Control group /: -.slice ├─sys-fs-fuse-connections.mount ├─sys-kernel-config.mount ├─sys-kernel-debug.mount ├─dev-mqueue.mount ├─user.slice │ └─user-1000.slice │ ├─user@1000.service … │ │ ├─app.slice │ │ └─init.scope │ │ ├─634 /lib/systemd/systemd --user │ │ └─635 (sd-pam) │ ├─session-4.scope │ │ ├─1522 sshd: zuul [priv] │ │ └─1535 sshd: zuul@notty │ └─session-1.scope │ ├─ 631 sshd: zuul [priv] │ ├─ 648 sshd: zuul@notty │ ├─ 789 /usr/bin/python3 │ ├─ 1526 ssh: /home/zuul/.ansible/cp/199.204.45.223-22-zuul [mux] │ ├─38564 sh -c /bin/sh -c 'sudo -H -S -n -u root /bin/sh -c '"'"'echo BECOME-SUCCESS-dzphxlqsfmmfvxvhaxtctgzjtuzvkqsk ; /usr/bin/python3'"'"' && sleep 0' │ ├─38565 /bin/sh -c sudo -H -S -n -u root /bin/sh -c 'echo BECOME-SUCCESS-dzphxlqsfmmfvxvhaxtctgzjtuzvkqsk ; /usr/bin/python3' && sleep 0 │ ├─38566 sudo -H -S -n -u root /bin/sh -c echo BECOME-SUCCESS-dzphxlqsfmmfvxvhaxtctgzjtuzvkqsk ; /usr/bin/python3 │ ├─38567 /bin/sh -c echo BECOME-SUCCESS-dzphxlqsfmmfvxvhaxtctgzjtuzvkqsk ; /usr/bin/python3 │ ├─38568 /usr/bin/python3 │ ├─38569 /bin/bash -c set -x systemd-cgls --full --all --no-pager > /tmp/logs/system/systemd-cgls.txt ip addr > /tmp/logs/system/ip-addr.txt ip route > /tmp/logs/system/ip-route.txt lsblk > /tmp/logs/system/lsblk.txt mount > /tmp/logs/system/mount.txt docker images > /tmp/logs/system/docker-images.txt brctl show > /tmp/logs/system/brctl-show.txt ps aux --sort=-%mem > /tmp/logs/system/ps.txt dpkg -l > /tmp/logs/system/packages.txt CONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul)) if [ ! -z "$CONTAINERS" ]; then mkdir -p "/tmp/logs/system/containers" for CONTAINER in ${CONTAINERS}; do docker logs "${CONTAINER}" > "/tmp/logs/system/containers/${CONTAINER}.txt" done fi │ └─38571 systemd-cgls --full --all --no-pager ├─sys-kernel-tracing.mount ├─init.scope │ └─1 /lib/systemd/systemd --system --deserialize 39 nofb ├─system.slice │ ├─containerd.service … │ │ ├─ 3065 /usr/bin/containerd --config /etc/containerd/config.toml │ │ ├─ 4657 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id a6d9193cfc1bd3c01e1b94eb90848aeb90600e991ff762ef43d1502ffd8e983e -address /run/containerd/containerd.sock │ │ ├─ 4677 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 2f11e729e6265c1d22c8e5bef895891933f8d9d227613a67427be7aa0fe85f81 -address /run/containerd/containerd.sock │ │ ├─ 4702 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id c94e416b2a5cce03f0aa60f8dcc0701738eba8c912c5382fac3389d5d85e458d -address /run/containerd/containerd.sock │ │ ├─ 4738 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 4032e4ea3add409c00c569eea391f0de40655e355be0ec7375969227822fb92f -address /run/containerd/containerd.sock │ │ ├─ 4742 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id f5a32032cbef0738b64330c0728ca1cf33d158cbc0a4d75ea3678667d22e34bb -address /run/containerd/containerd.sock │ │ ├─ 5181 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id dc0104b235319c625f62ef4abeade4bb1cbf85262a1e81e1b9254fc27d5da193 -address /run/containerd/containerd.sock │ │ ├─ 5905 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 5005abb8438c1cc38b1fa1688564bfac1417a9f79f4d0834b44ca17411cfc3df -address /run/containerd/containerd.sock │ │ ├─ 5927 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 72d3b5d22029989b77c4d4742a15b4404617836198205cca279c1c3bf7136302 -address /run/containerd/containerd.sock │ │ ├─ 7082 