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:01 +0000 (0:00:00.366) 0:00:10.483 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:01 +0000 (0:00:00.115) 0:00:10.599 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:01 +0000 (0:00:00.598) 0:00:11.197 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:08:01 +0000 (0:00:00.103) 0:00:11.301 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:08:02 +0000 (0:00:00.363) 0:00:11.665 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:03 +0000 (0:00:01.268) 0:00:12.933 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:03 +0000 (0:00:00.117) 0:00:13.051 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:04 +0000 (0:00:00.537) 0:00:13.588 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Tuesday 17 March 2026 16:08:06 +0000 (0:00:02.510) 0:00:16.099 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Tuesday 17 March 2026 16:08:06 +0000 (0:00:00.061) 0:00:16.160 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Tuesday 17 March 2026 16:08:06 +0000 (0:00:00.066) 0:00:16.227 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Tuesday 17 March 2026 16:08:06 +0000 (0:00:00.070) 0:00:16.297 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Tuesday 17 March 2026 16:08:08 +0000 (0:00:01.123) 0:00:17.420 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Tuesday 17 March 2026 16:08:08 +0000 (0:00:00.768) 0:00:18.189 *********", "ok: [controller-1] => (item={'path': '/etc/containerd'})", "ok: [controller-2] => (item={'path': '/etc/containerd'})", "ok: [controller-3] => (item={'path': '/etc/containerd'})", "ok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Tuesday 17 March 2026 16:08:10 +0000 (0:00:01.550) 0:00:19.740 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:08:11 +0000 (0:00:00.864) 0:00:20.604 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:08:11 +0000 (0:00:00.006) 0:00:20.610 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:08:11 +0000 (0:00:00.005) 0:00:20.616 *********", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Tuesday 17 March 2026 16:08:11 +0000 (0:00:00.006) 0:00:20.622 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***", "Tuesday 17 March 2026 16:08:11 +0000 (0:00:00.761) 0:00:21.383 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***", "Tuesday 17 March 2026 16:08:12 +0000 (0:00:01.002) 0:00:22.385 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***", "Tuesday 17 March 2026 16:08:13 +0000 (0:00:00.061) 0:00:22.447 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***", "Tuesday 17 March 2026 16:08:13 +0000 (0:00:00.048) 0:00:22.495 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***", "Tuesday 17 March 2026 16:08:13 +0000 (0:00:00.056) 0:00:22.552 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***", "Tuesday 17 March 2026 16:08:13 +0000 (0:00:00.073) 0:00:22.626 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:08:13 +0000 (0:00:00.096) 0:00:22.722 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:13 +0000 (0:00:00.360) 0:00:23.083 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:13 +0000 (0:00:00.078) 0:00:23.161 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:15 +0000 (0:00:01.908) 0:00:25.069 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:08:15 +0000 (0:00:00.113) 0:00:25.182 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:16 +0000 (0:00:00.363) 0:00:25.546 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:16 +0000 (0:00:00.086) 0:00:25.632 *********", "changed: [controller-3]", "changed: [controller-1]", "changed: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:17 +0000 (0:00:01.514) 0:00:27.146 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Tuesday 17 March 2026 16:08:17 +0000 (0:00:00.131) 0:00:27.278 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Tuesday 17 March 2026 16:08:17 +0000 (0:00:00.059) 0:00:27.337 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Tuesday 17 March 2026 16:08:18 +0000 (0:00:00.063) 0:00:27.401 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Tuesday 17 March 2026 16:08:18 +0000 (0:00:00.063) 0:00:27.464 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Tuesday 17 March 2026 16:08:19 +0000 (0:00:01.049) 0:00:28.514 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Tuesday 17 March 2026 16:08:19 +0000 (0:00:00.729) 0:00:29.244 *********", "ok: [controller-1] => (item={'path': '/etc/containerd'})", "ok: [controller-2] => (item={'path': '/etc/containerd'})", "ok: [controller-3] => (item={'path': '/etc/containerd'})", "ok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Tuesday 17 March 2026 16:08:21 +0000 (0:00:01.582) 0:00:30.827 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:08:22 +0000 (0:00:00.837) 0:00:31.664 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:08:22 +0000 (0:00:00.006) 0:00:31.671 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:08:22 +0000 (0:00:00.004) 0:00:31.676 *********", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Tuesday 17 March 2026 16:08:22 +0000 (0:00:00.005) 0:00:31.681 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:08:22 +0000 (0:00:00.547) 0:00:32.229 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:23 +0000 (0:00:00.380) 0:00:32.609 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:23 +0000 (0:00:00.113) 0:00:32.723 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:23 +0000 (0:00:00.515) 0:00:33.238 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:25 +0000 (0:00:01.542) 0:00:34.781 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:25 +0000 (0:00:00.101) 0:00:34.883 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:25 +0000 (0:00:00.516) 0:00:35.399 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.cri_tools : Create crictl config] ********************", "Tuesday 17 March 2026 16:08:28 +0000 (0:00:02.441) 0:00:37.840 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********", "Tuesday 17 March 2026 16:08:29 +0000 (0:00:00.751) 0:00:38.592 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:08:29 +0000 (0:00:00.383) 0:00:38.976 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:29 +0000 (0:00:00.381) 0:00:39.357 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:30 +0000 (0:00:00.093) 0:00:39.451 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:30 +0000 (0:00:00.538) 0:00:39.989 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***", "Tuesday 17 March 2026 16:08:32 +0000 (0:00:02.342) 0:00:42.331 *********", "ok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "ok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "ok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "", "TASK [vexxhost.containers.cni_plugins : Install additional packages] ***********", "Tuesday 17 March 2026 16:08:33 +0000 (0:00:00.081) 0:00:42.413 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************", "Tuesday 17 March 2026 16:08:34 +0000 (0:00:01.190) 0:00:43.603 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********", "Tuesday 17 March 2026 16:08:34 +0000 (0:00:00.501) 0:00:44.104 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******", "Tuesday 17 March 2026 16:08:35 +0000 (0:00:00.701) 0:00:44.805 *********", "ok: [controller-1] => (item=br_netfilter)", "ok: [controller-2] => (item=br_netfilter)", "ok: [controller-3] => (item=br_netfilter)", "ok: [controller-1] => (item=ip_tables)", "ok: [controller-2] => (item=ip_tables)", "ok: [controller-3] => (item=ip_tables)", "ok: [controller-1] => (item=ip6_tables)", "ok: [controller-3] => (item=ip6_tables)", "ok: [controller-2] => (item=ip6_tables)", "ok: [controller-1] => (item=nf_conntrack)", "ok: [controller-3] => (item=nf_conntrack)", "ok: [controller-2] => (item=nf_conntrack)", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:08:36 +0000 (0:00:01.355) 0:00:46.161 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:08:37 +0000 (0:00:00.382) 0:00:46.543 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:08:37 +0000 (0:00:00.075) 0:00:46.619 *********", "changed: [controller-1]", "changed: [controller-3]", "changed: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:08:38 +0000 (0:00:01.496) 0:00:48.116 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***", "Tuesday 17 March 2026 16:08:38 +0000 (0:00:00.088) 0:00:48.204 *********", "ok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "ok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "ok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "", "TASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************", "Tuesday 17 March 2026 16:08:38 +0000 (0:00:00.096) 0:00:48.301 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************", "Tuesday 17 March 2026 16:08:38 +0000 (0:00:00.068) 0:00:48.370 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************", "Tuesday 17 March 2026 16:08:40 +0000 (0:00:01.077) 0:00:49.447 *********", "ok: [controller-1] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "ok: [controller-2] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "ok: [controller-3] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "ok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "ok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "ok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "ok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "ok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "ok: [controller-3] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "ok: [controller-1] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "ok: [controller-3] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "ok: [controller-1] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "ok: [controller-3] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "ok: [controller-1] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "ok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "ok: [controller-3] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "ok: [controller-1] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "ok: [controller-2] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "ok: [controller-2] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "ok: [controller-2] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "ok: [controller-2] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "", "TASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***", "Tuesday 17 March 2026 16:08:43 +0000 (0:00:03.335) 0:00:52.783 *********", "ok: [controller-1] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller-2] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller-3] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller-1] => (item=/etc/kubernetes)", "ok: [controller-3] => (item=/etc/kubernetes)", "ok: [controller-2] => (item=/etc/kubernetes)", "ok: [controller-1] => (item=/etc/kubernetes/manifests)", "ok: [controller-3] => (item=/etc/kubernetes/manifests)", "ok: [controller-2] => (item=/etc/kubernetes/manifests)", "", "TASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********", "Tuesday 17 March 2026 16:08:44 +0000 (0:00:00.982) 0:00:53.766 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***", "Tuesday 17 March 2026 16:08:45 +0000 (0:00:00.730) 0:00:54.497 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Check swap status] *************************", "Tuesday 17 March 2026 16:08:45 +0000 (0:00:00.749) 0:00:55.246 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************", "Tuesday 17 March 2026 16:08:46 +0000 (0:00:00.629) 0:00:55.875 *********", "[ERROR]: Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.", "", "Task failed.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:78:7", "", "76 register: kubelet_swapon", "77", "78 - name: Disable swap", " ^ column 7", "", "<<< caused by >>>", "", "Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11", "", "81 ignore_errors: \"{{ ansible_check_mode }}\"", "82 when:", "83 - kubelet_swapon.stdout", " ^ column 11", "", "Broken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.", "", "fatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "fatal: [controller-2]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "fatal: [controller-3]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "...ignoring", "...ignoring", "...ignoring", "", "TASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********", "Tuesday 17 March 2026 16:08:46 +0000 (0:00:00.067) 0:00:55.942 *********", "ok: [controller-2] => (item=swap)", "ok: [controller-1] => (item=swap)", "ok: [controller-2] => (item=none)", "ok: [controller-1] => (item=none)", "ok: [controller-3] => (item=swap)", "ok: [controller-3] => (item=none)", "", "TASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***", "Tuesday 17 March 2026 16:08:48 +0000 (0:00:01.705) 0:00:57.648 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************", "Tuesday 17 March 2026 16:08:51 +0000 (0:00:02.777) 0:01:00.425 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:08:51 +0000 (0:00:00.550) 0:01:00.975 *********", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:08:51 +0000 (0:00:00.007) 0:01:00.983 *********", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:08:51 +0000 (0:00:00.010) 0:01:00.993 *********", "", "TASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********", "Tuesday 17 March 2026 16:08:51 +0000 (0:00:00.006) 0:01:00.999 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****", "Tuesday 17 March 2026 16:08:52 +0000 (0:00:00.544) 0:01:01.543 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************", "Tuesday 17 March 2026 16:08:53 +0000 (0:00:01.207) 0:01:02.751 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********", "Tuesday 17 March 2026 16:08:54 +0000 (0:00:00.989) 0:01:03.741 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********", "Tuesday 17 March 2026 16:08:54 +0000 (0:00:00.467) 0:01:04.208 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************", "Tuesday 17 March 2026 16:08:55 +0000 (0:00:00.586) 0:01:04.794 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************", "Tuesday 17 March 2026 16:08:55 +0000 (0:00:00.140) 0:01:04.935 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***", "Tuesday 17 March 2026 16:08:55 +0000 (0:00:00.148) 0:01:05.084 *********", "ok: [controller-1] => (item=controller-1)", "ok: [controller-2 -> controller-1(199.19.213.74)] => (item=controller-1)", "ok: [controller-3 -> controller-1(199.19.213.74)] => (item=controller-1)", "ok: [controller-1 -> controller-2(199.19.213.210)] => (item=controller-2)", "ok: [controller-2] => (item=controller-2)", "ok: [controller-3 -> controller-2(199.19.213.210)] => (item=controller-2)", "ok: [controller-1 -> controller-3(199.19.213.235)] => (item=controller-3)", "ok: [controller-2 -> controller-3(199.19.213.235)] => (item=controller-3)", "ok: [controller-3] => (item=controller-3)", "", "TASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****", "Tuesday 17 March 2026 16:08:56 +0000 (0:00:01.001) 0:01:06.085 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***", "Tuesday 17 March 2026 16:08:56 +0000 (0:00:00.084) 0:01:06.170 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********", "Tuesday 17 March 2026 16:08:56 +0000 (0:00:00.073) 0:01:06.244 *********", "ok: [controller-1] => {", " \"msg\": \"controller-1\"", "}", "ok: [controller-2] => {", " \"msg\": \"controller-1\"", "}", "ok: [controller-3] => {", " \"msg\": \"controller-1\"", "}", "", "TASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***", "Tuesday 17 March 2026 16:08:56 +0000 (0:00:00.075) 0:01:06.320 *********", "skipping: [controller-2]", "skipping: [controller-3]", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************", "Tuesday 17 March 2026 16:08:57 +0000 (0:00:00.926) 0:01:07.246 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************", "Tuesday 17 March 2026 16:08:57 +0000 (0:00:00.076) 0:01:07.323 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************", "Tuesday 17 March 2026 16:08:58 +0000 (0:00:00.087) 0:01:07.410 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************", "Tuesday 17 March 2026 16:08:58 +0000 (0:00:00.081) 0:01:07.492 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************", "Tuesday 17 March 2026 16:08:58 +0000 (0:00:00.081) 0:01:07.574 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************", "Tuesday 17 March 2026 16:08:58 +0000 (0:00:00.081) 0:01:07.655 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************", "Tuesday 17 March 2026 16:08:58 +0000 (0:00:00.078) 0:01:07.733 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************", "Tuesday 17 March 2026 16:08:58 +0000 (0:00:00.079) 0:01:07.812 *********", "ok: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***", "Tuesday 17 March 2026 16:08:58 +0000 (0:00:00.362) 0:01:08.175 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************", "Tuesday 17 March 2026 16:08:59 +0000 (0:00:00.702) 0:01:08.877 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***", "Tuesday 17 March 2026 16:08:59 +0000 (0:00:00.065) 0:01:08.943 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***", "Tuesday 17 March 2026 16:08:59 +0000 (0:00:00.364) 0:01:09.308 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******", "Tuesday 17 March 2026 16:09:00 +0000 (0:00:00.377) 0:01:09.686 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************", "Tuesday 17 March 2026 16:09:00 +0000 (0:00:00.362) 0:01:10.048 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***", "Tuesday 17 March 2026 16:09:00 +0000 (0:00:00.074) 0:01:10.122 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************", "Tuesday 17 March 2026 16:09:00 +0000 (0:00:00.076) 0:01:10.199 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***", "Tuesday 17 March 2026 16:09:00 +0000 (0:00:00.067) 0:01:10.267 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***", "Tuesday 17 March 2026 16:09:01 +0000 (0:00:01.117) 0:01:11.384 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************", "Tuesday 17 March 2026 16:09:02 +0000 (0:00:00.910) 0:01:12.295 *********", "skipping: [controller-1] => (item=DaemonSet)", "skipping: [controller-1] => (item=ConfigMap)", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************", "Tuesday 17 March 2026 16:09:02 +0000 (0:00:00.053) 0:01:12.349 *********", "changed: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***", "Tuesday 17 March 2026 16:12:20 +0000 (0:03:17.501) 0:04:29.850 *********", "[ERROR]: Task failed: Module failed: non-zero return code", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml:95:7", "", "93 kubeadm upgrade apply --v=5 --yes v{{ kubernetes_version }}", "94", "95 - name: Check if the Kubernetes API services is up to date", " ^ column 7", "", "fatal: [controller-2]: FAILED! => {\"changed\": false, \"cmd\": [\"grep\", \"-q\", \"v1.34.0\", \"/etc/kubernetes/manifests/kube-apiserver.yaml\"], \"delta\": \"0:00:00.004835\", \"end\": \"2026-03-17 16:12:20.928527\", \"msg\": \"non-zero return code\", \"rc\": 1, \"start\": \"2026-03-17 16:12:20.923692\", \"stderr\": \"\", \"stderr_lines\": [], \"stdout\": \"\", \"stdout_lines\": []}", "fatal: [controller-3]: FAILED! => {\"changed\": false, \"cmd\": [\"grep\", \"-q\", \"v1.34.0\", \"/etc/kubernetes/manifests/kube-apiserver.yaml\"], \"delta\": \"0:00:00.006825\", \"end\": \"2026-03-17 16:12:20.950894\", \"msg\": \"non-zero return code\", \"rc\": 1, \"start\": \"2026-03-17 16:12:20.944069\", \"stderr\": \"\", \"stderr_lines\": [], \"stdout\": \"\", \"stdout_lines\": []}", "ok: [controller-1]", "...ignoring", "...ignoring", "", "TASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***", "Tuesday 17 March 2026 16:12:20 +0000 (0:00:00.547) 0:04:30.398 *********", "skipping: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************", "Tuesday 17 March 2026 16:18:29 +0000 (0:06:08.990) 0:10:39.388 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***", "Tuesday 17 March 2026 16:18:30 +0000 (0:00:00.080) 0:10:39.469 *********", "changed: [controller-1]", "changed: [controller-2]", "changed: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***", "Tuesday 17 March 2026 16:19:06 +0000 (0:00:36.718) 0:11:16.187 *********", "changed: [controller-1]", "", "PLAY [Install control-plane components] ****************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:19:07 +0000 (0:00:01.118) 0:11:17.305 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:19:08 +0000 (0:00:01.010) 0:11:18.315 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:19:09 +0000 (0:00:00.325) 0:11:18.641 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Tuesday 17 March 2026 16:19:10 +0000 (0:00:00.883) 0:11:19.524 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:19:10 +0000 (0:00:00.339) 0:11:19.864 *********", "ok: [controller-1] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:19:10 +0000 (0:00:00.068) 0:11:19.933 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:19:10 +0000 (0:00:00.423) 0:11:20.356 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************", "Tuesday 17 March 2026 16:19:12 +0000 (0:00:01.449) 0:11:21.806 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************", "Tuesday 17 March 2026 16:19:12 +0000 (0:00:00.421) 0:11:22.228 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************", "Tuesday 17 March 2026 16:19:13 +0000 (0:00:00.309) 0:11:22.537 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***", "Tuesday 17 March 2026 16:19:13 +0000 (0:00:00.379) 0:11:22.916 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***", "Tuesday 17 March 2026 16:19:13 +0000 (0:00:00.320) 0:11:23.237 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [Install plugin] **********************************************************", "Tuesday 17 March 2026 16:19:14 +0000 (0:00:00.332) 0:11:23.569 *********", "included: vexxhost.containers.download_artifact for controller-1, controller-2, controller-3", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:19:14 +0000 (0:00:00.104) 0:11:23.674 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:19:14 +0000 (0:00:00.067) 0:11:23.741 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:19:14 +0000 (0:00:00.469) 0:11:24.211 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Tuesday 17 March 2026 16:19:16 +0000 (0:00:01.808) 0:11:26.020 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Tuesday 17 March 2026 16:19:16 +0000 (0:00:00.125) 0:11:26.145 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************", "Tuesday 17 March 2026 16:19:17 +0000 (0:00:00.721) 0:11:26.866 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************", "Tuesday 17 March 2026 16:19:18 +0000 (0:00:00.929) 0:11:27.796 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Tuesday 17 March 2026 16:19:26 +0000 (0:00:07.855) 0:11:35.652 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Tuesday 17 March 2026 16:19:26 +0000 (0:00:00.070) 0:11:35.723 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************", "Tuesday 17 March 2026 16:19:26 +0000 (0:00:00.648) 0:11:36.372 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Capture envoy-gateway pod logs if helm failed] ***", "Tuesday 17 March 2026 16:19:28 +0000 (0:00:01.879) 0:11:38.251 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Print envoy-gateway pod logs] ********", "Tuesday 17 March 2026 16:19:28 +0000 (0:00:00.052) 0:11:38.304 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Fail with original helm error] *******", "Tuesday 17 March 2026 16:19:28 +0000 (0:00:00.051) 0:11:38.355 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************", "Tuesday 17 March 2026 16:19:29 +0000 (0:00:00.053) 0:11:38.408 *********", "ok: [controller-1]", "", "PLAY RECAP *********************************************************************", "controller-1 : ok=119 changed=7 unreachable=0 failed=0 skipped=31 rescued=0 ignored=1", "controller-2 : ok=105 changed=5 unreachable=0 failed=0 skipped=32 rescued=0 ignored=2", "controller-3 : ok=105 changed=5 unreachable=0 failed=0 skipped=32 rescued=0 ignored=2", "", "", "TASKS RECAP ********************************************************************", "Tuesday 17 March 2026 16:19:29 +0000 (0:00:00.798) 0:11:39.207 *********", "===============================================================================", "vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services - 368.99s", "vexxhost.kubernetes.kubernetes : Start an upgrade --------------------- 197.50s", "vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed) -- 36.72s", "vexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 7.86s", "vexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 3.34s", "vexxhost.kubernetes.kubelet : Create noswap systemd service config file --- 2.78s", "vexxhost.containers.download_artifact : Extract archive ----------------- 2.51s", "vexxhost.containers.download_artifact : Extract archive ----------------- 2.44s", "vexxhost.containers.download_artifact : Extract archive ----------------- 2.34s", "Gathering Facts --------------------------------------------------------- 2.07s", "vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack ---------------- 1.96s", "vexxhost.containers.download_artifact : Download item ------------------- 1.91s", "vexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------- 1.88s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.81s", "vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab ----------- 1.71s", "vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443 ---- 1.66s", "vexxhost.containers.containerd : Create folders for configuration ------- 1.58s", "vexxhost.containers.containerd : Create folders for configuration ------- 1.55s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.54s", "vexxhost.containers.download_artifact : Download item ------------------- 1.51s", "INFO [cluster-upgrade > converge] Executed: Successful", "INFO [cluster-upgrade > idempotence] Executing", "", "PLAY [Configure Kubernetes VIP] ************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:19:31 +0000 (0:00:00.016) 0:00:00.016 *********", "[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.directory : Create directory (/etc/kubernetes/manifests)] ***", "Tuesday 17 March 2026 16:19:33 +0000 (0:00:02.186) 0:00:02.202 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack] ****************", "Tuesday 17 March 2026 16:19:33 +0000 (0:00:00.452) 0:00:02.654 *********", "ok: [controller-1] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-2] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-3] => (item=/etc/keepalived/keepalived.conf)", "ok: [controller-1] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-3] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-2] => (item=/etc/keepalived/check_apiserver.sh)", "ok: [controller-1] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-3] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/keepalived.yaml)", "ok: [controller-1] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-3] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-2] => (item=/etc/haproxy/haproxy.cfg)", "ok: [controller-1] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "ok: [controller-3] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/haproxy.yaml)", "", "TASK [vexxhost.kubernetes.kube_vip : Switch API server to run on port 6443] ****", "Tuesday 17 March 2026 16:19:35 +0000 (0:00:01.566) 0:00:04.221 *********", "ok: [controller-1] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)", "ok: [controller-3] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)", "ok: [controller-2] => (item=/etc/kubernetes/manifests/kube-apiserver.yaml)", "ok: [controller-1] => (item=/etc/kubernetes/controller-manager.conf)", "ok: [controller-3] => (item=/etc/kubernetes/controller-manager.conf)", "ok: [controller-2] => (item=/etc/kubernetes/controller-manager.conf)", "ok: [controller-1] => (item=/etc/kubernetes/scheduler.conf)", "ok: [controller-3] => (item=/etc/kubernetes/scheduler.conf)", "ok: [controller-2] => (item=/etc/kubernetes/scheduler.conf)", "", "TASK [vexxhost.kubernetes.kube_vip : Check if super-admin.conf exists] *********", "Tuesday 17 March 2026 16:19:36 +0000 (0:00:00.998) 0:00:05.219 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Check if kubeadm has already run] *********", "Tuesday 17 March 2026 16:19:36 +0000 (0:00:00.411) 0:00:05.631 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path] ************", "Tuesday 17 March 2026 16:19:37 +0000 (0:00:00.315) 0:00:05.946 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Set fact with KUBECONFIG path (with super-admin.conf)] ***", "Tuesday 17 March 2026 16:19:37 +0000 (0:00:00.057) 0:00:06.004 *********", "ok: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Upload Kubernetes manifest] ***************", "Tuesday 17 March 2026 16:19:37 +0000 (0:00:00.051) 0:00:06.055 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kube_vip : Ensure kube-vip configuration file] *******", "Tuesday 17 March 2026 16:19:38 +0000 (0:00:00.788) 0:00:06.843 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:19:38 +0000 (0:00:00.344) 0:00:07.188 *********", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:19:38 +0000 (0:00:00.006) 0:00:07.194 *********", "", "TASK [vexxhost.kubernetes.kube_vip : Flush handlers] ***************************", "Tuesday 17 March 2026 16:19:38 +0000 (0:00:00.002) 0:00:07.197 *********", "", "PLAY [Install Kubernetes] ******************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:19:38 +0000 (0:00:00.061) 0:00:07.258 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:19:40 +0000 (0:00:02.002) 0:00:09.261 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:19:40 +0000 (0:00:00.380) 0:00:09.642 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Tuesday 17 March 2026 16:19:40 +0000 (0:00:00.074) 0:00:09.716 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:19:41 +0000 (0:00:00.362) 0:00:10.079 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/opencontainers/runc/releases/download/v1.4.0/runc.amd64\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:19:41 +0000 (0:00:00.095) 0:00:10.174 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:19:42 +0000 (0:00:00.552) 0:00:10.727 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:19:42 +0000 (0:00:00.092) 0:00:10.820 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:19:42 +0000 (0:00:00.346) 0:00:11.166 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:19:44 +0000 (0:00:02.005) 0:00:13.172 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/containerd/containerd/releases/download/v2.2.0/containerd-2.2.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:19:44 +0000 (0:00:00.103) 0:00:13.276 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:19:45 +0000 (0:00:00.514) 0:00:13.791 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Tuesday 17 March 2026 16:19:48 +0000 (0:00:03.337) 0:00:17.129 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Tuesday 17 March 2026 16:19:48 +0000 (0:00:00.069) 0:00:17.198 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Tuesday 17 March 2026 16:19:48 +0000 (0:00:00.068) 0:00:17.267 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Tuesday 17 March 2026 16:19:48 +0000 (0:00:00.067) 0:00:17.334 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Tuesday 17 March 2026 16:19:49 +0000 (0:00:01.273) 0:00:18.607 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Tuesday 17 March 2026 16:19:50 +0000 (0:00:00.731) 0:00:19.338 *********", "ok: [controller-1] => (item={'path': '/etc/containerd'})", "ok: [controller-2] => (item={'path': '/etc/containerd'})", "ok: [controller-3] => (item={'path': '/etc/containerd'})", "ok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Tuesday 17 March 2026 16:19:52 +0000 (0:00:01.478) 0:00:20.817 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:19:52 +0000 (0:00:00.797) 0:00:21.614 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:19:52 +0000 (0:00:00.007) 0:00:21.622 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:19:52 +0000 (0:00:00.006) 0:00:21.629 *********", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Tuesday 17 March 2026 16:19:52 +0000 (0:00:00.005) 0:00:21.634 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the \"kubeadm-config\" ConfigMap] ***", "Tuesday 17 March 2026 16:19:53 +0000 (0:00:00.732) 0:00:22.367 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Parse the ClusterConfiguration] ***", "Tuesday 17 March 2026 16:19:54 +0000 (0:00:00.901) 0:00:23.268 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Retrieve the current Kubernetes version] ***", "Tuesday 17 March 2026 16:19:54 +0000 (0:00:00.054) 0:00:23.322 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Extract major, minor, and patch versions] ***", "Tuesday 17 March 2026 16:19:54 +0000 (0:00:00.048) 0:00:23.371 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Fail if we're jumping more than one minor version] ***", "Tuesday 17 March 2026 16:19:54 +0000 (0:00:00.054) 0:00:23.425 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes_upgrade_check : Set fact if we need to upgrade] ***", "Tuesday 17 March 2026 16:19:54 +0000 (0:00:00.075) 0:00:23.500 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:19:54 +0000 (0:00:00.089) 0:00:23.590 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:19:55 +0000 (0:00:00.358) 0:00:23.948 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubeadm\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:19:55 +0000 (0:00:00.072) 0:00:24.020 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:19:55 +0000 (0:00:00.512) 0:00:24.532 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:19:55 +0000 (0:00:00.092) 0:00:24.625 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:19:56 +0000 (0:00:00.357) 0:00:24.983 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubectl\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:19:56 +0000 (0:00:00.073) 0:00:25.056 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:19:56 +0000 (0:00:00.507) 0:00:25.564 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install SELinux packages] ***************", "Tuesday 17 March 2026 16:19:56 +0000 (0:00:00.125) 0:00:25.689 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Set SELinux to permissive at runtime] ***", "Tuesday 17 March 2026 16:19:57 +0000 (0:00:00.063) 0:00:25.753 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Persist SELinux permissive mode] ********", "Tuesday 17 March 2026 16:19:57 +0000 (0:00:00.064) 0:00:25.817 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.containers.containerd : Install AppArmor packages] **************", "Tuesday 17 March 2026 16:19:57 +0000 (0:00:00.061) 0:00:25.878 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create systemd service file for containerd] ***", "Tuesday 17 March 2026 16:19:58 +0000 (0:00:00.958) 0:00:26.837 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.containerd : Create folders for configuration] *******", "Tuesday 17 March 2026 16:19:58 +0000 (0:00:00.711) 0:00:27.548 *********", "ok: [controller-1] => (item={'path': '/etc/containerd'})", "ok: [controller-2] => (item={'path': '/etc/containerd'})", "ok: [controller-3] => (item={'path': '/etc/containerd'})", "ok: [controller-1] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/var/lib/containerd', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-2] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-3] => (item={'path': '/run/containerd', 'mode': '0o711'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.grpc.v1.cri', 'mode': '0o700'})", "ok: [controller-1] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-2] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "ok: [controller-3] => (item={'path': '/run/containerd/io.containerd.sandbox.controller.v1.shim', 'mode': '0o700'})", "", "TASK [vexxhost.containers.containerd : Create containerd config file] **********", "Tuesday 17 March 2026 16:20:00 +0000 (0:00:01.475) 0:00:29.023 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:20:01 +0000 (0:00:00.810) 0:00:29.834 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:20:01 +0000 (0:00:00.006) 0:00:29.841 *********", "", "TASK [vexxhost.containers.containerd : Force any restarts if necessary] ********", "Tuesday 17 March 2026 16:20:01 +0000 (0:00:00.004) 0:00:29.845 *********", "", "TASK [vexxhost.containers.containerd : Enable and start service] ***************", "Tuesday 17 March 2026 16:20:01 +0000 (0:00:00.005) 0:00:29.851 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:20:02 +0000 (0:00:01.501) 0:00:31.352 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:20:02 +0000 (0:00:00.363) 0:00:31.716 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/crictl-v1.34.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:20:03 +0000 (0:00:00.092) 0:00:31.809 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:20:03 +0000 (0:00:00.479) 0:00:32.289 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:20:05 +0000 (0:00:01.452) 0:00:33.741 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.34.0/critest-v1.34.0-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:20:05 +0000 (0:00:00.098) 0:00:33.840 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:20:05 +0000 (0:00:00.497) 0:00:34.338 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.cri_tools : Create crictl config] ********************", "Tuesday 17 March 2026 16:20:07 +0000 (0:00:01.486) 0:00:35.824 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.directory : Create directory (/opt/cni/bin)] *********", "Tuesday 17 March 2026 16:20:07 +0000 (0:00:00.753) 0:00:36.578 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:20:08 +0000 (0:00:00.374) 0:00:36.952 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:20:08 +0000 (0:00:00.380) 0:00:37.332 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/containernetworking/plugins/releases/download/v1.8.0/cni-plugins-linux-amd64-v1.8.0.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:20:08 +0000 (0:00:00.101) 0:00:37.434 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:20:09 +0000 (0:00:00.506) 0:00:37.941 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.cni_plugins : Gather variables for each operating system] ***", "Tuesday 17 March 2026 16:20:12 +0000 (0:00:03.318) 0:00:41.260 *********", "ok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "ok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "ok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/containers/roles/cni_plugins/vars/debian.yml)", "", "TASK [vexxhost.containers.cni_plugins : Install additional packages] ***********", "Tuesday 17 March 2026 16:20:12 +0000 (0:00:00.078) 0:00:41.338 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.containers.cni_plugins : Ensure IPv6 is enabled] ****************", "Tuesday 17 March 2026 16:20:13 +0000 (0:00:01.117) 0:00:42.455 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules on-boot] *********", "Tuesday 17 March 2026 16:20:14 +0000 (0:00:00.485) 0:00:42.941 *********", "ok: [controller-2]", "ok: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.containers.cni_plugins : Enable kernel modules in runtime] ******", "Tuesday 17 March 2026 16:20:14 +0000 (0:00:00.714) 0:00:43.655 *********", "ok: [controller-1] => (item=br_netfilter)", "ok: [controller-3] => (item=br_netfilter)", "ok: [controller-2] => (item=br_netfilter)", "ok: [controller-1] => (item=ip_tables)", "ok: [controller-3] => (item=ip_tables)", "ok: [controller-2] => (item=ip_tables)", "ok: [controller-3] => (item=ip6_tables)", "ok: [controller-1] => (item=ip6_tables)", "ok: [controller-2] => (item=ip6_tables)", "ok: [controller-1] => (item=nf_conntrack)", "ok: [controller-3] => (item=nf_conntrack)", "ok: [controller-2] => (item=nf_conntrack)", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:20:16 +0000 (0:00:01.337) 0:00:44.993 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:20:16 +0000 (0:00:00.362) 0:00:45.356 *********", "ok: [controller-1] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://dl.k8s.io/release/v1.34.0/bin/linux/amd64/kubelet\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:20:16 +0000 (0:00:00.073) 0:00:45.429 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:20:17 +0000 (0:00:00.481) 0:00:45.911 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Gather variables for each operating system] ***", "Tuesday 17 March 2026 16:20:17 +0000 (0:00:00.077) 0:00:45.988 *********", "ok: [controller-1] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "ok: [controller-2] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "ok: [controller-3] => (item=/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/vars/debian.yml)", "", "TASK [vexxhost.kubernetes.kubelet : Install coreutils] *************************", "Tuesday 17 March 2026 16:20:17 +0000 (0:00:00.085) 0:00:46.074 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Install additional packages] ***************", "Tuesday 17 March 2026 16:20:17 +0000 (0:00:00.068) 0:00:46.143 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Configure sysctl values] *******************", "Tuesday 17 March 2026 16:20:18 +0000 (0:00:00.912) 0:00:47.055 *********", "ok: [controller-1] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "ok: [controller-3] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "ok: [controller-2] => (item={'name': 'net.ipv4.ip_forward', 'value': 1})", "ok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "ok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "ok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-iptables', 'value': 1})", "ok: [controller-1] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "ok: [controller-2] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "ok: [controller-3] => (item={'name': 'net.bridge.bridge-nf-call-ip6tables', 'value': 1})", "ok: [controller-1] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "ok: [controller-2] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "ok: [controller-3] => (item={'name': 'net.ipv4.conf.all.rp_filter', 'value': 0})", "ok: [controller-1] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "ok: [controller-2] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "ok: [controller-3] => (item={'name': 'fs.inotify.max_queued_events', 'value': 1048576})", "ok: [controller-1] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "ok: [controller-2] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "ok: [controller-3] => (item={'name': 'fs.inotify.max_user_instances', 'value': 8192})", "ok: [controller-1] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "ok: [controller-2] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "ok: [controller-3] => (item={'name': 'fs.inotify.max_user_watches', 'value': 1048576})", "", "TASK [vexxhost.kubernetes.kubelet : Create folders for kubernetes configuration] ***", "Tuesday 17 March 2026 16:20:20 +0000 (0:00:02.329) 0:00:49.385 *********", "ok: [controller-1] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller-2] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller-3] => (item=/etc/systemd/system/kubelet.service.d)", "ok: [controller-1] => (item=/etc/kubernetes)", "ok: [controller-2] => (item=/etc/kubernetes)", "ok: [controller-3] => (item=/etc/kubernetes)", "ok: [controller-1] => (item=/etc/kubernetes/manifests)", "ok: [controller-3] => (item=/etc/kubernetes/manifests)", "ok: [controller-2] => (item=/etc/kubernetes/manifests)", "", "TASK [vexxhost.kubernetes.kubelet : Add kubelet systemd service config] ********", "Tuesday 17 March 2026 16:20:21 +0000 (0:00:00.908) 0:00:50.294 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Add kubeadm dropin for kubelet systemd service config] ***", "Tuesday 17 March 2026 16:20:22 +0000 (0:00:00.739) 0:00:51.033 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Check swap status] *************************", "Tuesday 17 March 2026 16:20:23 +0000 (0:00:00.699) 0:00:51.732 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Disable swap] ******************************", "Tuesday 17 March 2026 16:20:23 +0000 (0:00:00.415) 0:00:52.147 *********", "[ERROR]: Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.", "", "Task failed.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:78:7", "", "76 register: kubelet_swapon", "77", "78 - name: Disable swap", " ^ column 7", "", "<<< caused by >>>", "", "Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.", "Origin: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11", "", "81 ignore_errors: \"{{ ansible_check_mode }}\"", "82 when:", "83 - kubelet_swapon.stdout", " ^ column 11", "", "Broken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.", "", "fatal: [controller-1]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "fatal: [controller-2]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "fatal: [controller-3]: FAILED! => {\"changed\": false, \"msg\": \"Task failed: Conditional result (False) was derived from value of type 'str' at '/home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubelet/tasks/main.yml:83:11'. Conditionals must have a boolean result.\"}", "...ignoring", "...ignoring", "...ignoring", "", "TASK [vexxhost.kubernetes.kubelet : Remove swapfile from /etc/fstab] ***********", "Tuesday 17 March 2026 16:20:23 +0000 (0:00:00.075) 0:00:52.223 *********", "ok: [controller-3] => (item=swap)", "ok: [controller-1] => (item=swap)", "ok: [controller-2] => (item=swap)", "ok: [controller-3] => (item=none)", "ok: [controller-1] => (item=none)", "ok: [controller-2] => (item=none)", "", "TASK [vexxhost.kubernetes.kubelet : Create noswap systemd service config file] ***", "Tuesday 17 March 2026 16:20:24 +0000 (0:00:00.815) 0:00:53.039 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Enable noswap service] *********************", "Tuesday 17 March 2026 16:20:24 +0000 (0:00:00.681) 0:00:53.720 *********", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:20:26 +0000 (0:00:01.500) 0:00:55.221 *********", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:20:26 +0000 (0:00:00.007) 0:00:55.229 *********", "", "TASK [vexxhost.kubernetes.kubelet : Force any restarts if necessary] ***********", "Tuesday 17 March 2026 16:20:26 +0000 (0:00:00.005) 0:00:55.234 *********", "", "TASK [vexxhost.kubernetes.kubelet : Enable and start kubelet service] **********", "Tuesday 17 March 2026 16:20:26 +0000 (0:00:00.005) 0:00:55.240 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure availability of dbus on Debian] *****", "Tuesday 17 March 2026 16:20:27 +0000 (0:00:00.531) 0:00:55.772 *********", "ok: [controller-3]", "ok: [controller-1]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.kubelet : Configure short hostname] ******************", "Tuesday 17 March 2026 16:20:28 +0000 (0:00:01.007) 0:00:56.779 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubelet : Ensure hostname inside hosts file] *********", "Tuesday 17 March 2026 16:20:28 +0000 (0:00:00.915) 0:00:57.694 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kubernetes repository] ***********", "Tuesday 17 March 2026 16:20:29 +0000 (0:00:00.480) 0:00:58.175 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup control plane] ********************", "Tuesday 17 March 2026 16:20:30 +0000 (0:00:00.587) 0:00:58.762 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/control-plane.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.kubernetes : Bootstrap cluster] **********************", "Tuesday 17 March 2026 16:20:30 +0000 (0:00:00.118) 0:00:58.881 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/kubernetes/tasks/bootstrap-cluster.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.kubernetes : Check if any control plane is bootstrapped] ***", "Tuesday 17 March 2026 16:20:30 +0000 (0:00:00.134) 0:00:59.016 *********", "ok: [controller-1] => (item=controller-1)", "ok: [controller-2 -> controller-1(199.19.213.74)] => (item=controller-1)", "ok: [controller-3 -> controller-1(199.19.213.74)] => (item=controller-1)", "ok: [controller-1 -> controller-2(199.19.213.210)] => (item=controller-2)", "ok: [controller-2] => (item=controller-2)", "ok: [controller-3 -> controller-2(199.19.213.210)] => (item=controller-2)", "ok: [controller-1 -> controller-3(199.19.213.235)] => (item=controller-3)", "ok: [controller-2 -> controller-3(199.19.213.235)] => (item=controller-3)", "ok: [controller-3] => (item=controller-3)", "", "TASK [vexxhost.kubernetes.kubernetes : Pick node from pre-existing cluster] ****", "Tuesday 17 March 2026 16:20:31 +0000 (0:00:00.951) 0:00:59.968 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Select first node to initialize cluster] ***", "Tuesday 17 March 2026 16:20:31 +0000 (0:00:00.085) 0:01:00.053 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Print selected bootstrap node] **********", "Tuesday 17 March 2026 16:20:31 +0000 (0:00:00.073) 0:01:00.126 *********", "ok: [controller-1] => {", " \"msg\": \"controller-1\"", "}", "ok: [controller-2] => {", " \"msg\": \"controller-1\"", "}", "ok: [controller-3] => {", " \"msg\": \"controller-1\"", "}", "", "TASK [vexxhost.kubernetes.kubernetes : Upload cluster configuration for bootstrap node] ***", "Tuesday 17 March 2026 16:20:31 +0000 (0:00:00.072) 0:01:00.199 *********", "skipping: [controller-2]", "skipping: [controller-3]", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Create pki folder] **********************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.670) 0:01:00.869 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca key] ***************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.064) 0:01:00.933 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create kubernetes ca cert] **************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.065) 0:01:00.999 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca key] *********************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.064) 0:01:01.064 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create etcd-ca cert] ********************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.067) 0:01:01.131 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca key] **************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.070) 0:01:01.201 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create front-proxy-ca cert] *************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.070) 0:01:01.272 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Initialize cluster] *********************", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.065) 0:01:01.337 *********", "ok: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the node is already part of the cluster] ***", "Tuesday 17 March 2026 16:20:32 +0000 (0:00:00.335) 0:01:01.672 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Join cluster] ***************************", "Tuesday 17 March 2026 16:20:33 +0000 (0:00:00.340) 0:01:02.012 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Create folder for admin configuration] ***", "Tuesday 17 March 2026 16:20:33 +0000 (0:00:00.066) 0:01:02.079 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Creating a symlink for admin configuration file] ***", "Tuesday 17 March 2026 16:20:33 +0000 (0:00:00.342) 0:01:02.421 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Add bash autocomplete for kubectl] ******", "Tuesday 17 March 2026 16:20:34 +0000 (0:00:00.345) 0:01:02.766 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Install PIP] ****************************", "Tuesday 17 March 2026 16:20:34 +0000 (0:00:00.337) 0:01:03.104 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using pip on supported systems] ***", "Tuesday 17 March 2026 16:20:34 +0000 (0:00:00.069) 0:01:03.173 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Enable EPEL repository] *****************", "Tuesday 17 March 2026 16:20:34 +0000 (0:00:00.072) 0:01:03.246 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Install Kubernetes Python package using package manager on supported systems] ***", "Tuesday 17 March 2026 16:20:34 +0000 (0:00:00.074) 0:01:03.320 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Allow workload on control plane node] ***", "Tuesday 17 March 2026 16:20:35 +0000 (0:00:01.124) 0:01:04.445 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Remove kube-proxy resources] ************", "Tuesday 17 March 2026 16:20:36 +0000 (0:00:00.846) 0:01:05.292 *********", "skipping: [controller-1] => (item=DaemonSet)", "skipping: [controller-1] => (item=ConfigMap)", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Start an upgrade] ***********************", "Tuesday 17 March 2026 16:20:36 +0000 (0:00:00.043) 0:01:05.336 *********", "skipping: [controller-1]", "", "TASK [vexxhost.kubernetes.kubernetes : Check if the Kubernetes API services is up to date] ***", "Tuesday 17 March 2026 16:20:36 +0000 (0:00:00.039) 0:01:05.375 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Trigger an upgrade of the Kubernetes API services] ***", "Tuesday 17 March 2026 16:20:36 +0000 (0:00:00.070) 0:01:05.446 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Setup nodes] ****************************", "Tuesday 17 March 2026 16:20:36 +0000 (0:00:00.092) 0:01:05.538 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed)] ***", "Tuesday 17 March 2026 16:20:36 +0000 (0:00:00.063) 0:01:05.602 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.kubernetes : Set node selector for CoreDNS components] ***", "Tuesday 17 March 2026 16:20:38 +0000 (0:00:01.309) 0:01:06.911 *********", "ok: [controller-1]", "", "PLAY [Install control-plane components] ****************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:20:39 +0000 (0:00:01.003) 0:01:07.915 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.containers.forget_package : Forget package] *********************", "Tuesday 17 March 2026 16:20:41 +0000 (0:00:02.003) 0:01:09.919 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.package : Update state for tar] **********************", "Tuesday 17 March 2026 16:20:41 +0000 (0:00:00.353) 0:01:10.272 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.directory : Create directory (/var/lib/downloads)] ***", "Tuesday 17 March 2026 16:20:42 +0000 (0:00:00.948) 0:01:11.221 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:20:42 +0000 (0:00:00.348) 0:01:11.570 *********", "ok: [controller-1] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://get.helm.sh/helm-v3.11.2-linux-amd64.tar.gz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:20:42 +0000 (0:00:00.073) 0:01:11.643 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:20:43 +0000 (0:00:00.442) 0:01:12.086 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm repository] ***********************", "Tuesday 17 March 2026 16:20:44 +0000 (0:00:01.495) 0:01:13.582 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Add bash autocomplete for helm] ***************", "Tuesday 17 March 2026 16:20:45 +0000 (0:00:00.396) 0:01:13.978 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Get Helm plugins dir] *************************", "Tuesday 17 March 2026 16:20:45 +0000 (0:00:00.323) 0:01:14.302 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Create Helm plugins directory if it does not exist] ***", "Tuesday 17 March 2026 16:20:45 +0000 (0:00:00.382) 0:01:14.685 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.helm : Remove Helm diff plugin installed by kubernetes.core.helm_plugin] ***", "Tuesday 17 March 2026 16:20:46 +0000 (0:00:00.320) 0:01:15.005 *********", "ok: [controller-1]", "ok: [controller-3]", "ok: [controller-2]", "", "TASK [Install plugin] **********************************************************", "Tuesday 17 March 2026 16:20:46 +0000 (0:00:00.364) 0:01:15.369 *********", "included: vexxhost.containers.download_artifact for controller-1, controller-2, controller-3", "", "TASK [vexxhost.containers.download_artifact : Starting download of file] *******", "Tuesday 17 March 2026 16:20:46 +0000 (0:00:00.094) 0:01:15.464 *********", "ok: [controller-1] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "ok: [controller-2] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "ok: [controller-3] => {", " \"msg\": \"https://github.com/databus23/helm-diff/releases/download/v3.8.1/helm-diff-linux-amd64.tgz\"", "}", "", "TASK [vexxhost.containers.download_artifact : Download item] *******************", "Tuesday 17 March 2026 16:20:46 +0000 (0:00:00.063) 0:01:15.527 *********", "ok: [controller-2]", "ok: [controller-1]", "ok: [controller-3]", "", "TASK [vexxhost.containers.download_artifact : Extract archive] *****************", "Tuesday 17 March 2026 16:20:47 +0000 (0:00:00.468) 0:01:15.996 *********", "ok: [controller-1]", "ok: [controller-2]", "ok: [controller-3]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Tuesday 17 March 2026 16:20:48 +0000 (0:00:01.725) 0:01:17.721 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Tuesday 17 March 2026 16:20:49 +0000 (0:00:00.112) 0:01:17.834 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.cilium : Get current Kubernetes version] *************", "Tuesday 17 March 2026 16:20:49 +0000 (0:00:00.740) 0:01:18.575 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.cilium : Deploy Helm chart] **************************", "Tuesday 17 March 2026 16:20:50 +0000 (0:00:00.995) 0:01:19.571 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Include help chart upload method tasks] ***", "Tuesday 17 March 2026 16:20:52 +0000 (0:00:01.798) 0:01:21.369 *********", "included: /home/zuul/.ansible/collections/ansible_collections/vexxhost/kubernetes/roles/upload_helm_chart/tasks/synchronize.yml for controller-1, controller-2, controller-3", "", "TASK [vexxhost.kubernetes.upload_helm_chart : Upload Helm chart] ***************", "Tuesday 17 March 2026 16:20:52 +0000 (0:00:00.062) 0:01:21.432 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Deploy Helm chart] *******************", "Tuesday 17 March 2026 16:20:53 +0000 (0:00:00.629) 0:01:22.062 *********", "ok: [controller-1]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Capture envoy-gateway pod logs if helm failed] ***", "Tuesday 17 March 2026 16:20:55 +0000 (0:00:01.870) 0:01:23.933 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Print envoy-gateway pod logs] ********", "Tuesday 17 March 2026 16:20:55 +0000 (0:00:00.056) 0:01:23.989 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Fail with original helm error] *******", "Tuesday 17 March 2026 16:20:55 +0000 (0:00:00.056) 0:01:24.045 *********", "skipping: [controller-1]", "skipping: [controller-2]", "skipping: [controller-3]", "", "TASK [vexxhost.kubernetes.envoy_gateway : Create GatewayClass] *****************", "Tuesday 17 March 2026 16:20:55 +0000 (0:00:00.054) 0:01:24.100 *********", "ok: [controller-1]", "", "PLAY RECAP *********************************************************************", "controller-1 : ok=117 changed=0 unreachable=0 failed=0 skipped=33 rescued=0 ignored=1", "controller-2 : ok=103 changed=0 unreachable=0 failed=0 skipped=34 rescued=0 ignored=1", "controller-3 : ok=103 changed=0 unreachable=0 failed=0 skipped=34 rescued=0 ignored=1", "", "", "TASKS RECAP ********************************************************************", "Tuesday 17 March 2026 16:20:56 +0000 (0:00:00.823) 0:01:24.924 *********", "===============================================================================", "vexxhost.containers.download_artifact : Extract archive ----------------- 3.34s", "vexxhost.containers.download_artifact : Extract archive ----------------- 3.32s", "vexxhost.kubernetes.kubelet : Configure sysctl values ------------------- 2.33s", "Gathering Facts --------------------------------------------------------- 2.19s", "vexxhost.containers.package : Update state for tar ---------------------- 2.01s", "Gathering Facts --------------------------------------------------------- 2.00s", "Gathering Facts --------------------------------------------------------- 2.00s", "vexxhost.kubernetes.envoy_gateway : Deploy Helm chart ------------------- 1.87s", "vexxhost.kubernetes.cilium : Deploy Helm chart -------------------------- 1.80s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.73s", "vexxhost.kubernetes.kube_vip : Uninstall legacy HA stack ---------------- 1.57s", "vexxhost.containers.containerd : Enable and start service --------------- 1.50s", "vexxhost.kubernetes.kubelet : Enable noswap service --------------------- 1.50s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.50s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.49s", "vexxhost.containers.containerd : Create folders for configuration ------- 1.48s", "vexxhost.containers.containerd : Create folders for configuration ------- 1.48s", "vexxhost.containers.download_artifact : Extract archive ----------------- 1.45s", "vexxhost.containers.cni_plugins : Enable kernel modules in runtime ------ 1.34s", "vexxhost.kubernetes.kubernetes : Upgrade & restart Kubelet node for upgrade (if needed) --- 1.31s", "INFO [cluster-upgrade > idempotence] Executed: Successful", "INFO [cluster-upgrade > side_effect] Executing", "WARNING [cluster-upgrade > side_effect] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [cluster-upgrade > verify] Executing", "", "PLAY [Verify] ******************************************************************", "", "TASK [Gathering Facts] *********************************************************", "Tuesday 17 March 2026 16:20:57 +0000 (0:00:00.009) 0:00:00.009 *********", "[WARNING]: Host 'controller-3' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-2' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "[WARNING]: Host 'controller-1' is using the discovered Python interpreter at '/usr/bin/python3.13', but future installation of another Python interpreter could cause a different interpreter to be discovered. See https://docs.ansible.com/ansible-core/2.20/reference_appendices/interpreter_discovery.html for more information.", "ok: [controller-3]", "ok: [controller-2]", "ok: [controller-1]", "", "TASK [Search for all Cilium pods] **********************************************", "Tuesday 17 March 2026 16:20:59 +0000 (0:00:02.256) 0:00:02.266 *********", "ok: [controller-1]", "", "TASK [Verify Cilium operator pods have not been restarted] *********************", "Tuesday 17 March 2026 16:21:00 +0000 (0:00:00.980) 0:00:03.246 *********", "ok: [controller-1] => (item={'metadata': {'name': 'cilium-gdv57', 'generateName': 'cilium-', 'namespace': 'kube-system', 'uid': 'af3a298f-2aa7-492f-b9ef-f370ddb55ecc', 'resourceVersion': '4691', 'generation': 1, 'creationTimestamp': '2026-03-17T16:07:07Z', 'labels': {'app.kubernetes.io/name': 'cilium-agent', 'app.kubernetes.io/part-of': 'cilium', 'controller-revision-hash': 'f8b6c767c', 'k8s-app': 'cilium', 'pod-template-generation': '1'}, 'annotations': {'container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/cilium-agent': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/clean-cilium-state': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/mount-cgroup': 'unconfined'}, 'ownerReferences': [{'apiVersion': 'apps/v1', 'kind': 'DaemonSet', 'name': 'cilium', 'uid': 'd9698def-91cb-4d80-b757-fcff33e36771', 'controller': True, 'blockOwnerDeletion': True}], 'managedFields': [{'manager': 'kube-controller-manager', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:07:07Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:metadata': {'f:annotations': {'.': {}, 'f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': {}, 'f:container.apparmor.security.beta.kubernetes.io/cilium-agent': {}, 'f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state': {}, 'f:container.apparmor.security.beta.kubernetes.io/mount-cgroup': {}}, 'f:generateName': {}, 'f:labels': {'.': {}, 'f:app.kubernetes.io/name': {}, 'f:app.kubernetes.io/part-of': {}, 'f:controller-revision-hash': {}, 'f:k8s-app': {}, 'f:pod-template-generation': {}}, 'f:ownerReferences': {'.': {}, 'k:{\"uid\":\"d9698def-91cb-4d80-b757-fcff33e36771\"}': {}}}, 'f:spec': {'f:affinity': {'.': {}, 'f:nodeAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}, 'f:podAntiAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}}, 'f:automountServiceAccountToken': {}, 'f:containers': {'k:{\"name\":\"cilium-agent\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_CLUSTERMESH_CONFIG\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:lifecycle': {'.': {}, 'f:postStart': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}, 'f:preStop': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}}, 'f:livenessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:name': {}, 'f:readinessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:startupProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/etc/cni/net.d\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/kernel\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/net\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/lib/modules\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/run/xtables.lock\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/lib/cilium/clustermesh\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:dnsPolicy': {}, 'f:enableServiceLinks': {}, 'f:hostNetwork': {}, 'f:initContainers': {'.': {}, 'k:{\"name\":\"apply-sysctl-overwrites\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"clean-cilium-state\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_ALL_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}, 'k:{\"name\":\"CILIUM_BPF_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/run/cilium/cgroupv2\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"config\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"install-cni-binaries\"}': {'.': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {'.': {}, 'f:requests': {'.': {}, 'f:cpu': {}, 'f:memory': {}}}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/opt/cni/bin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-bpf-fs\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:privileged': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-cgroup\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CGROUP_ROOT\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:nodeSelector': {}, 'f:priorityClassName': {}, 'f:restartPolicy': {}, 'f:schedulerName': {}, 'f:securityContext': {}, 'f:serviceAccount': {}, 'f:serviceAccountName': {}, 'f:terminationGracePeriodSeconds': {}, 'f:tolerations': {}, 'f:volumes': {'.': {}, 'k:{\"name\":\"bpf-maps\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-cgroup\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-run\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"clustermesh-secrets\"}': {'.': {}, 'f:name': {}, 'f:projected': {'.': {}, 'f:defaultMode': {}, 'f:sources': {}}}, 'k:{\"name\":\"cni-path\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"etc-cni-netd\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-kernel\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-net\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"hostproc\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"lib-modules\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"tmp\"}': {'.': {}, 'f:emptyDir': {}, 'f:name': {}}, 'k:{\"name\":\"xtables-lock\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}}}}}, {'manager': 'kubelet', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:19:31Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:status': {'f:conditions': {'k:{\"type\":\"ContainersReady\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"Initialized\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodReadyToStartContainers\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodScheduled\"}': {'f:observedGeneration': {}}, 'k:{\"type\":\"Ready\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}}, 'f:containerStatuses': {}, 'f:hostIP': {}, 'f:hostIPs': {}, 'f:initContainerStatuses': {}, 'f:observedGeneration': {}, 'f:phase': {}, 'f:podIP': {}, 'f:podIPs': {'.': {}, 'k:{\"ip\":\"199.19.213.210\"}': {'.': {}, 'f:ip': {}}}, 'f:startTime': {}}}, 'subresource': 'status'}]}, 'spec': {'volumes': [{'name': 'tmp', 'emptyDir': {}}, {'name': 'cilium-run', 'hostPath': {'path': '/var/run/cilium', 'type': 'DirectoryOrCreate'}}, {'name': 'bpf-maps', 'hostPath': {'path': '/sys/fs/bpf', 'type': 'DirectoryOrCreate'}}, {'name': 'hostproc', 'hostPath': {'path': '/proc', 'type': 'Directory'}}, {'name': 'cilium-cgroup', 'hostPath': {'path': '/run/cilium/cgroupv2', 'type': 'DirectoryOrCreate'}}, {'name': 'cni-path', 'hostPath': {'path': '/opt/cni/bin', 'type': 'DirectoryOrCreate'}}, {'name': 'etc-cni-netd', 'hostPath': {'path': '/etc/cni/net.d', 'type': 'DirectoryOrCreate'}}, {'name': 'lib-modules', 'hostPath': {'path': '/lib/modules', 'type': ''}}, {'name': 'xtables-lock', 'hostPath': {'path': '/run/xtables.lock', 'type': 'FileOrCreate'}}, {'name': 'clustermesh-secrets', 'projected': {'sources': [{'secret': {'name': 'cilium-clustermesh', 'optional': True}}, {'secret': {'name': 'clustermesh-apiserver-remote-cert', 'items': [{'key': 'tls.key', 'path': 'common-etcd-client.key'}, {'key': 'tls.crt', 'path': 'common-etcd-client.crt'}, {'key': 'ca.crt', 'path': 'common-etcd-client-ca.crt'}], 'optional': True}}], 'defaultMode': 256}}, {'name': 'host-proc-sys-net', 'hostPath': {'path': '/proc/sys/net', 'type': 'Directory'}}, {'name': 'host-proc-sys-kernel', 'hostPath': {'path': '/proc/sys/kernel', 'type': 'Directory'}}, {'name': 'kube-api-access-kmjmg', 'projected': {'sources': [{'serviceAccountToken': {'expirationSeconds': 3607, 'path': 'token'}}, {'configMap': {'name': 'kube-root-ca.crt', 'items': [{'key': 'ca.crt', 'path': 'ca.crt'}]}}, {'downwardAPI': {'items': [{'path': 'namespace', 'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}]}}], 'defaultMode': 420}}], 'initContainers': [{'name': 'config', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium', 'build-config'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}], 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent'}, {'name': 'mount-cgroup', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-mount\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n'], 'env': [{'name': 'CGROUP_ROOT', 'value': '/run/cilium/cgroupv2'}, {'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'apply-sysctl-overwrites', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-sysctlfix\";\\nrm /hostbin/cilium-sysctlfix\\n'], 'env': [{'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'mount-bpf-fs', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/bin/bash', '-c', '--'], 'args': ['mount | grep \"/sys/fs/bpf type bpf\" || mount -t bpf bpf /sys/fs/bpf'], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'Bidirectional'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'privileged': True}}, {'name': 'clean-cilium-state', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/init-container.sh'], 'env': [{'name': 'CILIUM_ALL_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-state', 'optional': True}}}, {'name': 'CILIUM_BPF_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-bpf-state', 'optional': True}}}], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['NET_ADMIN', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'install-cni-binaries', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/install-plugin.sh'], 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}}}], 'containers': [{'name': 'cilium-agent', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium-agent'], 'args': ['--config-dir=/tmp/cilium/config-map'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}, {'name': 'CILIUM_CLUSTERMESH_CONFIG', 'value': '/var/lib/cilium/clustermesh/'}], 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'readOnly': True, 'mountPath': '/var/lib/cilium/clustermesh'}, {'name': 'lib-modules', 'readOnly': True, 'mountPath': '/lib/modules'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'livenessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 10}, 'readinessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 3}, 'startupProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 1, 'periodSeconds': 2, 'successThreshold': 1, 'failureThreshold': 105}, 'lifecycle': {'postStart': {'exec': {'command': ['bash', '-c', 'set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it\\'s likely that \\'aws-node\\' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a \\'postStart\\' hook since this may need to run\\n# for nodes which might have already been init\\'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \"$(iptables-save | grep -E -c \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\')\" != \"0\" ]];\\nthen\\n echo \\'Deleting iptables rules created by the AWS CNI VPC plugin\\'\\n iptables-save | grep -E -v \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\' | iptables-restore\\nfi\\necho \\'Done!\\'\\n']}}, 'preStop': {'exec': {'command': ['/cni-uninstall.sh']}}}, 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['CHOWN', 'KILL', 'NET_ADMIN', 'NET_RAW', 'IPC_LOCK', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE', 'DAC_OVERRIDE', 'FOWNER', 'SETGID', 'SETUID'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}], 'restartPolicy': 'Always', 'terminationGracePeriodSeconds': 1, 'dnsPolicy': 'ClusterFirst', 'nodeSelector': {'kubernetes.io/os': 'linux'}, 'serviceAccountName': 'cilium', 'serviceAccount': 'cilium', 'automountServiceAccountToken': True, 'nodeName': 'controller-2', 'hostNetwork': True, 'securityContext': {}, 'affinity': {'nodeAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': {'nodeSelectorTerms': [{'matchFields': [{'key': 'metadata.name', 'operator': 'In', 'values': ['controller-2']}]}]}}, 'podAntiAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': [{'labelSelector': {'matchLabels': {'k8s-app': 'cilium'}}, 'topologyKey': 'kubernetes.io/hostname'}]}}, 'schedulerName': 'default-scheduler', 'tolerations': [{'operator': 'Exists'}, {'key': 'node.kubernetes.io/not-ready', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/unreachable', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/disk-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/memory-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/pid-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/unschedulable', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/network-unavailable', 'operator': 'Exists', 'effect': 'NoSchedule'}], 'priorityClassName': 'system-node-critical', 'priority': 2000001000, 'enableServiceLinks': True, 'preemptionPolicy': 'PreemptLowerPriority'}, 'status': {'observedGeneration': 1, 'phase': 'Running', 'conditions': [{'type': 'PodReadyToStartContainers', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:17Z'}, {'type': 'Initialized', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:25Z'}, {'type': 'Ready', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:09Z'}, {'type': 'ContainersReady', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:09Z'}, {'type': 'PodScheduled', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:07Z'}], 'hostIP': '199.19.213.210', 'hostIPs': [{'ip': '199.19.213.210'}], 'podIP': '199.19.213.210', 'podIPs': [{'ip': '199.19.213.210'}], 'startTime': '2026-03-17T16:07:07Z', 'initContainerStatuses': [{'name': 'config', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:17Z', 'finishedAt': '2026-03-17T16:07:17Z', 'containerID': 'containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-cgroup', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:20Z', 'finishedAt': '2026-03-17T16:07:20Z', 'containerID': 'containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'apply-sysctl-overwrites', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:21Z', 'finishedAt': '2026-03-17T16:07:21Z', 'containerID': 'containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-bpf-fs', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:22Z', 'finishedAt': '2026-03-17T16:07:22Z', 'containerID': 'containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'clean-cilium-state', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:23Z', 'finishedAt': '2026-03-17T16:07:23Z', 'containerID': 'containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'install-cni-binaries', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:24Z', 'finishedAt': '2026-03-17T16:07:24Z', 'containerID': 'containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486', 'started': False, 'allocatedResources': {'cpu': '100m', 'memory': '10Mi'}, 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'containerStatuses': [{'name': 'cilium-agent', 'state': {'running': {'startedAt': '2026-03-17T16:07:25Z'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://56a83dcd2323adebd2c986a7eec3e95def81cae723e8c9b1923e7d95931dc20b', 'started': True, 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'mountPath': '/var/lib/cilium/clustermesh', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'lib-modules', 'mountPath': '/lib/modules', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-kmjmg', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'qosClass': 'Burstable'}, 'apiVersion': 'v1', 'kind': 'Pod'}) => {", " \"ansible_loop_var\": \"item\",", " \"changed\": false,", " \"item\": {", " \"apiVersion\": \"v1\",", " \"kind\": \"Pod\",", " \"metadata\": {", " \"annotations\": {", " \"container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/cilium-agent\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/mount-cgroup\": \"unconfined\"", " },", " \"creationTimestamp\": \"2026-03-17T16:07:07Z\",", " \"generateName\": \"cilium-\",", " \"generation\": 1,", " \"labels\": {", " \"app.kubernetes.io/name\": \"cilium-agent\",", " \"app.kubernetes.io/part-of\": \"cilium\",", " \"controller-revision-hash\": \"f8b6c767c\",", " \"k8s-app\": \"cilium\",", " \"pod-template-generation\": \"1\"", " },", " \"managedFields\": [", " {", " \"apiVersion\": \"v1\",", " \"fieldsType\": \"FieldsV1\",", " \"fieldsV1\": {", " \"f:metadata\": {", " \"f:annotations\": {", " \".\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/cilium-agent\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/mount-cgroup\": {}", " },", " \"f:generateName\": {},", " \"f:labels\": {", " \".\": {},", " \"f:app.kubernetes.io/name\": {},", " \"f:app.kubernetes.io/part-of\": {},", " \"f:controller-revision-hash\": {},", " \"f:k8s-app\": {},", " \"f:pod-template-generation\": {}", " },", " \"f:ownerReferences\": {", " \".\": {},", " \"k:{\\\"uid\\\":\\\"d9698def-91cb-4d80-b757-fcff33e36771\\\"}\": {}", " }", " },", " \"f:spec\": {", " \"f:affinity\": {", " \".\": {},", " \"f:nodeAffinity\": {", " \".\": {},", " \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}", " },", " \"f:podAntiAffinity\": {", " \".\": {},", " \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}", " }", " },", " \"f:automountServiceAccountToken\": {},", " \"f:containers\": {", " \"k:{\\\"name\\\":\\\"cilium-agent\\\"}\": {", " \".\": {},", " \"f:args\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_CLUSTERMESH_CONFIG\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " },", " \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:lifecycle\": {", " \".\": {},", " \"f:postStart\": {", " \".\": {},", " \"f:exec\": {", " \".\": {},", " \"f:command\": {}", " }", " },", " \"f:preStop\": {", " \".\": {},", " \"f:exec\": {", " \".\": {},", " \"f:command\": {}", " }", " }", " },", " \"f:livenessProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:name\": {},", " \"f:readinessProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:startupProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/host/etc/cni/net.d\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/kernel\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/net\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/lib/modules\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {},", " \"f:readOnly\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/run/xtables.lock\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/lib/cilium/clustermesh\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {},", " \"f:readOnly\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " }", " },", " \"f:dnsPolicy\": {},", " \"f:enableServiceLinks\": {},", " \"f:hostNetwork\": {},", " \"f:initContainers\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"apply-sysctl-overwrites\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"clean-cilium-state\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_ALL_STATE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:configMapKeyRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"CILIUM_BPF_STATE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:configMapKeyRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/run/cilium/cgroupv2\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"config\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"install-cni-binaries\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {", " \".\": {},", " \"f:requests\": {", " \".\": {},", " \"f:cpu\": {},", " \"f:memory\": {}", " }", " },", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/host/opt/cni/bin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"mount-bpf-fs\\\"}\": {", " \".\": {},", " \"f:args\": {},", " \"f:command\": {},", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:privileged\": {}", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"mount-cgroup\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " },", " \"k:{\\\"name\\\":\\\"CGROUP_ROOT\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " }", " },", " \"f:nodeSelector\": {},", " \"f:priorityClassName\": {},", " \"f:restartPolicy\": {},", " \"f:schedulerName\": {},", " \"f:securityContext\": {},", " \"f:serviceAccount\": {},", " \"f:serviceAccountName\": {},", " \"f:terminationGracePeriodSeconds\": {},", " \"f:tolerations\": {},", " \"f:volumes\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"bpf-maps\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"cilium-cgroup\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"cilium-run\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"clustermesh-secrets\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:projected\": {", " \".\": {},", " \"f:defaultMode\": {},", " \"f:sources\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"cni-path\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"etc-cni-netd\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"host-proc-sys-kernel\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"host-proc-sys-net\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"hostproc\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"lib-modules\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"tmp\\\"}\": {", " \".\": {},", " \"f:emptyDir\": {},", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"xtables-lock\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " }", " }", " }", " },", " \"manager\": \"kube-controller-manager\",", " \"operation\": \"Update\",", " \"time\": \"2026-03-17T16:07:07Z\"", " },", " {", " \"apiVersion\": \"v1\",", " \"fieldsType\": \"FieldsV1\",", " \"fieldsV1\": {", " \"f:status\": {", " \"f:conditions\": {", " \"k:{\\\"type\\\":\\\"ContainersReady\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"Initialized\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"PodReadyToStartContainers\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"PodScheduled\\\"}\": {", " \"f:observedGeneration\": {}", " },", " \"k:{\\\"type\\\":\\\"Ready\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " }", " },", " \"f:containerStatuses\": {},", " \"f:hostIP\": {},", " \"f:hostIPs\": {},", " \"f:initContainerStatuses\": {},", " \"f:observedGeneration\": {},", " \"f:phase\": {},", " \"f:podIP\": {},", " \"f:podIPs\": {", " \".\": {},", " \"k:{\\\"ip\\\":\\\"199.19.213.210\\\"}\": {", " \".\": {},", " \"f:ip\": {}", " }", " },", " \"f:startTime\": {}", " }", " },", " \"manager\": \"kubelet\",", " \"operation\": \"Update\",", " \"subresource\": \"status\",", " \"time\": \"2026-03-17T16:19:31Z\"", " }", " ],", " \"name\": \"cilium-gdv57\",", " \"namespace\": \"kube-system\",", " \"ownerReferences\": [", " {", " \"apiVersion\": \"apps/v1\",", " \"blockOwnerDeletion\": true,", " \"controller\": true,", " \"kind\": \"DaemonSet\",", " \"name\": \"cilium\",", " \"uid\": \"d9698def-91cb-4d80-b757-fcff33e36771\"", " }", " ],", " \"resourceVersion\": \"4691\",", " \"uid\": \"af3a298f-2aa7-492f-b9ef-f370ddb55ecc\"", " },", " \"spec\": {", " \"affinity\": {", " \"nodeAffinity\": {", " \"requiredDuringSchedulingIgnoredDuringExecution\": {", " \"nodeSelectorTerms\": [", " {", " \"matchFields\": [", " {", " \"key\": \"metadata.name\",", " \"operator\": \"In\",", " \"values\": [", " \"controller-2\"", " ]", " }", " ]", " }", " ]", " }", " },", " \"podAntiAffinity\": {", " \"requiredDuringSchedulingIgnoredDuringExecution\": [", " {", " \"labelSelector\": {", " \"matchLabels\": {", " \"k8s-app\": \"cilium\"", " }", " },", " \"topologyKey\": \"kubernetes.io/hostname\"", " }", " ]", " }", " },", " \"automountServiceAccountToken\": true,", " \"containers\": [", " {", " \"args\": [", " \"--config-dir=/tmp/cilium/config-map\"", " ],", " \"command\": [", " \"cilium-agent\"", " ],", " \"env\": [", " {", " \"name\": \"K8S_NODE_NAME\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"spec.nodeName\"", " }", " }", " },", " {", " \"name\": \"CILIUM_K8S_NAMESPACE\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " }", " }", " },", " {", " \"name\": \"CILIUM_CLUSTERMESH_CONFIG\",", " \"value\": \"/var/lib/cilium/clustermesh/\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"lifecycle\": {", " \"postStart\": {", " \"exec\": {", " \"command\": [", " \"bash\",", " \"-c\",", " \"set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it's likely that 'aws-node' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a 'postStart' hook since this may need to run\\n# for nodes which might have already been init'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \\\"$(iptables-save | grep -E -c 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN')\\\" != \\\"0\\\" ]];\\nthen\\n echo 'Deleting iptables rules created by the AWS CNI VPC plugin'\\n iptables-save | grep -E -v 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN' | iptables-restore\\nfi\\necho 'Done!'\\n\"", " ]", " }", " },", " \"preStop\": {", " \"exec\": {", " \"command\": [", " \"/cni-uninstall.sh\"", " ]", " }", " }", " },", " \"livenessProbe\": {", " \"failureThreshold\": 10,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 30,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 5", " },", " \"name\": \"cilium-agent\",", " \"readinessProbe\": {", " \"failureThreshold\": 3,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 30,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 5", " },", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"CHOWN\",", " \"KILL\",", " \"NET_ADMIN\",", " \"NET_RAW\",", " \"IPC_LOCK\",", " \"SYS_MODULE\",", " \"SYS_ADMIN\",", " \"SYS_RESOURCE\",", " \"DAC_OVERRIDE\",", " \"FOWNER\",", " \"SETGID\",", " \"SETUID\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"startupProbe\": {", " \"failureThreshold\": 105,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 2,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 1", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/proc/sys/net\",", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"mountPath\": \"/host/proc/sys/kernel\",", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"mountPropagation\": \"HostToContainer\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/host/etc/cni/net.d\",", " \"name\": \"etc-cni-netd\"", " },", " {", " \"mountPath\": \"/var/lib/cilium/clustermesh\",", " \"name\": \"clustermesh-secrets\",", " \"readOnly\": true", " },", " {", " \"mountPath\": \"/lib/modules\",", " \"name\": \"lib-modules\",", " \"readOnly\": true", " },", " {", " \"mountPath\": \"/run/xtables.lock\",", " \"name\": \"xtables-lock\"", " },", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true", " }", " ]", " }", " ],", " \"dnsPolicy\": \"ClusterFirst\",", " \"enableServiceLinks\": true,", " \"hostNetwork\": true,", " \"initContainers\": [", " {", " \"command\": [", " \"cilium\",", " \"build-config\"", " ],", " \"env\": [", " {", " \"name\": \"K8S_NODE_NAME\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"spec.nodeName\"", " }", " }", " },", " {", " \"name\": \"CILIUM_K8S_NAMESPACE\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " }", " }", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"config\",", " \"resources\": {},", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"sh\",", " \"-ec\",", " \"cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-mount\\\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n\"", " ],", " \"env\": [", " {", " \"name\": \"CGROUP_ROOT\",", " \"value\": \"/run/cilium/cgroupv2\"", " },", " {", " \"name\": \"BIN_PATH\",", " \"value\": \"/opt/cni/bin\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"mount-cgroup\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"SYS_ADMIN\",", " \"SYS_CHROOT\",", " \"SYS_PTRACE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"sh\",", " \"-ec\",", " \"cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-sysctlfix\\\";\\nrm /hostbin/cilium-sysctlfix\\n\"", " ],", " \"env\": [", " {", " \"name\": \"BIN_PATH\",", " \"value\": \"/opt/cni/bin\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"apply-sysctl-overwrites\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"SYS_ADMIN\",", " \"SYS_CHROOT\",", " \"SYS_PTRACE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"args\": [", " \"mount | grep \\\"/sys/fs/bpf type bpf\\\" || mount -t bpf bpf /sys/fs/bpf\"", " ],", " \"command\": [", " \"/bin/bash\",", " \"-c\",", " \"--\"", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"mount-bpf-fs\",", " \"resources\": {},", " \"securityContext\": {", " \"privileged\": true", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"mountPropagation\": \"Bidirectional\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"/init-container.sh\"", " ],", " \"env\": [", " {", " \"name\": \"CILIUM_ALL_STATE\",", " \"valueFrom\": {", " \"configMapKeyRef\": {", " \"key\": \"clean-cilium-state\",", " \"name\": \"cilium-config\",", " \"optional\": true", " }", " }", " },", " {", " \"name\": \"CILIUM_BPF_STATE\",", " \"valueFrom\": {", " \"configMapKeyRef\": {", " \"key\": \"clean-cilium-bpf-state\",", " \"name\": \"cilium-config\",", " \"optional\": true", " }", " }", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"clean-cilium-state\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"NET_ADMIN\",", " \"SYS_MODULE\",", " \"SYS_ADMIN\",", " \"SYS_RESOURCE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/run/cilium/cgroupv2\",", " \"mountPropagation\": \"HostToContainer\",", " \"name\": \"cilium-cgroup\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"/install-plugin.sh\"", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"install-cni-binaries\",", " \"resources\": {", " \"requests\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " }", " },", " \"securityContext\": {", " \"capabilities\": {", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/opt/cni/bin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true", " }", " ]", " }", " ],", " \"nodeName\": \"controller-2\",", " \"nodeSelector\": {", " \"kubernetes.io/os\": \"linux\"", " },", " \"preemptionPolicy\": \"PreemptLowerPriority\",", " \"priority\": 2000001000,", " \"priorityClassName\": \"system-node-critical\",", " \"restartPolicy\": \"Always\",", " \"schedulerName\": \"default-scheduler\",", " \"securityContext\": {},", " \"serviceAccount\": \"cilium\",", " \"serviceAccountName\": \"cilium\",", " \"terminationGracePeriodSeconds\": 1,", " \"tolerations\": [", " {", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoExecute\",", " \"key\": \"node.kubernetes.io/not-ready\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoExecute\",", " \"key\": \"node.kubernetes.io/unreachable\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/disk-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/memory-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/pid-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/unschedulable\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/network-unavailable\",", " \"operator\": \"Exists\"", " }", " ],", " \"volumes\": [", " {", " \"emptyDir\": {},", " \"name\": \"tmp\"", " },", " {", " \"hostPath\": {", " \"path\": \"/var/run/cilium\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cilium-run\"", " },", " {", " \"hostPath\": {", " \"path\": \"/sys/fs/bpf\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"bpf-maps\"", " },", " {", " \"hostPath\": {", " \"path\": \"/proc\",", " \"type\": \"Directory\"", " },", " \"name\": \"hostproc\"", " },", " {", " \"hostPath\": {", " \"path\": \"/run/cilium/cgroupv2\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cilium-cgroup\"", " },", " {", " \"hostPath\": {", " \"path\": \"/opt/cni/bin\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cni-path\"", " },", " {", " \"hostPath\": {", " \"path\": \"/etc/cni/net.d\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"etc-cni-netd\"", " },", " {", " \"hostPath\": {", " \"path\": \"/lib/modules\",", " \"type\": \"\"", " },", " \"name\": \"lib-modules\"", " },", " {", " \"hostPath\": {", " \"path\": \"/run/xtables.lock\",", " \"type\": \"FileOrCreate\"", " },", " \"name\": \"xtables-lock\"", " },", " {", " \"name\": \"clustermesh-secrets\",", " \"projected\": {", " \"defaultMode\": 256,", " \"sources\": [", " {", " \"secret\": {", " \"name\": \"cilium-clustermesh\",", " \"optional\": true", " }", " },", " {", " \"secret\": {", " \"items\": [", " {", " \"key\": \"tls.key\",", " \"path\": \"common-etcd-client.key\"", " },", " {", " \"key\": \"tls.crt\",", " \"path\": \"common-etcd-client.crt\"", " },", " {", " \"key\": \"ca.crt\",", " \"path\": \"common-etcd-client-ca.crt\"", " }", " ],", " \"name\": \"clustermesh-apiserver-remote-cert\",", " \"optional\": true", " }", " }", " ]", " }", " },", " {", " \"hostPath\": {", " \"path\": \"/proc/sys/net\",", " \"type\": \"Directory\"", " },", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"hostPath\": {", " \"path\": \"/proc/sys/kernel\",", " \"type\": \"Directory\"", " },", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"name\": \"kube-api-access-kmjmg\",", " \"projected\": {", " \"defaultMode\": 420,", " \"sources\": [", " {", " \"serviceAccountToken\": {", " \"expirationSeconds\": 3607,", " \"path\": \"token\"", " }", " },", " {", " \"configMap\": {", " \"items\": [", " {", " \"key\": \"ca.crt\",", " \"path\": \"ca.crt\"", " }", " ],", " \"name\": \"kube-root-ca.crt\"", " }", " },", " {", " \"downwardAPI\": {", " \"items\": [", " {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " },", " \"path\": \"namespace\"", " }", " ]", " }", " }", " ]", " }", " }", " ]", " },", " \"status\": {", " \"conditions\": [", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:17Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"PodReadyToStartContainers\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:25Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"Initialized\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:19:09Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"Ready\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:19:09Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"ContainersReady\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:07Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"PodScheduled\"", " }", " ],", " \"containerStatuses\": [", " {", " \"containerID\": \"containerd://56a83dcd2323adebd2c986a7eec3e95def81cae723e8c9b1923e7d95931dc20b\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"cilium-agent\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": true,", " \"state\": {", " \"running\": {", " \"startedAt\": \"2026-03-17T16:07:25Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/proc/sys/net\",", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"mountPath\": \"/host/proc/sys/kernel\",", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/host/etc/cni/net.d\",", " \"name\": \"etc-cni-netd\"", " },", " {", " \"mountPath\": \"/var/lib/cilium/clustermesh\",", " \"name\": \"clustermesh-secrets\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " },", " {", " \"mountPath\": \"/lib/modules\",", " \"name\": \"lib-modules\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " },", " {", " \"mountPath\": \"/run/xtables.lock\",", " \"name\": \"xtables-lock\"", " },", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " }", " ],", " \"hostIP\": \"199.19.213.210\",", " \"hostIPs\": [", " {", " \"ip\": \"199.19.213.210\"", " }", " ],", " \"initContainerStatuses\": [", " {", " \"containerID\": \"containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"config\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://ad6bdefca1174f89090e25d334ead0131d1e0d8418d427c8359ede41bdad8207\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:17Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:17Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"mount-cgroup\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://6a588df6942d0b3d357e2b2f98e9e21d80d1ce5dd20bb8966ce2a56360350465\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:20Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:20Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"apply-sysctl-overwrites\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://135eaad3e94c8f5d3f9c53530ecb8f80a45c1e3acd4f0c82483beebaede72930\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:21Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:21Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"mount-bpf-fs\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://34915760d709a172b55798d997a219d1e2dd4754206019df60353a55465ef83e\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:22Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:22Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"clean-cilium-state\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://5eaf5e1f8c94326745735a6ba2def1d8b9bb6b415355ecd12cf01985a8774723\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:23Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:23Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/run/cilium/cgroupv2\",", " \"name\": \"cilium-cgroup\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"allocatedResources\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " },", " \"containerID\": \"containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"install-cni-binaries\",", " \"ready\": true,", " \"resources\": {", " \"requests\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " }", " },", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://41f88511fd9a1cda06680ce46487d761c7a9d9ab28b34de44f39e13206112486\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:24Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:24Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/opt/cni/bin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-kmjmg\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " }", " ],", " \"observedGeneration\": 1,", " \"phase\": \"Running\",", " \"podIP\": \"199.19.213.210\",", " \"podIPs\": [", " {", " \"ip\": \"199.19.213.210\"", " }", " ],", " \"qosClass\": \"Burstable\",", " \"startTime\": \"2026-03-17T16:07:07Z\"", " }", " },", " \"msg\": \"Cilium pods have not been restarted\"", "}", "ok: [controller-1] => (item={'metadata': {'name': 'cilium-kl6qt', 'generateName': 'cilium-', 'namespace': 'kube-system', 'uid': '07358b1c-f861-47f5-97d9-e53ccc91588a', 'resourceVersion': '4789', 'generation': 1, 'creationTimestamp': '2026-03-17T16:07:07Z', 'labels': {'app.kubernetes.io/name': 'cilium-agent', 'app.kubernetes.io/part-of': 'cilium', 'controller-revision-hash': 'f8b6c767c', 'k8s-app': 'cilium', 'pod-template-generation': '1'}, 'annotations': {'container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/cilium-agent': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/clean-cilium-state': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/mount-cgroup': 'unconfined'}, 'ownerReferences': [{'apiVersion': 'apps/v1', 'kind': 'DaemonSet', 'name': 'cilium', 'uid': 'd9698def-91cb-4d80-b757-fcff33e36771', 'controller': True, 'blockOwnerDeletion': True}], 'managedFields': [{'manager': 'kube-controller-manager', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:07:07Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:metadata': {'f:annotations': {'.': {}, 'f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': {}, 'f:container.apparmor.security.beta.kubernetes.io/cilium-agent': {}, 'f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state': {}, 'f:container.apparmor.security.beta.kubernetes.io/mount-cgroup': {}}, 'f:generateName': {}, 'f:labels': {'.': {}, 'f:app.kubernetes.io/name': {}, 'f:app.kubernetes.io/part-of': {}, 'f:controller-revision-hash': {}, 'f:k8s-app': {}, 'f:pod-template-generation': {}}, 'f:ownerReferences': {'.': {}, 'k:{\"uid\":\"d9698def-91cb-4d80-b757-fcff33e36771\"}': {}}}, 'f:spec': {'f:affinity': {'.': {}, 'f:nodeAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}, 'f:podAntiAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}}, 'f:automountServiceAccountToken': {}, 'f:containers': {'k:{\"name\":\"cilium-agent\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_CLUSTERMESH_CONFIG\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:lifecycle': {'.': {}, 'f:postStart': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}, 'f:preStop': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}}, 'f:livenessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:name': {}, 'f:readinessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:startupProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/etc/cni/net.d\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/kernel\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/net\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/lib/modules\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/run/xtables.lock\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/lib/cilium/clustermesh\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:dnsPolicy': {}, 'f:enableServiceLinks': {}, 'f:hostNetwork': {}, 'f:initContainers': {'.': {}, 'k:{\"name\":\"apply-sysctl-overwrites\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"clean-cilium-state\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_ALL_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}, 'k:{\"name\":\"CILIUM_BPF_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/run/cilium/cgroupv2\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"config\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"install-cni-binaries\"}': {'.': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {'.': {}, 'f:requests': {'.': {}, 'f:cpu': {}, 'f:memory': {}}}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/opt/cni/bin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-bpf-fs\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:privileged': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-cgroup\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CGROUP_ROOT\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:nodeSelector': {}, 'f:priorityClassName': {}, 'f:restartPolicy': {}, 'f:schedulerName': {}, 'f:securityContext': {}, 'f:serviceAccount': {}, 'f:serviceAccountName': {}, 'f:terminationGracePeriodSeconds': {}, 'f:tolerations': {}, 'f:volumes': {'.': {}, 'k:{\"name\":\"bpf-maps\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-cgroup\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-run\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"clustermesh-secrets\"}': {'.': {}, 'f:name': {}, 'f:projected': {'.': {}, 'f:defaultMode': {}, 'f:sources': {}}}, 'k:{\"name\":\"cni-path\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"etc-cni-netd\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-kernel\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-net\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"hostproc\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"lib-modules\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"tmp\"}': {'.': {}, 'f:emptyDir': {}, 'f:name': {}}, 'k:{\"name\":\"xtables-lock\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}}}}}, {'manager': 'kubelet', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:19:36Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:status': {'f:conditions': {'k:{\"type\":\"ContainersReady\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"Initialized\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodReadyToStartContainers\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodScheduled\"}': {'f:observedGeneration': {}}, 'k:{\"type\":\"Ready\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}}, 'f:containerStatuses': {}, 'f:hostIP': {}, 'f:hostIPs': {}, 'f:initContainerStatuses': {}, 'f:observedGeneration': {}, 'f:phase': {}, 'f:podIP': {}, 'f:podIPs': {'.': {}, 'k:{\"ip\":\"199.19.213.235\"}': {'.': {}, 'f:ip': {}}}, 'f:startTime': {}}}, 'subresource': 'status'}]}, 'spec': {'volumes': [{'name': 'tmp', 'emptyDir': {}}, {'name': 'cilium-run', 'hostPath': {'path': '/var/run/cilium', 'type': 'DirectoryOrCreate'}}, {'name': 'bpf-maps', 'hostPath': {'path': '/sys/fs/bpf', 'type': 'DirectoryOrCreate'}}, {'name': 'hostproc', 'hostPath': {'path': '/proc', 'type': 'Directory'}}, {'name': 'cilium-cgroup', 'hostPath': {'path': '/run/cilium/cgroupv2', 'type': 'DirectoryOrCreate'}}, {'name': 'cni-path', 'hostPath': {'path': '/opt/cni/bin', 'type': 'DirectoryOrCreate'}}, {'name': 'etc-cni-netd', 'hostPath': {'path': '/etc/cni/net.d', 'type': 'DirectoryOrCreate'}}, {'name': 'lib-modules', 'hostPath': {'path': '/lib/modules', 'type': ''}}, {'name': 'xtables-lock', 'hostPath': {'path': '/run/xtables.lock', 'type': 'FileOrCreate'}}, {'name': 'clustermesh-secrets', 'projected': {'sources': [{'secret': {'name': 'cilium-clustermesh', 'optional': True}}, {'secret': {'name': 'clustermesh-apiserver-remote-cert', 'items': [{'key': 'tls.key', 'path': 'common-etcd-client.key'}, {'key': 'tls.crt', 'path': 'common-etcd-client.crt'}, {'key': 'ca.crt', 'path': 'common-etcd-client-ca.crt'}], 'optional': True}}], 'defaultMode': 256}}, {'name': 'host-proc-sys-net', 'hostPath': {'path': '/proc/sys/net', 'type': 'Directory'}}, {'name': 'host-proc-sys-kernel', 'hostPath': {'path': '/proc/sys/kernel', 'type': 'Directory'}}, {'name': 'kube-api-access-qkzsr', 'projected': {'sources': [{'serviceAccountToken': {'expirationSeconds': 3607, 'path': 'token'}}, {'configMap': {'name': 'kube-root-ca.crt', 'items': [{'key': 'ca.crt', 'path': 'ca.crt'}]}}, {'downwardAPI': {'items': [{'path': 'namespace', 'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}]}}], 'defaultMode': 420}}], 'initContainers': [{'name': 'config', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium', 'build-config'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}], 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent'}, {'name': 'mount-cgroup', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-mount\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n'], 'env': [{'name': 'CGROUP_ROOT', 'value': '/run/cilium/cgroupv2'}, {'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'apply-sysctl-overwrites', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-sysctlfix\";\\nrm /hostbin/cilium-sysctlfix\\n'], 'env': [{'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'mount-bpf-fs', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/bin/bash', '-c', '--'], 'args': ['mount | grep \"/sys/fs/bpf type bpf\" || mount -t bpf bpf /sys/fs/bpf'], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'Bidirectional'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'privileged': True}}, {'name': 'clean-cilium-state', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/init-container.sh'], 'env': [{'name': 'CILIUM_ALL_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-state', 'optional': True}}}, {'name': 'CILIUM_BPF_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-bpf-state', 'optional': True}}}], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['NET_ADMIN', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'install-cni-binaries', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/install-plugin.sh'], 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}}}], 'containers': [{'name': 'cilium-agent', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium-agent'], 'args': ['--config-dir=/tmp/cilium/config-map'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}, {'name': 'CILIUM_CLUSTERMESH_CONFIG', 'value': '/var/lib/cilium/clustermesh/'}], 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'readOnly': True, 'mountPath': '/var/lib/cilium/clustermesh'}, {'name': 'lib-modules', 'readOnly': True, 'mountPath': '/lib/modules'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'livenessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 10}, 'readinessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 3}, 'startupProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 1, 'periodSeconds': 2, 'successThreshold': 1, 'failureThreshold': 105}, 'lifecycle': {'postStart': {'exec': {'command': ['bash', '-c', 'set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it\\'s likely that \\'aws-node\\' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a \\'postStart\\' hook since this may need to run\\n# for nodes which might have already been init\\'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \"$(iptables-save | grep -E -c \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\')\" != \"0\" ]];\\nthen\\n echo \\'Deleting iptables rules created by the AWS CNI VPC plugin\\'\\n iptables-save | grep -E -v \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\' | iptables-restore\\nfi\\necho \\'Done!\\'\\n']}}, 'preStop': {'exec': {'command': ['/cni-uninstall.sh']}}}, 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['CHOWN', 'KILL', 'NET_ADMIN', 'NET_RAW', 'IPC_LOCK', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE', 'DAC_OVERRIDE', 'FOWNER', 'SETGID', 'SETUID'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}], 'restartPolicy': 'Always', 'terminationGracePeriodSeconds': 1, 'dnsPolicy': 'ClusterFirst', 'nodeSelector': {'kubernetes.io/os': 'linux'}, 'serviceAccountName': 'cilium', 'serviceAccount': 'cilium', 'automountServiceAccountToken': True, 'nodeName': 'controller-3', 'hostNetwork': True, 'securityContext': {}, 'affinity': {'nodeAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': {'nodeSelectorTerms': [{'matchFields': [{'key': 'metadata.name', 'operator': 'In', 'values': ['controller-3']}]}]}}, 'podAntiAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': [{'labelSelector': {'matchLabels': {'k8s-app': 'cilium'}}, 'topologyKey': 'kubernetes.io/hostname'}]}}, 'schedulerName': 'default-scheduler', 'tolerations': [{'operator': 'Exists'}, {'key': 'node.kubernetes.io/not-ready', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/unreachable', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/disk-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/memory-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/pid-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/unschedulable', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/network-unavailable', 'operator': 'Exists', 'effect': 'NoSchedule'}], 'priorityClassName': 'system-node-critical', 'priority': 2000001000, 'enableServiceLinks': True, 'preemptionPolicy': 'PreemptLowerPriority'}, 'status': {'observedGeneration': 1, 'phase': 'Running', 'conditions': [{'type': 'PodReadyToStartContainers', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:16Z'}, {'type': 'Initialized', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:23Z'}, {'type': 'Ready', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:13Z'}, {'type': 'ContainersReady', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:19:13Z'}, {'type': 'PodScheduled', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:07Z'}], 'hostIP': '199.19.213.235', 'hostIPs': [{'ip': '199.19.213.235'}], 'podIP': '199.19.213.235', 'podIPs': [{'ip': '199.19.213.235'}], 'startTime': '2026-03-17T16:07:07Z', 'initContainerStatuses': [{'name': 'config', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:16Z', 'finishedAt': '2026-03-17T16:07:16Z', 'containerID': 'containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-cgroup', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:18Z', 'finishedAt': '2026-03-17T16:07:18Z', 'containerID': 'containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'apply-sysctl-overwrites', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:19Z', 'finishedAt': '2026-03-17T16:07:19Z', 'containerID': 'containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-bpf-fs', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:20Z', 'finishedAt': '2026-03-17T16:07:20Z', 'containerID': 'containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'clean-cilium-state', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:21Z', 'finishedAt': '2026-03-17T16:07:21Z', 'containerID': 'containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'install-cni-binaries', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:22Z', 'finishedAt': '2026-03-17T16:07:22Z', 'containerID': 'containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898', 'started': False, 'allocatedResources': {'cpu': '100m', 'memory': '10Mi'}, 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'containerStatuses': [{'name': 'cilium-agent', 'state': {'running': {'startedAt': '2026-03-17T16:07:23Z'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://572e5b5bc6513797dde50f76a0e808465fc158abfbcae1a1d4e215ba63571b4d', 'started': True, 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'mountPath': '/var/lib/cilium/clustermesh', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'lib-modules', 'mountPath': '/lib/modules', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-qkzsr', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'qosClass': 'Burstable'}, 'apiVersion': 'v1', 'kind': 'Pod'}) => {", " \"ansible_loop_var\": \"item\",", " \"changed\": false,", " \"item\": {", " \"apiVersion\": \"v1\",", " \"kind\": \"Pod\",", " \"metadata\": {", " \"annotations\": {", " \"container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/cilium-agent\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/mount-cgroup\": \"unconfined\"", " },", " \"creationTimestamp\": \"2026-03-17T16:07:07Z\",", " \"generateName\": \"cilium-\",", " \"generation\": 1,", " \"labels\": {", " \"app.kubernetes.io/name\": \"cilium-agent\",", " \"app.kubernetes.io/part-of\": \"cilium\",", " \"controller-revision-hash\": \"f8b6c767c\",", " \"k8s-app\": \"cilium\",", " \"pod-template-generation\": \"1\"", " },", " \"managedFields\": [", " {", " \"apiVersion\": \"v1\",", " \"fieldsType\": \"FieldsV1\",", " \"fieldsV1\": {", " \"f:metadata\": {", " \"f:annotations\": {", " \".\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/cilium-agent\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/mount-cgroup\": {}", " },", " \"f:generateName\": {},", " \"f:labels\": {", " \".\": {},", " \"f:app.kubernetes.io/name\": {},", " \"f:app.kubernetes.io/part-of\": {},", " \"f:controller-revision-hash\": {},", " \"f:k8s-app\": {},", " \"f:pod-template-generation\": {}", " },", " \"f:ownerReferences\": {", " \".\": {},", " \"k:{\\\"uid\\\":\\\"d9698def-91cb-4d80-b757-fcff33e36771\\\"}\": {}", " }", " },", " \"f:spec\": {", " \"f:affinity\": {", " \".\": {},", " \"f:nodeAffinity\": {", " \".\": {},", " \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}", " },", " \"f:podAntiAffinity\": {", " \".\": {},", " \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}", " }", " },", " \"f:automountServiceAccountToken\": {},", " \"f:containers\": {", " \"k:{\\\"name\\\":\\\"cilium-agent\\\"}\": {", " \".\": {},", " \"f:args\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_CLUSTERMESH_CONFIG\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " },", " \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:lifecycle\": {", " \".\": {},", " \"f:postStart\": {", " \".\": {},", " \"f:exec\": {", " \".\": {},", " \"f:command\": {}", " }", " },", " \"f:preStop\": {", " \".\": {},", " \"f:exec\": {", " \".\": {},", " \"f:command\": {}", " }", " }", " },", " \"f:livenessProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:name\": {},", " \"f:readinessProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:startupProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/host/etc/cni/net.d\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/kernel\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/net\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/lib/modules\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {},", " \"f:readOnly\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/run/xtables.lock\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/lib/cilium/clustermesh\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {},", " \"f:readOnly\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " }", " },", " \"f:dnsPolicy\": {},", " \"f:enableServiceLinks\": {},", " \"f:hostNetwork\": {},", " \"f:initContainers\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"apply-sysctl-overwrites\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"clean-cilium-state\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_ALL_STATE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:configMapKeyRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"CILIUM_BPF_STATE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:configMapKeyRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/run/cilium/cgroupv2\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"config\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"install-cni-binaries\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {", " \".\": {},", " \"f:requests\": {", " \".\": {},", " \"f:cpu\": {},", " \"f:memory\": {}", " }", " },", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/host/opt/cni/bin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"mount-bpf-fs\\\"}\": {", " \".\": {},", " \"f:args\": {},", " \"f:command\": {},", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:privileged\": {}", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"mount-cgroup\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " },", " \"k:{\\\"name\\\":\\\"CGROUP_ROOT\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " }", " },", " \"f:nodeSelector\": {},", " \"f:priorityClassName\": {},", " \"f:restartPolicy\": {},", " \"f:schedulerName\": {},", " \"f:securityContext\": {},", " \"f:serviceAccount\": {},", " \"f:serviceAccountName\": {},", " \"f:terminationGracePeriodSeconds\": {},", " \"f:tolerations\": {},", " \"f:volumes\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"bpf-maps\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"cilium-cgroup\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"cilium-run\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"clustermesh-secrets\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:projected\": {", " \".\": {},", " \"f:defaultMode\": {},", " \"f:sources\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"cni-path\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"etc-cni-netd\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"host-proc-sys-kernel\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"host-proc-sys-net\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"hostproc\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"lib-modules\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"tmp\\\"}\": {", " \".\": {},", " \"f:emptyDir\": {},", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"xtables-lock\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " }", " }", " }", " },", " \"manager\": \"kube-controller-manager\",", " \"operation\": \"Update\",", " \"time\": \"2026-03-17T16:07:07Z\"", " },", " {", " \"apiVersion\": \"v1\",", " \"fieldsType\": \"FieldsV1\",", " \"fieldsV1\": {", " \"f:status\": {", " \"f:conditions\": {", " \"k:{\\\"type\\\":\\\"ContainersReady\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"Initialized\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"PodReadyToStartContainers\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"PodScheduled\\\"}\": {", " \"f:observedGeneration\": {}", " },", " \"k:{\\\"type\\\":\\\"Ready\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " }", " },", " \"f:containerStatuses\": {},", " \"f:hostIP\": {},", " \"f:hostIPs\": {},", " \"f:initContainerStatuses\": {},", " \"f:observedGeneration\": {},", " \"f:phase\": {},", " \"f:podIP\": {},", " \"f:podIPs\": {", " \".\": {},", " \"k:{\\\"ip\\\":\\\"199.19.213.235\\\"}\": {", " \".\": {},", " \"f:ip\": {}", " }", " },", " \"f:startTime\": {}", " }", " },", " \"manager\": \"kubelet\",", " \"operation\": \"Update\",", " \"subresource\": \"status\",", " \"time\": \"2026-03-17T16:19:36Z\"", " }", " ],", " \"name\": \"cilium-kl6qt\",", " \"namespace\": \"kube-system\",", " \"ownerReferences\": [", " {", " \"apiVersion\": \"apps/v1\",", " \"blockOwnerDeletion\": true,", " \"controller\": true,", " \"kind\": \"DaemonSet\",", " \"name\": \"cilium\",", " \"uid\": \"d9698def-91cb-4d80-b757-fcff33e36771\"", " }", " ],", " \"resourceVersion\": \"4789\",", " \"uid\": \"07358b1c-f861-47f5-97d9-e53ccc91588a\"", " },", " \"spec\": {", " \"affinity\": {", " \"nodeAffinity\": {", " \"requiredDuringSchedulingIgnoredDuringExecution\": {", " \"nodeSelectorTerms\": [", " {", " \"matchFields\": [", " {", " \"key\": \"metadata.name\",", " \"operator\": \"In\",", " \"values\": [", " \"controller-3\"", " ]", " }", " ]", " }", " ]", " }", " },", " \"podAntiAffinity\": {", " \"requiredDuringSchedulingIgnoredDuringExecution\": [", " {", " \"labelSelector\": {", " \"matchLabels\": {", " \"k8s-app\": \"cilium\"", " }", " },", " \"topologyKey\": \"kubernetes.io/hostname\"", " }", " ]", " }", " },", " \"automountServiceAccountToken\": true,", " \"containers\": [", " {", " \"args\": [", " \"--config-dir=/tmp/cilium/config-map\"", " ],", " \"command\": [", " \"cilium-agent\"", " ],", " \"env\": [", " {", " \"name\": \"K8S_NODE_NAME\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"spec.nodeName\"", " }", " }", " },", " {", " \"name\": \"CILIUM_K8S_NAMESPACE\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " }", " }", " },", " {", " \"name\": \"CILIUM_CLUSTERMESH_CONFIG\",", " \"value\": \"/var/lib/cilium/clustermesh/\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"lifecycle\": {", " \"postStart\": {", " \"exec\": {", " \"command\": [", " \"bash\",", " \"-c\",", " \"set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it's likely that 'aws-node' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a 'postStart' hook since this may need to run\\n# for nodes which might have already been init'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \\\"$(iptables-save | grep -E -c 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN')\\\" != \\\"0\\\" ]];\\nthen\\n echo 'Deleting iptables rules created by the AWS CNI VPC plugin'\\n iptables-save | grep -E -v 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN' | iptables-restore\\nfi\\necho 'Done!'\\n\"", " ]", " }", " },", " \"preStop\": {", " \"exec\": {", " \"command\": [", " \"/cni-uninstall.sh\"", " ]", " }", " }", " },", " \"livenessProbe\": {", " \"failureThreshold\": 10,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 30,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 5", " },", " \"name\": \"cilium-agent\",", " \"readinessProbe\": {", " \"failureThreshold\": 3,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 30,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 5", " },", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"CHOWN\",", " \"KILL\",", " \"NET_ADMIN\",", " \"NET_RAW\",", " \"IPC_LOCK\",", " \"SYS_MODULE\",", " \"SYS_ADMIN\",", " \"SYS_RESOURCE\",", " \"DAC_OVERRIDE\",", " \"FOWNER\",", " \"SETGID\",", " \"SETUID\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"startupProbe\": {", " \"failureThreshold\": 105,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 2,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 1", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/proc/sys/net\",", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"mountPath\": \"/host/proc/sys/kernel\",", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"mountPropagation\": \"HostToContainer\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/host/etc/cni/net.d\",", " \"name\": \"etc-cni-netd\"", " },", " {", " \"mountPath\": \"/var/lib/cilium/clustermesh\",", " \"name\": \"clustermesh-secrets\",", " \"readOnly\": true", " },", " {", " \"mountPath\": \"/lib/modules\",", " \"name\": \"lib-modules\",", " \"readOnly\": true", " },", " {", " \"mountPath\": \"/run/xtables.lock\",", " \"name\": \"xtables-lock\"", " },", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true", " }", " ]", " }", " ],", " \"dnsPolicy\": \"ClusterFirst\",", " \"enableServiceLinks\": true,", " \"hostNetwork\": true,", " \"initContainers\": [", " {", " \"command\": [", " \"cilium\",", " \"build-config\"", " ],", " \"env\": [", " {", " \"name\": \"K8S_NODE_NAME\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"spec.nodeName\"", " }", " }", " },", " {", " \"name\": \"CILIUM_K8S_NAMESPACE\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " }", " }", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"config\",", " \"resources\": {},", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"sh\",", " \"-ec\",", " \"cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-mount\\\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n\"", " ],", " \"env\": [", " {", " \"name\": \"CGROUP_ROOT\",", " \"value\": \"/run/cilium/cgroupv2\"", " },", " {", " \"name\": \"BIN_PATH\",", " \"value\": \"/opt/cni/bin\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"mount-cgroup\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"SYS_ADMIN\",", " \"SYS_CHROOT\",", " \"SYS_PTRACE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"sh\",", " \"-ec\",", " \"cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-sysctlfix\\\";\\nrm /hostbin/cilium-sysctlfix\\n\"", " ],", " \"env\": [", " {", " \"name\": \"BIN_PATH\",", " \"value\": \"/opt/cni/bin\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"apply-sysctl-overwrites\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"SYS_ADMIN\",", " \"SYS_CHROOT\",", " \"SYS_PTRACE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"args\": [", " \"mount | grep \\\"/sys/fs/bpf type bpf\\\" || mount -t bpf bpf /sys/fs/bpf\"", " ],", " \"command\": [", " \"/bin/bash\",", " \"-c\",", " \"--\"", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"mount-bpf-fs\",", " \"resources\": {},", " \"securityContext\": {", " \"privileged\": true", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"mountPropagation\": \"Bidirectional\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"/init-container.sh\"", " ],", " \"env\": [", " {", " \"name\": \"CILIUM_ALL_STATE\",", " \"valueFrom\": {", " \"configMapKeyRef\": {", " \"key\": \"clean-cilium-state\",", " \"name\": \"cilium-config\",", " \"optional\": true", " }", " }", " },", " {", " \"name\": \"CILIUM_BPF_STATE\",", " \"valueFrom\": {", " \"configMapKeyRef\": {", " \"key\": \"clean-cilium-bpf-state\",", " \"name\": \"cilium-config\",", " \"optional\": true", " }", " }", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"clean-cilium-state\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"NET_ADMIN\",", " \"SYS_MODULE\",", " \"SYS_ADMIN\",", " \"SYS_RESOURCE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/run/cilium/cgroupv2\",", " \"mountPropagation\": \"HostToContainer\",", " \"name\": \"cilium-cgroup\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"/install-plugin.sh\"", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"install-cni-binaries\",", " \"resources\": {", " \"requests\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " }", " },", " \"securityContext\": {", " \"capabilities\": {", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/opt/cni/bin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true", " }", " ]", " }", " ],", " \"nodeName\": \"controller-3\",", " \"nodeSelector\": {", " \"kubernetes.io/os\": \"linux\"", " },", " \"preemptionPolicy\": \"PreemptLowerPriority\",", " \"priority\": 2000001000,", " \"priorityClassName\": \"system-node-critical\",", " \"restartPolicy\": \"Always\",", " \"schedulerName\": \"default-scheduler\",", " \"securityContext\": {},", " \"serviceAccount\": \"cilium\",", " \"serviceAccountName\": \"cilium\",", " \"terminationGracePeriodSeconds\": 1,", " \"tolerations\": [", " {", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoExecute\",", " \"key\": \"node.kubernetes.io/not-ready\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoExecute\",", " \"key\": \"node.kubernetes.io/unreachable\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/disk-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/memory-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/pid-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/unschedulable\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/network-unavailable\",", " \"operator\": \"Exists\"", " }", " ],", " \"volumes\": [", " {", " \"emptyDir\": {},", " \"name\": \"tmp\"", " },", " {", " \"hostPath\": {", " \"path\": \"/var/run/cilium\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cilium-run\"", " },", " {", " \"hostPath\": {", " \"path\": \"/sys/fs/bpf\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"bpf-maps\"", " },", " {", " \"hostPath\": {", " \"path\": \"/proc\",", " \"type\": \"Directory\"", " },", " \"name\": \"hostproc\"", " },", " {", " \"hostPath\": {", " \"path\": \"/run/cilium/cgroupv2\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cilium-cgroup\"", " },", " {", " \"hostPath\": {", " \"path\": \"/opt/cni/bin\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cni-path\"", " },", " {", " \"hostPath\": {", " \"path\": \"/etc/cni/net.d\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"etc-cni-netd\"", " },", " {", " \"hostPath\": {", " \"path\": \"/lib/modules\",", " \"type\": \"\"", " },", " \"name\": \"lib-modules\"", " },", " {", " \"hostPath\": {", " \"path\": \"/run/xtables.lock\",", " \"type\": \"FileOrCreate\"", " },", " \"name\": \"xtables-lock\"", " },", " {", " \"name\": \"clustermesh-secrets\",", " \"projected\": {", " \"defaultMode\": 256,", " \"sources\": [", " {", " \"secret\": {", " \"name\": \"cilium-clustermesh\",", " \"optional\": true", " }", " },", " {", " \"secret\": {", " \"items\": [", " {", " \"key\": \"tls.key\",", " \"path\": \"common-etcd-client.key\"", " },", " {", " \"key\": \"tls.crt\",", " \"path\": \"common-etcd-client.crt\"", " },", " {", " \"key\": \"ca.crt\",", " \"path\": \"common-etcd-client-ca.crt\"", " }", " ],", " \"name\": \"clustermesh-apiserver-remote-cert\",", " \"optional\": true", " }", " }", " ]", " }", " },", " {", " \"hostPath\": {", " \"path\": \"/proc/sys/net\",", " \"type\": \"Directory\"", " },", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"hostPath\": {", " \"path\": \"/proc/sys/kernel\",", " \"type\": \"Directory\"", " },", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"name\": \"kube-api-access-qkzsr\",", " \"projected\": {", " \"defaultMode\": 420,", " \"sources\": [", " {", " \"serviceAccountToken\": {", " \"expirationSeconds\": 3607,", " \"path\": \"token\"", " }", " },", " {", " \"configMap\": {", " \"items\": [", " {", " \"key\": \"ca.crt\",", " \"path\": \"ca.crt\"", " }", " ],", " \"name\": \"kube-root-ca.crt\"", " }", " },", " {", " \"downwardAPI\": {", " \"items\": [", " {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " },", " \"path\": \"namespace\"", " }", " ]", " }", " }", " ]", " }", " }", " ]", " },", " \"status\": {", " \"conditions\": [", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:16Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"PodReadyToStartContainers\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:23Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"Initialized\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:19:13Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"Ready\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:19:13Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"ContainersReady\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:07Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"PodScheduled\"", " }", " ],", " \"containerStatuses\": [", " {", " \"containerID\": \"containerd://572e5b5bc6513797dde50f76a0e808465fc158abfbcae1a1d4e215ba63571b4d\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"cilium-agent\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": true,", " \"state\": {", " \"running\": {", " \"startedAt\": \"2026-03-17T16:07:23Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/proc/sys/net\",", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"mountPath\": \"/host/proc/sys/kernel\",", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/host/etc/cni/net.d\",", " \"name\": \"etc-cni-netd\"", " },", " {", " \"mountPath\": \"/var/lib/cilium/clustermesh\",", " \"name\": \"clustermesh-secrets\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " },", " {", " \"mountPath\": \"/lib/modules\",", " \"name\": \"lib-modules\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " },", " {", " \"mountPath\": \"/run/xtables.lock\",", " \"name\": \"xtables-lock\"", " },", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " }", " ],", " \"hostIP\": \"199.19.213.235\",", " \"hostIPs\": [", " {", " \"ip\": \"199.19.213.235\"", " }", " ],", " \"initContainerStatuses\": [", " {", " \"containerID\": \"containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"config\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://cfde56a1118bafbcd9eef41b5a45935853b3cef2bcb8dd755fa02277cd225432\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:16Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:16Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"mount-cgroup\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://6bc03bb0d8ed42aea9fa093b341fb29c655de65c3dea7045f727885824bd5072\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:18Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:18Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"apply-sysctl-overwrites\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://423bcce9a8c1727a416b7c93c0dd99b68be147cbf850d3785c8a6b9ced163c87\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:19Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:19Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"mount-bpf-fs\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://57042ad492bc47aa88fe6cbe1102ddaf13dfb59fba41438fda9a066369648808\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:20Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:20Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"clean-cilium-state\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://8607bf73a8fb461586534997a849f7bc79946c5f465a87f4609d1979bff40aa5\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:21Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:21Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/run/cilium/cgroupv2\",", " \"name\": \"cilium-cgroup\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"allocatedResources\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " },", " \"containerID\": \"containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"install-cni-binaries\",", " \"ready\": true,", " \"resources\": {", " \"requests\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " }", " },", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://56a0e29825dafc3bb30bf7c82562642ea48ad17f77f6bea027b8415df6892898\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:22Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:22Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/opt/cni/bin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-qkzsr\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " }", " ],", " \"observedGeneration\": 1,", " \"phase\": \"Running\",", " \"podIP\": \"199.19.213.235\",", " \"podIPs\": [", " {", " \"ip\": \"199.19.213.235\"", " }", " ],", " \"qosClass\": \"Burstable\",", " \"startTime\": \"2026-03-17T16:07:07Z\"", " }", " },", " \"msg\": \"Cilium pods have not been restarted\"", "}", "ok: [controller-1] => (item={'metadata': {'name': 'cilium-qwc95', 'generateName': 'cilium-', 'namespace': 'kube-system', 'uid': 'baebf6dc-4b2b-4168-9c81-713c5a477011', 'resourceVersion': '4467', 'generation': 1, 'creationTimestamp': '2026-03-17T16:07:07Z', 'labels': {'app.kubernetes.io/name': 'cilium-agent', 'app.kubernetes.io/part-of': 'cilium', 'controller-revision-hash': 'f8b6c767c', 'k8s-app': 'cilium', 'pod-template-generation': '1'}, 'annotations': {'container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/cilium-agent': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/clean-cilium-state': 'unconfined', 'container.apparmor.security.beta.kubernetes.io/mount-cgroup': 'unconfined'}, 'ownerReferences': [{'apiVersion': 'apps/v1', 'kind': 'DaemonSet', 'name': 'cilium', 'uid': 'd9698def-91cb-4d80-b757-fcff33e36771', 'controller': True, 'blockOwnerDeletion': True}], 'managedFields': [{'manager': 'kube-controller-manager', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:07:07Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:metadata': {'f:annotations': {'.': {}, 'f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites': {}, 'f:container.apparmor.security.beta.kubernetes.io/cilium-agent': {}, 'f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state': {}, 'f:container.apparmor.security.beta.kubernetes.io/mount-cgroup': {}}, 'f:generateName': {}, 'f:labels': {'.': {}, 'f:app.kubernetes.io/name': {}, 'f:app.kubernetes.io/part-of': {}, 'f:controller-revision-hash': {}, 'f:k8s-app': {}, 'f:pod-template-generation': {}}, 'f:ownerReferences': {'.': {}, 'k:{\"uid\":\"d9698def-91cb-4d80-b757-fcff33e36771\"}': {}}}, 'f:spec': {'f:affinity': {'.': {}, 'f:nodeAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}, 'f:podAntiAffinity': {'.': {}, 'f:requiredDuringSchedulingIgnoredDuringExecution': {}}}, 'f:automountServiceAccountToken': {}, 'f:containers': {'k:{\"name\":\"cilium-agent\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_CLUSTERMESH_CONFIG\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:lifecycle': {'.': {}, 'f:postStart': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}, 'f:preStop': {'.': {}, 'f:exec': {'.': {}, 'f:command': {}}}}, 'f:livenessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:name': {}, 'f:readinessProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:startupProbe': {'.': {}, 'f:failureThreshold': {}, 'f:httpGet': {'.': {}, 'f:host': {}, 'f:httpHeaders': {}, 'f:path': {}, 'f:port': {}, 'f:scheme': {}}, 'f:periodSeconds': {}, 'f:successThreshold': {}, 'f:timeoutSeconds': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/etc/cni/net.d\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/kernel\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/host/proc/sys/net\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/lib/modules\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/run/xtables.lock\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/lib/cilium/clustermesh\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}, 'f:readOnly': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:dnsPolicy': {}, 'f:enableServiceLinks': {}, 'f:hostNetwork': {}, 'f:initContainers': {'.': {}, 'k:{\"name\":\"apply-sysctl-overwrites\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"clean-cilium-state\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_ALL_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}, 'k:{\"name\":\"CILIUM_BPF_STATE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:configMapKeyRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/run/cilium/cgroupv2\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/var/run/cilium\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"config\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"CILIUM_K8S_NAMESPACE\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}, 'k:{\"name\":\"K8S_NODE_NAME\"}': {'.': {}, 'f:name': {}, 'f:valueFrom': {'.': {}, 'f:fieldRef': {}}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/tmp\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"install-cni-binaries\"}': {'.': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {'.': {}, 'f:requests': {'.': {}, 'f:cpu': {}, 'f:memory': {}}}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/host/opt/cni/bin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-bpf-fs\"}': {'.': {}, 'f:args': {}, 'f:command': {}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:privileged': {}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/sys/fs/bpf\"}': {'.': {}, 'f:mountPath': {}, 'f:mountPropagation': {}, 'f:name': {}}}}, 'k:{\"name\":\"mount-cgroup\"}': {'.': {}, 'f:command': {}, 'f:env': {'.': {}, 'k:{\"name\":\"BIN_PATH\"}': {'.': {}, 'f:name': {}, 'f:value': {}}, 'k:{\"name\":\"CGROUP_ROOT\"}': {'.': {}, 'f:name': {}, 'f:value': {}}}, 'f:image': {}, 'f:imagePullPolicy': {}, 'f:name': {}, 'f:resources': {}, 'f:securityContext': {'.': {}, 'f:capabilities': {'.': {}, 'f:add': {}, 'f:drop': {}}, 'f:seLinuxOptions': {'.': {}, 'f:level': {}, 'f:type': {}}}, 'f:terminationMessagePath': {}, 'f:terminationMessagePolicy': {}, 'f:volumeMounts': {'.': {}, 'k:{\"mountPath\":\"/hostbin\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}, 'k:{\"mountPath\":\"/hostproc\"}': {'.': {}, 'f:mountPath': {}, 'f:name': {}}}}}, 'f:nodeSelector': {}, 'f:priorityClassName': {}, 'f:restartPolicy': {}, 'f:schedulerName': {}, 'f:securityContext': {}, 'f:serviceAccount': {}, 'f:serviceAccountName': {}, 'f:terminationGracePeriodSeconds': {}, 'f:tolerations': {}, 'f:volumes': {'.': {}, 'k:{\"name\":\"bpf-maps\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-cgroup\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"cilium-run\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"clustermesh-secrets\"}': {'.': {}, 'f:name': {}, 'f:projected': {'.': {}, 'f:defaultMode': {}, 'f:sources': {}}}, 'k:{\"name\":\"cni-path\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"etc-cni-netd\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-kernel\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"host-proc-sys-net\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"hostproc\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"lib-modules\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}, 'k:{\"name\":\"tmp\"}': {'.': {}, 'f:emptyDir': {}, 'f:name': {}}, 'k:{\"name\":\"xtables-lock\"}': {'.': {}, 'f:hostPath': {'.': {}, 'f:path': {}, 'f:type': {}}, 'f:name': {}}}}}}, {'manager': 'kubelet', 'operation': 'Update', 'apiVersion': 'v1', 'time': '2026-03-17T16:19:05Z', 'fieldsType': 'FieldsV1', 'fieldsV1': {'f:status': {'f:conditions': {'k:{\"type\":\"ContainersReady\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"Initialized\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodReadyToStartContainers\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}, 'k:{\"type\":\"PodScheduled\"}': {'f:observedGeneration': {}}, 'k:{\"type\":\"Ready\"}': {'.': {}, 'f:lastProbeTime': {}, 'f:lastTransitionTime': {}, 'f:observedGeneration': {}, 'f:status': {}, 'f:type': {}}}, 'f:containerStatuses': {}, 'f:hostIP': {}, 'f:hostIPs': {}, 'f:initContainerStatuses': {}, 'f:observedGeneration': {}, 'f:phase': {}, 'f:podIP': {}, 'f:podIPs': {'.': {}, 'k:{\"ip\":\"199.19.213.74\"}': {'.': {}, 'f:ip': {}}}, 'f:startTime': {}}}, 'subresource': 'status'}]}, 'spec': {'volumes': [{'name': 'tmp', 'emptyDir': {}}, {'name': 'cilium-run', 'hostPath': {'path': '/var/run/cilium', 'type': 'DirectoryOrCreate'}}, {'name': 'bpf-maps', 'hostPath': {'path': '/sys/fs/bpf', 'type': 'DirectoryOrCreate'}}, {'name': 'hostproc', 'hostPath': {'path': '/proc', 'type': 'Directory'}}, {'name': 'cilium-cgroup', 'hostPath': {'path': '/run/cilium/cgroupv2', 'type': 'DirectoryOrCreate'}}, {'name': 'cni-path', 'hostPath': {'path': '/opt/cni/bin', 'type': 'DirectoryOrCreate'}}, {'name': 'etc-cni-netd', 'hostPath': {'path': '/etc/cni/net.d', 'type': 'DirectoryOrCreate'}}, {'name': 'lib-modules', 'hostPath': {'path': '/lib/modules', 'type': ''}}, {'name': 'xtables-lock', 'hostPath': {'path': '/run/xtables.lock', 'type': 'FileOrCreate'}}, {'name': 'clustermesh-secrets', 'projected': {'sources': [{'secret': {'name': 'cilium-clustermesh', 'optional': True}}, {'secret': {'name': 'clustermesh-apiserver-remote-cert', 'items': [{'key': 'tls.key', 'path': 'common-etcd-client.key'}, {'key': 'tls.crt', 'path': 'common-etcd-client.crt'}, {'key': 'ca.crt', 'path': 'common-etcd-client-ca.crt'}], 'optional': True}}], 'defaultMode': 256}}, {'name': 'host-proc-sys-net', 'hostPath': {'path': '/proc/sys/net', 'type': 'Directory'}}, {'name': 'host-proc-sys-kernel', 'hostPath': {'path': '/proc/sys/kernel', 'type': 'Directory'}}, {'name': 'kube-api-access-dz2nk', 'projected': {'sources': [{'serviceAccountToken': {'expirationSeconds': 3607, 'path': 'token'}}, {'configMap': {'name': 'kube-root-ca.crt', 'items': [{'key': 'ca.crt', 'path': 'ca.crt'}]}}, {'downwardAPI': {'items': [{'path': 'namespace', 'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}]}}], 'defaultMode': 420}}], 'initContainers': [{'name': 'config', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium', 'build-config'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}], 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent'}, {'name': 'mount-cgroup', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-mount\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n'], 'env': [{'name': 'CGROUP_ROOT', 'value': '/run/cilium/cgroupv2'}, {'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'apply-sysctl-overwrites', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['sh', '-ec', 'cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \"${BIN_PATH}/cilium-sysctlfix\";\\nrm /hostbin/cilium-sysctlfix\\n'], 'env': [{'name': 'BIN_PATH', 'value': '/opt/cni/bin'}], 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['SYS_ADMIN', 'SYS_CHROOT', 'SYS_PTRACE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'mount-bpf-fs', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/bin/bash', '-c', '--'], 'args': ['mount | grep \"/sys/fs/bpf type bpf\" || mount -t bpf bpf /sys/fs/bpf'], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'Bidirectional'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'privileged': True}}, {'name': 'clean-cilium-state', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/init-container.sh'], 'env': [{'name': 'CILIUM_ALL_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-state', 'optional': True}}}, {'name': 'CILIUM_BPF_STATE', 'valueFrom': {'configMapKeyRef': {'name': 'cilium-config', 'key': 'clean-cilium-bpf-state', 'optional': True}}}], 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['NET_ADMIN', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}, {'name': 'install-cni-binaries', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['/install-plugin.sh'], 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}}}], 'containers': [{'name': 'cilium-agent', 'image': 'quay.io/cilium/cilium:v1.14.8', 'command': ['cilium-agent'], 'args': ['--config-dir=/tmp/cilium/config-map'], 'env': [{'name': 'K8S_NODE_NAME', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'spec.nodeName'}}}, {'name': 'CILIUM_K8S_NAMESPACE', 'valueFrom': {'fieldRef': {'apiVersion': 'v1', 'fieldPath': 'metadata.namespace'}}}, {'name': 'CILIUM_CLUSTERMESH_CONFIG', 'value': '/var/lib/cilium/clustermesh/'}], 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf', 'mountPropagation': 'HostToContainer'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'readOnly': True, 'mountPath': '/var/lib/cilium/clustermesh'}, {'name': 'lib-modules', 'readOnly': True, 'mountPath': '/lib/modules'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'readOnly': True, 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount'}], 'livenessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 10}, 'readinessProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 5, 'periodSeconds': 30, 'successThreshold': 1, 'failureThreshold': 3}, 'startupProbe': {'httpGet': {'path': '/healthz', 'port': 9879, 'host': '127.0.0.1', 'scheme': 'HTTP', 'httpHeaders': [{'name': 'brief', 'value': 'true'}]}, 'timeoutSeconds': 1, 'periodSeconds': 2, 'successThreshold': 1, 'failureThreshold': 105}, 'lifecycle': {'postStart': {'exec': {'command': ['bash', '-c', 'set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it\\'s likely that \\'aws-node\\' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a \\'postStart\\' hook since this may need to run\\n# for nodes which might have already been init\\'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \"$(iptables-save | grep -E -c \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\')\" != \"0\" ]];\\nthen\\n echo \\'Deleting iptables rules created by the AWS CNI VPC plugin\\'\\n iptables-save | grep -E -v \\'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN\\' | iptables-restore\\nfi\\necho \\'Done!\\'\\n']}}, 'preStop': {'exec': {'command': ['/cni-uninstall.sh']}}}, 'terminationMessagePath': '/dev/termination-log', 'terminationMessagePolicy': 'FallbackToLogsOnError', 'imagePullPolicy': 'IfNotPresent', 'securityContext': {'capabilities': {'add': ['CHOWN', 'KILL', 'NET_ADMIN', 'NET_RAW', 'IPC_LOCK', 'SYS_MODULE', 'SYS_ADMIN', 'SYS_RESOURCE', 'DAC_OVERRIDE', 'FOWNER', 'SETGID', 'SETUID'], 'drop': ['ALL']}, 'seLinuxOptions': {'type': 'spc_t', 'level': 's0'}, 'appArmorProfile': {'type': 'Unconfined'}}}], 'restartPolicy': 'Always', 'terminationGracePeriodSeconds': 1, 'dnsPolicy': 'ClusterFirst', 'nodeSelector': {'kubernetes.io/os': 'linux'}, 'serviceAccountName': 'cilium', 'serviceAccount': 'cilium', 'automountServiceAccountToken': True, 'nodeName': 'controller-1', 'hostNetwork': True, 'securityContext': {}, 'affinity': {'nodeAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': {'nodeSelectorTerms': [{'matchFields': [{'key': 'metadata.name', 'operator': 'In', 'values': ['controller-1']}]}]}}, 'podAntiAffinity': {'requiredDuringSchedulingIgnoredDuringExecution': [{'labelSelector': {'matchLabels': {'k8s-app': 'cilium'}}, 'topologyKey': 'kubernetes.io/hostname'}]}}, 'schedulerName': 'default-scheduler', 'tolerations': [{'operator': 'Exists'}, {'key': 'node.kubernetes.io/not-ready', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/unreachable', 'operator': 'Exists', 'effect': 'NoExecute'}, {'key': 'node.kubernetes.io/disk-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/memory-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/pid-pressure', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/unschedulable', 'operator': 'Exists', 'effect': 'NoSchedule'}, {'key': 'node.kubernetes.io/network-unavailable', 'operator': 'Exists', 'effect': 'NoSchedule'}], 'priorityClassName': 'system-node-critical', 'priority': 2000001000, 'enableServiceLinks': True, 'preemptionPolicy': 'PreemptLowerPriority'}, 'status': {'observedGeneration': 1, 'phase': 'Running', 'conditions': [{'type': 'PodReadyToStartContainers', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:17Z'}, {'type': 'Initialized', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:25Z'}, {'type': 'Ready', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:18:40Z'}, {'type': 'ContainersReady', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:18:40Z'}, {'type': 'PodScheduled', 'observedGeneration': 1, 'status': 'True', 'lastProbeTime': None, 'lastTransitionTime': '2026-03-17T16:07:07Z'}], 'hostIP': '199.19.213.74', 'hostIPs': [{'ip': '199.19.213.74'}], 'podIP': '199.19.213.74', 'podIPs': [{'ip': '199.19.213.74'}], 'startTime': '2026-03-17T16:07:07Z', 'initContainerStatuses': [{'name': 'config', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:17Z', 'finishedAt': '2026-03-17T16:07:17Z', 'containerID': 'containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-cgroup', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:21Z', 'finishedAt': '2026-03-17T16:07:21Z', 'containerID': 'containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'apply-sysctl-overwrites', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:22Z', 'finishedAt': '2026-03-17T16:07:22Z', 'containerID': 'containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'hostproc', 'mountPath': '/hostproc'}, {'name': 'cni-path', 'mountPath': '/hostbin'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'mount-bpf-fs', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:23Z', 'finishedAt': '2026-03-17T16:07:23Z', 'containerID': 'containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'clean-cilium-state', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:24Z', 'finishedAt': '2026-03-17T16:07:24Z', 'containerID': 'containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e', 'started': False, 'resources': {}, 'volumeMounts': [{'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-cgroup', 'mountPath': '/run/cilium/cgroupv2'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}, {'name': 'install-cni-binaries', 'state': {'terminated': {'exitCode': 0, 'reason': 'Completed', 'startedAt': '2026-03-17T16:07:25Z', 'finishedAt': '2026-03-17T16:07:25Z', 'containerID': 'containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9', 'started': False, 'allocatedResources': {'cpu': '100m', 'memory': '10Mi'}, 'resources': {'requests': {'cpu': '100m', 'memory': '10Mi'}}, 'volumeMounts': [{'name': 'cni-path', 'mountPath': '/host/opt/cni/bin'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'containerStatuses': [{'name': 'cilium-agent', 'state': {'running': {'startedAt': '2026-03-17T16:07:26Z'}}, 'lastState': {}, 'ready': True, 'restartCount': 0, 'image': 'quay.io/cilium/cilium:v1.14.8', 'imageID': 'quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada', 'containerID': 'containerd://1e0d632bfe9cc6f346ad09991702d5841509c52bfccc6b09f6a288da0efd9c4f', 'started': True, 'resources': {}, 'volumeMounts': [{'name': 'host-proc-sys-net', 'mountPath': '/host/proc/sys/net'}, {'name': 'host-proc-sys-kernel', 'mountPath': '/host/proc/sys/kernel'}, {'name': 'bpf-maps', 'mountPath': '/sys/fs/bpf'}, {'name': 'cilium-run', 'mountPath': '/var/run/cilium'}, {'name': 'etc-cni-netd', 'mountPath': '/host/etc/cni/net.d'}, {'name': 'clustermesh-secrets', 'mountPath': '/var/lib/cilium/clustermesh', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'lib-modules', 'mountPath': '/lib/modules', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}, {'name': 'xtables-lock', 'mountPath': '/run/xtables.lock'}, {'name': 'tmp', 'mountPath': '/tmp'}, {'name': 'kube-api-access-dz2nk', 'mountPath': '/var/run/secrets/kubernetes.io/serviceaccount', 'readOnly': True, 'recursiveReadOnly': 'Disabled'}], 'user': {'linux': {'uid': 0, 'gid': 0, 'supplementalGroups': [0]}}}], 'qosClass': 'Burstable'}, 'apiVersion': 'v1', 'kind': 'Pod'}) => {", " \"ansible_loop_var\": \"item\",", " \"changed\": false,", " \"item\": {", " \"apiVersion\": \"v1\",", " \"kind\": \"Pod\",", " \"metadata\": {", " \"annotations\": {", " \"container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/cilium-agent\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": \"unconfined\",", " \"container.apparmor.security.beta.kubernetes.io/mount-cgroup\": \"unconfined\"", " },", " \"creationTimestamp\": \"2026-03-17T16:07:07Z\",", " \"generateName\": \"cilium-\",", " \"generation\": 1,", " \"labels\": {", " \"app.kubernetes.io/name\": \"cilium-agent\",", " \"app.kubernetes.io/part-of\": \"cilium\",", " \"controller-revision-hash\": \"f8b6c767c\",", " \"k8s-app\": \"cilium\",", " \"pod-template-generation\": \"1\"", " },", " \"managedFields\": [", " {", " \"apiVersion\": \"v1\",", " \"fieldsType\": \"FieldsV1\",", " \"fieldsV1\": {", " \"f:metadata\": {", " \"f:annotations\": {", " \".\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/apply-sysctl-overwrites\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/cilium-agent\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/clean-cilium-state\": {},", " \"f:container.apparmor.security.beta.kubernetes.io/mount-cgroup\": {}", " },", " \"f:generateName\": {},", " \"f:labels\": {", " \".\": {},", " \"f:app.kubernetes.io/name\": {},", " \"f:app.kubernetes.io/part-of\": {},", " \"f:controller-revision-hash\": {},", " \"f:k8s-app\": {},", " \"f:pod-template-generation\": {}", " },", " \"f:ownerReferences\": {", " \".\": {},", " \"k:{\\\"uid\\\":\\\"d9698def-91cb-4d80-b757-fcff33e36771\\\"}\": {}", " }", " },", " \"f:spec\": {", " \"f:affinity\": {", " \".\": {},", " \"f:nodeAffinity\": {", " \".\": {},", " \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}", " },", " \"f:podAntiAffinity\": {", " \".\": {},", " \"f:requiredDuringSchedulingIgnoredDuringExecution\": {}", " }", " },", " \"f:automountServiceAccountToken\": {},", " \"f:containers\": {", " \"k:{\\\"name\\\":\\\"cilium-agent\\\"}\": {", " \".\": {},", " \"f:args\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_CLUSTERMESH_CONFIG\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " },", " \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:lifecycle\": {", " \".\": {},", " \"f:postStart\": {", " \".\": {},", " \"f:exec\": {", " \".\": {},", " \"f:command\": {}", " }", " },", " \"f:preStop\": {", " \".\": {},", " \"f:exec\": {", " \".\": {},", " \"f:command\": {}", " }", " }", " },", " \"f:livenessProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:name\": {},", " \"f:readinessProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:startupProbe\": {", " \".\": {},", " \"f:failureThreshold\": {},", " \"f:httpGet\": {", " \".\": {},", " \"f:host\": {},", " \"f:httpHeaders\": {},", " \"f:path\": {},", " \"f:port\": {},", " \"f:scheme\": {}", " },", " \"f:periodSeconds\": {},", " \"f:successThreshold\": {},", " \"f:timeoutSeconds\": {}", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/host/etc/cni/net.d\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/kernel\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/host/proc/sys/net\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/lib/modules\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {},", " \"f:readOnly\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/run/xtables.lock\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/lib/cilium/clustermesh\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {},", " \"f:readOnly\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " }", " },", " \"f:dnsPolicy\": {},", " \"f:enableServiceLinks\": {},", " \"f:hostNetwork\": {},", " \"f:initContainers\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"apply-sysctl-overwrites\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"clean-cilium-state\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_ALL_STATE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:configMapKeyRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"CILIUM_BPF_STATE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:configMapKeyRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/run/cilium/cgroupv2\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/var/run/cilium\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"config\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"CILIUM_K8S_NAMESPACE\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"K8S_NODE_NAME\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:valueFrom\": {", " \".\": {},", " \"f:fieldRef\": {}", " }", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/tmp\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"install-cni-binaries\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {", " \".\": {},", " \"f:requests\": {", " \".\": {},", " \"f:cpu\": {},", " \"f:memory\": {}", " }", " },", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/host/opt/cni/bin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"mount-bpf-fs\\\"}\": {", " \".\": {},", " \"f:args\": {},", " \"f:command\": {},", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:privileged\": {}", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/sys/fs/bpf\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:mountPropagation\": {},", " \"f:name\": {}", " }", " }", " },", " \"k:{\\\"name\\\":\\\"mount-cgroup\\\"}\": {", " \".\": {},", " \"f:command\": {},", " \"f:env\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"BIN_PATH\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " },", " \"k:{\\\"name\\\":\\\"CGROUP_ROOT\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:value\": {}", " }", " },", " \"f:image\": {},", " \"f:imagePullPolicy\": {},", " \"f:name\": {},", " \"f:resources\": {},", " \"f:securityContext\": {", " \".\": {},", " \"f:capabilities\": {", " \".\": {},", " \"f:add\": {},", " \"f:drop\": {}", " },", " \"f:seLinuxOptions\": {", " \".\": {},", " \"f:level\": {},", " \"f:type\": {}", " }", " },", " \"f:terminationMessagePath\": {},", " \"f:terminationMessagePolicy\": {},", " \"f:volumeMounts\": {", " \".\": {},", " \"k:{\\\"mountPath\\\":\\\"/hostbin\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " },", " \"k:{\\\"mountPath\\\":\\\"/hostproc\\\"}\": {", " \".\": {},", " \"f:mountPath\": {},", " \"f:name\": {}", " }", " }", " }", " },", " \"f:nodeSelector\": {},", " \"f:priorityClassName\": {},", " \"f:restartPolicy\": {},", " \"f:schedulerName\": {},", " \"f:securityContext\": {},", " \"f:serviceAccount\": {},", " \"f:serviceAccountName\": {},", " \"f:terminationGracePeriodSeconds\": {},", " \"f:tolerations\": {},", " \"f:volumes\": {", " \".\": {},", " \"k:{\\\"name\\\":\\\"bpf-maps\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"cilium-cgroup\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"cilium-run\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"clustermesh-secrets\\\"}\": {", " \".\": {},", " \"f:name\": {},", " \"f:projected\": {", " \".\": {},", " \"f:defaultMode\": {},", " \"f:sources\": {}", " }", " },", " \"k:{\\\"name\\\":\\\"cni-path\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"etc-cni-netd\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"host-proc-sys-kernel\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"host-proc-sys-net\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"hostproc\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"lib-modules\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"tmp\\\"}\": {", " \".\": {},", " \"f:emptyDir\": {},", " \"f:name\": {}", " },", " \"k:{\\\"name\\\":\\\"xtables-lock\\\"}\": {", " \".\": {},", " \"f:hostPath\": {", " \".\": {},", " \"f:path\": {},", " \"f:type\": {}", " },", " \"f:name\": {}", " }", " }", " }", " },", " \"manager\": \"kube-controller-manager\",", " \"operation\": \"Update\",", " \"time\": \"2026-03-17T16:07:07Z\"", " },", " {", " \"apiVersion\": \"v1\",", " \"fieldsType\": \"FieldsV1\",", " \"fieldsV1\": {", " \"f:status\": {", " \"f:conditions\": {", " \"k:{\\\"type\\\":\\\"ContainersReady\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"Initialized\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"PodReadyToStartContainers\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " },", " \"k:{\\\"type\\\":\\\"PodScheduled\\\"}\": {", " \"f:observedGeneration\": {}", " },", " \"k:{\\\"type\\\":\\\"Ready\\\"}\": {", " \".\": {},", " \"f:lastProbeTime\": {},", " \"f:lastTransitionTime\": {},", " \"f:observedGeneration\": {},", " \"f:status\": {},", " \"f:type\": {}", " }", " },", " \"f:containerStatuses\": {},", " \"f:hostIP\": {},", " \"f:hostIPs\": {},", " \"f:initContainerStatuses\": {},", " \"f:observedGeneration\": {},", " \"f:phase\": {},", " \"f:podIP\": {},", " \"f:podIPs\": {", " \".\": {},", " \"k:{\\\"ip\\\":\\\"199.19.213.74\\\"}\": {", " \".\": {},", " \"f:ip\": {}", " }", " },", " \"f:startTime\": {}", " }", " },", " \"manager\": \"kubelet\",", " \"operation\": \"Update\",", " \"subresource\": \"status\",", " \"time\": \"2026-03-17T16:19:05Z\"", " }", " ],", " \"name\": \"cilium-qwc95\",", " \"namespace\": \"kube-system\",", " \"ownerReferences\": [", " {", " \"apiVersion\": \"apps/v1\",", " \"blockOwnerDeletion\": true,", " \"controller\": true,", " \"kind\": \"DaemonSet\",", " \"name\": \"cilium\",", " \"uid\": \"d9698def-91cb-4d80-b757-fcff33e36771\"", " }", " ],", " \"resourceVersion\": \"4467\",", " \"uid\": \"baebf6dc-4b2b-4168-9c81-713c5a477011\"", " },", " \"spec\": {", " \"affinity\": {", " \"nodeAffinity\": {", " \"requiredDuringSchedulingIgnoredDuringExecution\": {", " \"nodeSelectorTerms\": [", " {", " \"matchFields\": [", " {", " \"key\": \"metadata.name\",", " \"operator\": \"In\",", " \"values\": [", " \"controller-1\"", " ]", " }", " ]", " }", " ]", " }", " },", " \"podAntiAffinity\": {", " \"requiredDuringSchedulingIgnoredDuringExecution\": [", " {", " \"labelSelector\": {", " \"matchLabels\": {", " \"k8s-app\": \"cilium\"", " }", " },", " \"topologyKey\": \"kubernetes.io/hostname\"", " }", " ]", " }", " },", " \"automountServiceAccountToken\": true,", " \"containers\": [", " {", " \"args\": [", " \"--config-dir=/tmp/cilium/config-map\"", " ],", " \"command\": [", " \"cilium-agent\"", " ],", " \"env\": [", " {", " \"name\": \"K8S_NODE_NAME\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"spec.nodeName\"", " }", " }", " },", " {", " \"name\": \"CILIUM_K8S_NAMESPACE\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " }", " }", " },", " {", " \"name\": \"CILIUM_CLUSTERMESH_CONFIG\",", " \"value\": \"/var/lib/cilium/clustermesh/\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"lifecycle\": {", " \"postStart\": {", " \"exec\": {", " \"command\": [", " \"bash\",", " \"-c\",", " \"set -o errexit\\nset -o pipefail\\nset -o nounset\\n\\n# When running in AWS ENI mode, it's likely that 'aws-node' has\\n# had a chance to install SNAT iptables rules. These can result\\n# in dropped traffic, so we should attempt to remove them.\\n# We do it using a 'postStart' hook since this may need to run\\n# for nodes which might have already been init'ed but may still\\n# have dangling rules. This is safe because there are no\\n# dependencies on anything that is part of the startup script\\n# itself, and can be safely run multiple times per node (e.g. in\\n# case of a restart).\\nif [[ \\\"$(iptables-save | grep -E -c 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN')\\\" != \\\"0\\\" ]];\\nthen\\n echo 'Deleting iptables rules created by the AWS CNI VPC plugin'\\n iptables-save | grep -E -v 'AWS-SNAT-CHAIN|AWS-CONNMARK-CHAIN' | iptables-restore\\nfi\\necho 'Done!'\\n\"", " ]", " }", " },", " \"preStop\": {", " \"exec\": {", " \"command\": [", " \"/cni-uninstall.sh\"", " ]", " }", " }", " },", " \"livenessProbe\": {", " \"failureThreshold\": 10,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 30,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 5", " },", " \"name\": \"cilium-agent\",", " \"readinessProbe\": {", " \"failureThreshold\": 3,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 30,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 5", " },", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"CHOWN\",", " \"KILL\",", " \"NET_ADMIN\",", " \"NET_RAW\",", " \"IPC_LOCK\",", " \"SYS_MODULE\",", " \"SYS_ADMIN\",", " \"SYS_RESOURCE\",", " \"DAC_OVERRIDE\",", " \"FOWNER\",", " \"SETGID\",", " \"SETUID\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"startupProbe\": {", " \"failureThreshold\": 105,", " \"httpGet\": {", " \"host\": \"127.0.0.1\",", " \"httpHeaders\": [", " {", " \"name\": \"brief\",", " \"value\": \"true\"", " }", " ],", " \"path\": \"/healthz\",", " \"port\": 9879,", " \"scheme\": \"HTTP\"", " },", " \"periodSeconds\": 2,", " \"successThreshold\": 1,", " \"timeoutSeconds\": 1", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/proc/sys/net\",", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"mountPath\": \"/host/proc/sys/kernel\",", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"mountPropagation\": \"HostToContainer\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/host/etc/cni/net.d\",", " \"name\": \"etc-cni-netd\"", " },", " {", " \"mountPath\": \"/var/lib/cilium/clustermesh\",", " \"name\": \"clustermesh-secrets\",", " \"readOnly\": true", " },", " {", " \"mountPath\": \"/lib/modules\",", " \"name\": \"lib-modules\",", " \"readOnly\": true", " },", " {", " \"mountPath\": \"/run/xtables.lock\",", " \"name\": \"xtables-lock\"", " },", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true", " }", " ]", " }", " ],", " \"dnsPolicy\": \"ClusterFirst\",", " \"enableServiceLinks\": true,", " \"hostNetwork\": true,", " \"initContainers\": [", " {", " \"command\": [", " \"cilium\",", " \"build-config\"", " ],", " \"env\": [", " {", " \"name\": \"K8S_NODE_NAME\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"spec.nodeName\"", " }", " }", " },", " {", " \"name\": \"CILIUM_K8S_NAMESPACE\",", " \"valueFrom\": {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " }", " }", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"config\",", " \"resources\": {},", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"sh\",", " \"-ec\",", " \"cp /usr/bin/cilium-mount /hostbin/cilium-mount;\\nnsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-mount\\\" $CGROUP_ROOT;\\nrm /hostbin/cilium-mount\\n\"", " ],", " \"env\": [", " {", " \"name\": \"CGROUP_ROOT\",", " \"value\": \"/run/cilium/cgroupv2\"", " },", " {", " \"name\": \"BIN_PATH\",", " \"value\": \"/opt/cni/bin\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"mount-cgroup\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"SYS_ADMIN\",", " \"SYS_CHROOT\",", " \"SYS_PTRACE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"sh\",", " \"-ec\",", " \"cp /usr/bin/cilium-sysctlfix /hostbin/cilium-sysctlfix;\\nnsenter --mount=/hostproc/1/ns/mnt \\\"${BIN_PATH}/cilium-sysctlfix\\\";\\nrm /hostbin/cilium-sysctlfix\\n\"", " ],", " \"env\": [", " {", " \"name\": \"BIN_PATH\",", " \"value\": \"/opt/cni/bin\"", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"apply-sysctl-overwrites\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"SYS_ADMIN\",", " \"SYS_CHROOT\",", " \"SYS_PTRACE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"args\": [", " \"mount | grep \\\"/sys/fs/bpf type bpf\\\" || mount -t bpf bpf /sys/fs/bpf\"", " ],", " \"command\": [", " \"/bin/bash\",", " \"-c\",", " \"--\"", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"mount-bpf-fs\",", " \"resources\": {},", " \"securityContext\": {", " \"privileged\": true", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"mountPropagation\": \"Bidirectional\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"/init-container.sh\"", " ],", " \"env\": [", " {", " \"name\": \"CILIUM_ALL_STATE\",", " \"valueFrom\": {", " \"configMapKeyRef\": {", " \"key\": \"clean-cilium-state\",", " \"name\": \"cilium-config\",", " \"optional\": true", " }", " }", " },", " {", " \"name\": \"CILIUM_BPF_STATE\",", " \"valueFrom\": {", " \"configMapKeyRef\": {", " \"key\": \"clean-cilium-bpf-state\",", " \"name\": \"cilium-config\",", " \"optional\": true", " }", " }", " }", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"clean-cilium-state\",", " \"resources\": {},", " \"securityContext\": {", " \"appArmorProfile\": {", " \"type\": \"Unconfined\"", " },", " \"capabilities\": {", " \"add\": [", " \"NET_ADMIN\",", " \"SYS_MODULE\",", " \"SYS_ADMIN\",", " \"SYS_RESOURCE\"", " ],", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/run/cilium/cgroupv2\",", " \"mountPropagation\": \"HostToContainer\",", " \"name\": \"cilium-cgroup\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true", " }", " ]", " },", " {", " \"command\": [", " \"/install-plugin.sh\"", " ],", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imagePullPolicy\": \"IfNotPresent\",", " \"name\": \"install-cni-binaries\",", " \"resources\": {", " \"requests\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " }", " },", " \"securityContext\": {", " \"capabilities\": {", " \"drop\": [", " \"ALL\"", " ]", " },", " \"seLinuxOptions\": {", " \"level\": \"s0\",", " \"type\": \"spc_t\"", " }", " },", " \"terminationMessagePath\": \"/dev/termination-log\",", " \"terminationMessagePolicy\": \"FallbackToLogsOnError\",", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/opt/cni/bin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true", " }", " ]", " }", " ],", " \"nodeName\": \"controller-1\",", " \"nodeSelector\": {", " \"kubernetes.io/os\": \"linux\"", " },", " \"preemptionPolicy\": \"PreemptLowerPriority\",", " \"priority\": 2000001000,", " \"priorityClassName\": \"system-node-critical\",", " \"restartPolicy\": \"Always\",", " \"schedulerName\": \"default-scheduler\",", " \"securityContext\": {},", " \"serviceAccount\": \"cilium\",", " \"serviceAccountName\": \"cilium\",", " \"terminationGracePeriodSeconds\": 1,", " \"tolerations\": [", " {", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoExecute\",", " \"key\": \"node.kubernetes.io/not-ready\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoExecute\",", " \"key\": \"node.kubernetes.io/unreachable\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/disk-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/memory-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/pid-pressure\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/unschedulable\",", " \"operator\": \"Exists\"", " },", " {", " \"effect\": \"NoSchedule\",", " \"key\": \"node.kubernetes.io/network-unavailable\",", " \"operator\": \"Exists\"", " }", " ],", " \"volumes\": [", " {", " \"emptyDir\": {},", " \"name\": \"tmp\"", " },", " {", " \"hostPath\": {", " \"path\": \"/var/run/cilium\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cilium-run\"", " },", " {", " \"hostPath\": {", " \"path\": \"/sys/fs/bpf\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"bpf-maps\"", " },", " {", " \"hostPath\": {", " \"path\": \"/proc\",", " \"type\": \"Directory\"", " },", " \"name\": \"hostproc\"", " },", " {", " \"hostPath\": {", " \"path\": \"/run/cilium/cgroupv2\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cilium-cgroup\"", " },", " {", " \"hostPath\": {", " \"path\": \"/opt/cni/bin\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"cni-path\"", " },", " {", " \"hostPath\": {", " \"path\": \"/etc/cni/net.d\",", " \"type\": \"DirectoryOrCreate\"", " },", " \"name\": \"etc-cni-netd\"", " },", " {", " \"hostPath\": {", " \"path\": \"/lib/modules\",", " \"type\": \"\"", " },", " \"name\": \"lib-modules\"", " },", " {", " \"hostPath\": {", " \"path\": \"/run/xtables.lock\",", " \"type\": \"FileOrCreate\"", " },", " \"name\": \"xtables-lock\"", " },", " {", " \"name\": \"clustermesh-secrets\",", " \"projected\": {", " \"defaultMode\": 256,", " \"sources\": [", " {", " \"secret\": {", " \"name\": \"cilium-clustermesh\",", " \"optional\": true", " }", " },", " {", " \"secret\": {", " \"items\": [", " {", " \"key\": \"tls.key\",", " \"path\": \"common-etcd-client.key\"", " },", " {", " \"key\": \"tls.crt\",", " \"path\": \"common-etcd-client.crt\"", " },", " {", " \"key\": \"ca.crt\",", " \"path\": \"common-etcd-client-ca.crt\"", " }", " ],", " \"name\": \"clustermesh-apiserver-remote-cert\",", " \"optional\": true", " }", " }", " ]", " }", " },", " {", " \"hostPath\": {", " \"path\": \"/proc/sys/net\",", " \"type\": \"Directory\"", " },", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"hostPath\": {", " \"path\": \"/proc/sys/kernel\",", " \"type\": \"Directory\"", " },", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"name\": \"kube-api-access-dz2nk\",", " \"projected\": {", " \"defaultMode\": 420,", " \"sources\": [", " {", " \"serviceAccountToken\": {", " \"expirationSeconds\": 3607,", " \"path\": \"token\"", " }", " },", " {", " \"configMap\": {", " \"items\": [", " {", " \"key\": \"ca.crt\",", " \"path\": \"ca.crt\"", " }", " ],", " \"name\": \"kube-root-ca.crt\"", " }", " },", " {", " \"downwardAPI\": {", " \"items\": [", " {", " \"fieldRef\": {", " \"apiVersion\": \"v1\",", " \"fieldPath\": \"metadata.namespace\"", " },", " \"path\": \"namespace\"", " }", " ]", " }", " }", " ]", " }", " }", " ]", " },", " \"status\": {", " \"conditions\": [", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:17Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"PodReadyToStartContainers\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:25Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"Initialized\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:18:40Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"Ready\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:18:40Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"ContainersReady\"", " },", " {", " \"lastProbeTime\": null,", " \"lastTransitionTime\": \"2026-03-17T16:07:07Z\",", " \"observedGeneration\": 1,", " \"status\": \"True\",", " \"type\": \"PodScheduled\"", " }", " ],", " \"containerStatuses\": [", " {", " \"containerID\": \"containerd://1e0d632bfe9cc6f346ad09991702d5841509c52bfccc6b09f6a288da0efd9c4f\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"cilium-agent\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": true,", " \"state\": {", " \"running\": {", " \"startedAt\": \"2026-03-17T16:07:26Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/proc/sys/net\",", " \"name\": \"host-proc-sys-net\"", " },", " {", " \"mountPath\": \"/host/proc/sys/kernel\",", " \"name\": \"host-proc-sys-kernel\"", " },", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/host/etc/cni/net.d\",", " \"name\": \"etc-cni-netd\"", " },", " {", " \"mountPath\": \"/var/lib/cilium/clustermesh\",", " \"name\": \"clustermesh-secrets\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " },", " {", " \"mountPath\": \"/lib/modules\",", " \"name\": \"lib-modules\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " },", " {", " \"mountPath\": \"/run/xtables.lock\",", " \"name\": \"xtables-lock\"", " },", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " }", " ],", " \"hostIP\": \"199.19.213.74\",", " \"hostIPs\": [", " {", " \"ip\": \"199.19.213.74\"", " }", " ],", " \"initContainerStatuses\": [", " {", " \"containerID\": \"containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"config\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://4d175fcf975539fb7e43fd5bb29086047520510f66049e6a9d426767e0d5f76c\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:17Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:17Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/tmp\",", " \"name\": \"tmp\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"mount-cgroup\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://2deea540505aebfbc0e82a0b92b022730637332e708abab53fff51ad02e5b1bd\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:21Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:21Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"apply-sysctl-overwrites\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://b3b3248c6588ffecc8f359b9b8e4f52168237cca2d8957eb52624ad757854dca\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:22Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:22Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/hostproc\",", " \"name\": \"hostproc\"", " },", " {", " \"mountPath\": \"/hostbin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"mount-bpf-fs\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://7e442576285c8cbc3c02f297fab707c1408683454efdc06c2a2031f8b22b0afd\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:23Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:23Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"containerID\": \"containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"clean-cilium-state\",", " \"ready\": true,", " \"resources\": {},", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://ece8c3dd5470554af1ad7b2d27bcd66b38e7def1f39d759af1ac7c491d7d2f1e\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:24Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:24Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/sys/fs/bpf\",", " \"name\": \"bpf-maps\"", " },", " {", " \"mountPath\": \"/run/cilium/cgroupv2\",", " \"name\": \"cilium-cgroup\"", " },", " {", " \"mountPath\": \"/var/run/cilium\",", " \"name\": \"cilium-run\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " },", " {", " \"allocatedResources\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " },", " \"containerID\": \"containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9\",", " \"image\": \"quay.io/cilium/cilium:v1.14.8\",", " \"imageID\": \"quay.io/cilium/cilium@sha256:7fca3ba4b04af066e8b086b5c1a52e30f52db01ffc642e7db0a439514aed3ada\",", " \"lastState\": {},", " \"name\": \"install-cni-binaries\",", " \"ready\": true,", " \"resources\": {", " \"requests\": {", " \"cpu\": \"100m\",", " \"memory\": \"10Mi\"", " }", " },", " \"restartCount\": 0,", " \"started\": false,", " \"state\": {", " \"terminated\": {", " \"containerID\": \"containerd://ac9afacd3fe68914e1f870faa64f19dcd0be31d5a8fd64f6fc4cebde9ed184b9\",", " \"exitCode\": 0,", " \"finishedAt\": \"2026-03-17T16:07:25Z\",", " \"reason\": \"Completed\",", " \"startedAt\": \"2026-03-17T16:07:25Z\"", " }", " },", " \"user\": {", " \"linux\": {", " \"gid\": 0,", " \"supplementalGroups\": [", " 0", " ],", " \"uid\": 0", " }", " },", " \"volumeMounts\": [", " {", " \"mountPath\": \"/host/opt/cni/bin\",", " \"name\": \"cni-path\"", " },", " {", " \"mountPath\": \"/var/run/secrets/kubernetes.io/serviceaccount\",", " \"name\": \"kube-api-access-dz2nk\",", " \"readOnly\": true,", " \"recursiveReadOnly\": \"Disabled\"", " }", " ]", " }", " ],", " \"observedGeneration\": 1,", " \"phase\": \"Running\",", " \"podIP\": \"199.19.213.74\",", " \"podIPs\": [", " {", " \"ip\": \"199.19.213.74\"", " }", " ],", " \"qosClass\": \"Burstable\",", " \"startTime\": \"2026-03-17T16:07:07Z\"", " }", " },", " \"msg\": \"Cilium pods have not been restarted\"", "}", "", "PLAY RECAP *********************************************************************", "controller-1 : ok=3 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0", "controller-2 : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0", "controller-3 : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0", "", "", "TASKS RECAP ********************************************************************", "Tuesday 17 March 2026 16:21:00 +0000 (0:00:00.531) 0:00:03.777 *********", "===============================================================================", "Gathering Facts --------------------------------------------------------- 2.26s", "Search for all Cilium pods ---------------------------------------------- 0.98s", "Verify Cilium operator pods have not been restarted --------------------- 0.53s", "INFO [cluster-upgrade > verify] Executed: Successful", "INFO [cluster-upgrade > cleanup] Executing", "WARNING [cluster-upgrade > cleanup] Executed: Missing playbook (Remove from test_sequence to suppress)", "INFO [cluster-upgrade > destroy] Executing", "WARNING [cluster-upgrade > destroy] Skipping, '--destroy=never' requested.", "INFO [cluster-upgrade > destroy] Executed: Successful", "WARNING Molecule executed 1 scenario (1 missing files)" ], "zuul_log_id": "0242ac17-0011-fb0e-dbf7-000000000008-1-controller1" } }, "task": { "duration": { "end": "2026-03-17T16:21:01.520802Z", "start": "2026-03-17T16:02:40.164157Z" }, "id": "0242ac17-0011-fb0e-dbf7-000000000008", "name": "Run Molecule scenario" } } ] } ], "stats": { "controller-1": { "changed": 3, "failures": 0, "ignored": 0, "ok": 3, "rescued": 0, "skipped": 0, "unreachable": 0 } }, "trusted": false }, { "branch": "main", "index": "0", "phase": "post", "playbook": "github.com/vexxhost/zuul-config/playbooks/base/post.yaml", "plays": [ { "play": { "duration": { "end": "2026-03-17T16:21:05.958480Z", "start": "2026-03-17T16:21:02.350598Z" }, "id": "0242ac17-0011-808f-aa5f-000000000004", "name": "all" }, "tasks": [ { "hosts": { "controller-1": { "action": "set_fact", "ansible_facts": { "log_path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1" }, "changed": false }, "controller-2": { "action": "set_fact", "ansible_facts": { "log_path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2" }, "changed": false }, "controller-3": { "action": "set_fact", "ansible_facts": { "log_path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3" }, "changed": false } }, "role": { "id": "0242ac17-0011-808f-aa5f-000000000008", "name": "fetch-output", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-03-17T16:21:02.435666Z", "start": "2026-03-17T16:21:02.362544Z" }, "id": "0242ac17-0011-808f-aa5f-00000000000a", "name": "Set log path for multiple nodes" } }, { "hosts": { "controller-1": { "action": "set_fact", "changed": false, "false_condition": "log_path is not defined", "skip_reason": "Conditional result was False", "skipped": true }, "controller-2": { "action": "set_fact", "changed": false, "false_condition": "log_path is not defined", "skip_reason": "Conditional result was False", "skipped": true }, "controller-3": { "action": "set_fact", "changed": false, "false_condition": "log_path is not defined", "skip_reason": "Conditional result was False", "skipped": true } }, "role": { "id": "0242ac17-0011-808f-aa5f-000000000008", "name": "fetch-output", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-03-17T16:21:02.483992Z", "start": "2026-03-17T16:21:02.441030Z" }, "id": "0242ac17-0011-808f-aa5f-00000000000b", "name": "Set log path for single node" } }, { "hosts": { "controller-1": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1", "state": "absent" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs" } ] }, "controller-2": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2", "state": "absent" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "state": "absent" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "state": "absent" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs" } ] }, "controller-3": { "action": "file", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output_dir", "changed": true, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3", "state": "directory" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3", "state": "absent" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts" }, { "ansible_loop_var": "zj_output_dir", "changed": false, "diff": { "after": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs" }, "before": { "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs" } }, "failed": false, "gid": 0, "group": "root", "invocation": { "module_args": { "_diff_peek": null, "_original_basename": null, "access_time": null, "access_time_format": "%Y%m%d%H%M.%S", "attributes": null, "follow": true, "force": false, "group": null, "mode": 493, "modification_time": null, "modification_time_format": "%Y%m%d%H%M.%S", "owner": null, "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "recurse": false, "selevel": null, "serole": null, "setype": null, "seuser": null, "src": null, "state": "directory", "unsafe_writes": false } }, "mode": "0755", "owner": "root", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "size": 4096, "state": "directory", "uid": 0, "zj_output_dir": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs" } ] } }, "role": { "id": "0242ac17-0011-808f-aa5f-000000000008", "name": "fetch-output", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-03-17T16:21:03.317992Z", "start": "2026-03-17T16:21:02.491588Z" }, "id": "0242ac17-0011-808f-aa5f-00000000000c", "name": "Ensure local output dirs" } }, { "hosts": { "controller-1": { "action": "synchronize", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.74:/home/zuul/zuul-output/logs/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.74:/home/zuul/zuul-output/logs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-1", "src": "logs" } }, { "ansible_loop_var": "zj_output", "changed": false, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.74:/home/zuul/zuul-output/artifacts/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.74:/home/zuul/zuul-output/artifacts/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": "", "rc": 0, "stdout_lines": [], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "src": "artifacts" } }, { "ansible_loop_var": "zj_output", "changed": false, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.74:/home/zuul/zuul-output/docs/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.74:/home/zuul/zuul-output/docs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": "", "rc": 0, "stdout_lines": [], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "src": "docs" } } ] }, "controller-2": { "action": "synchronize", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.210:/home/zuul/zuul-output/logs/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.210:/home/zuul/zuul-output/logs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-2", "src": "logs" } }, { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.210:/home/zuul/zuul-output/artifacts/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.210:/home/zuul/zuul-output/artifacts/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "src": "artifacts" } }, { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.210:/home/zuul/zuul-output/docs/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.210:/home/zuul/zuul-output/docs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "src": "docs" } } ] }, "controller-3": { "action": "synchronize", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_output", "changed": true, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.235:/home/zuul/zuul-output/logs/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.235:/home/zuul/zuul-output/logs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": ".d..t...... ./\n", "rc": 0, "stdout_lines": [ ".d..t...... ./" ], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/controller-3", "src": "logs" } }, { "ansible_loop_var": "zj_output", "changed": false, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.235:/home/zuul/zuul-output/artifacts/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.235:/home/zuul/zuul-output/artifacts/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": "", "rc": 0, "stdout_lines": [], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts", "src": "artifacts" } }, { "ansible_loop_var": "zj_output", "changed": false, "cmd": "/usr/bin/rsync --delay-updates -F --compress --archive --no-owner --no-group --rsh='/usr/bin/ssh -S none -o Port=22' --out-format='<>%i %n%L' zuul@199.19.213.235:/home/zuul/zuul-output/docs/ /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/", "failed": false, "invocation": { "module_args": { "_local_rsync_password": null, "_local_rsync_path": "rsync", "_ssh_args": null, "_substitute_controller": false, "archive": true, "checksum": false, "compress": true, "copy_links": false, "delay_updates": true, "delete": false, "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/", "dest_port": 22, "dirs": false, "existing_only": false, "group": false, "link_dest": null, "links": null, "mode": "pull", "owner": false, "partial": false, "perms": null, "private_key": null, "recursive": null, "rsync_opts": [], "rsync_path": null, "rsync_timeout": 0, "set_remote_user": true, "src": "zuul@199.19.213.235:/home/zuul/zuul-output/docs/", "ssh_connection_multiplexing": false, "times": null, "use_ssh_args": false, "verify_host": true } }, "msg": "", "rc": 0, "stdout_lines": [], "zj_output": { "dest": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs", "src": "docs" } } ] } }, "role": { "id": "0242ac17-0011-808f-aa5f-000000000008", "name": "fetch-output", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/fetch-output" }, "task": { "duration": { "end": "2026-03-17T16:21:05.104259Z", "start": "2026-03-17T16:21:03.324832Z" }, "id": "0242ac17-0011-808f-aa5f-00000000000e", "name": "Collect logs, artifacts and docs" } }, { "hosts": { "controller-1": { "action": "shell", "changed": true, "msg": "All items completed", "results": [ { "ansible_loop_var": "zj_item", "changed": true, "cmd": "if [ -n \"$(find /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/* /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/artifacts\nfi\n", "delta": "0:00:00.007103", "end": "2026-03-17 16:21:05.490991", "failed": false, "invocation": { "module_args": { "_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/artifacts\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/artifacts/* /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/artifacts\nfi\n", "_uses_shell": true, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "in-loop-ignore", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:21:05.483888", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": [], "zj_item": "artifacts", "zuul_log_id": "in-loop-ignore" }, { "ansible_loop_var": "zj_item", "changed": true, "cmd": "if [ -n \"$(find /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/* /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/docs\nfi\n", "delta": "0:00:00.006219", "end": "2026-03-17 16:21:05.726755", "failed": false, "invocation": { "module_args": { "_raw_params": "if [ -n \"$(find /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs -mindepth 1)\" ] ; then\n # Only create target directory if it is needed.\n # Do not fail if it is already there.\n mkdir -p /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/docs\n # Leave the original directory behind so that other roles\n # operating on the interface directories can simply no-op.\n mv -f /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/docs/* /var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/work/logs/docs\nfi\n", "_uses_shell": true, "argv": null, "chdir": null, "creates": null, "executable": null, "expand_argument_vars": true, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "zuul_ansible_split_streams": false, "zuul_log_id": "in-loop-ignore", "zuul_no_log": false, "zuul_output_max_bytes": 1073741824 } }, "msg": "", "rc": 0, "start": "2026-03-17 16:21:05.720536", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": [], "zj_item": "docs", "zuul_log_id": "in-loop-ignore" } ] } }, "role": { "id": "0242ac17-0011-808f-aa5f-000000000011", "name": "merge-output-to-logs", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/merge-output-to-logs" }, "task": { "duration": { "end": "2026-03-17T16:21:05.958480Z", "start": "2026-03-17T16:21:05.122253Z" }, "id": "0242ac17-0011-808f-aa5f-000000000013", "name": "Move artifacts and docs to logs dir" } } ] }, { "play": { "duration": { "end": "2026-03-17T16:21:06.746642Z", "start": "2026-03-17T16:21:05.977086Z" }, "id": "0242ac17-0011-808f-aa5f-000000000015", "name": "all" }, "tasks": [ { "hosts": { "controller-1": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxxFLLQTd3Lw6XHg51c9pgmD4TUb2gClLUiNUFsxHWmtUmrZYoRKEtp077UMBCwI6wQkwDvKyzY3CgDV7LmYAnbexiy10QDzfC4YoHkju1qGewREYiGRia2vmIWes4pnYJdcc455noD5w/sqzmr6NnDsHHgPMUTsnOLsiuBLoZCeXJ60ypCjsc8DqhuP9suEFgN+cyTjZPwEsd6gy94xpxIJza40/6EALBH8cd0vBU13z5J39uQi5bd8/lLrzVinhtSErDyV9wxk55wc6/ga9CwE4vuVqi2fMTjTEY7NQLGh5gAya/6fRTnk2FoBUauVXTSckMfgjnpyg1IwTOlZFVMo8tmCxm2giO3FS5KHOjjIx7c9KItgOT9+nLn+h6bUWL4kpq+8tZC0pMVspfObBPGXFBu4oUQXCQeTlnGVIx5vmhjewxZDv/qP7F5PT9oHcTvS2i043oJu+80Xe+A3zDS6fproFlnlRSq61PttdCNUUqcHrsQsmem9ZAWWJO4is= zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true }, "controller-2": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true }, "controller-3": { "action": "authorized_key", "changed": true, "comment": null, "exclusive": false, "follow": false, "invocation": { "module_args": { "changed": true, "comment": null, "exclusive": false, "follow": false, "key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxxFLLQTd3Lw6XHg51c9pgmD4TUb2gClLUiNUFsxHWmtUmrZYoRKEtp077UMBCwI6wQkwDvKyzY3CgDV7LmYAnbexiy10QDzfC4YoHkju1qGewREYiGRia2vmIWes4pnYJdcc455noD5w/sqzmr6NnDsHHgPMUTsnOLsiuBLoZCeXJ60ypCjsc8DqhuP9suEFgN+cyTjZPwEsd6gy94xpxIJza40/6EALBH8cd0vBU13z5J39uQi5bd8/lLrzVinhtSErDyV9wxk55wc6/ga9CwE4vuVqi2fMTjTEY7NQLGh5gAya/6fRTnk2FoBUauVXTSckMfgjnpyg1IwTOlZFVMo8tmCxm2giO3FS5KHOjjIx7c9KItgOT9+nLn+h6bUWL4kpq+8tZC0pMVspfObBPGXFBu4oUQXCQeTlnGVIx5vmhjewxZDv/qP7F5PT9oHcTvS2i043oJu+80Xe+A3zDS6fproFlnlRSq61PttdCNUUqcHrsQsmem9ZAWWJO4is= zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true } }, "key": "ssh-rsa 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 zuul-build-sshkey", "key_options": null, "keyfile": "/home/zuul/.ssh/authorized_keys", "manage_dir": true, "path": null, "state": "absent", "user": "zuul", "validate_certs": true } }, "role": { "id": "0242ac17-0011-808f-aa5f-000000000018", "name": "remove-build-sshkey", "path": "/var/lib/zuul/builds/5e16c139515c4423bfa1f2ef8fb52e9a/trusted/project_1/opendev.org/zuul/zuul-jobs/roles/remove-build-sshkey" }, "task": { "duration": { "end": "2026-03-17T16:21:06.746642Z", "start": "2026-03-17T16:21:05.982279Z" }, "id": "0242ac17-0011-808f-aa5f-00000000001a", "name": "Remove the build SSH key from all nodes" } } ] } ], "stats": { "controller-1": { "changed": 4, "failures": 0, "ignored": 0, "ok": 5, "rescued": 0, "skipped": 1, "unreachable": 0 }, "controller-2": { "changed": 3, "failures": 0, "ignored": 0, "ok": 4, "rescued": 0, "skipped": 1, "unreachable": 0 }, "controller-3": { "changed": 3, "failures": 0, "ignored": 0, "ok": 4, "rescued": 0, "skipped": 1, "unreachable": 0 } }, "trusted": true } ]