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 24606aa3112a8196280529c121ef821727f38338768f1bda0264098c82e422b4 -address /run/containerd/containerd.sock │ │ ├─ 7435 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id b1fda956581b1723703e63837ac80f8e72b444e1c620d2a3b057ed07f5261dff -address /run/containerd/containerd.sock │ │ ├─ 7479 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id f4c1bdd570933748f682ecacd12d17577463dbdd7aa68c2979e5c548397f75cd -address /run/containerd/containerd.sock │ │ ├─ 7832 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 6f4adce0f5b0c911fc5c5c74e406f736d26993c1c73e5b0aa14f6191038c6c9a -address /run/containerd/containerd.sock │ │ ├─ 8298 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id e9d08935741ea0028ac734b10107f40394f394af7718eec221b76148e1f28b84 -address /run/containerd/containerd.sock │ │ ├─ 8336 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id c33509f4e8ac8cc72e8af3847ae3f016eb8704c9cdd0baff2a2f764ec8dc8468 -address /run/containerd/containerd.sock │ │ ├─ 8366 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1a8c53165bb3ac44d55feb5b7114b1f754f77eb7121ce41292db54180fa9b6e2 -address /run/containerd/containerd.sock │ │ ├─10652 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id df491ae1f2c66e55315a201ec90cb552be07ac4642e7e7fb8442f84727279378 -address /run/containerd/containerd.sock │ │ ├─10740 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 986297edaf16d570e3a7e6bc682ccf539f4d322822b64111389edc836f728291 -address /run/containerd/containerd.sock │ │ ├─11374 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id b06238c6b57f4701d3c0e80e205c511f0f54994732990596233f17d8fe796baf -address /run/containerd/containerd.sock │ │ ├─11467 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 0467d0921cf4491ec7dafaa96901a553e8f0e95b0ebe23413412c7b68e2be685 -address /run/containerd/containerd.sock │ │ ├─11766 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 9077747ffea86659cf737384fde0f128161ae5b62e1aa90a920009088ae43e10 -address /run/containerd/containerd.sock │ │ ├─12029 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 69e8f1ce94a448888e1514591c29024b2d146d73ef20ab88726f41863bf6f124 -address /run/containerd/containerd.sock │ │ ├─12428 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 0bf25da3a43fc716e664bbab365c572450951cbf8c3c0add82ac6474a6029bca -address /run/containerd/containerd.sock │ │ ├─14196 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1bfac2b4f5d4d19236ded2966370b68f8cfb01831657b4a0b70e6b5798f6edb7 -address /run/containerd/containerd.sock │ │ ├─14845 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 0558e7150414202f9f4b3840af77c50d0f8a0c80bfef719bd6f8eb7f36f85322 -address /run/containerd/containerd.sock │ │ ├─18220 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 11f9100cddf525cb4004a32152c269748549ce3786aed22b18c95c992f5ab814 -address /run/containerd/containerd.sock │ │ ├─21031 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id c1525b16f30a2cea6759746d37010e9cc148fc81bb2c58d43cd54316e62ef447 -address /run/containerd/containerd.sock │ │ ├─21095 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 0e41579954750bb02b4fa306607e92b03e8fd9791db9638d21625c4d30f01a17 -address /run/containerd/containerd.sock │ │ ├─21142 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 729e34197defc211cf53fa4e9b539a277a84045ae984443b84256ff2e97bd7b5 -address /run/containerd/containerd.sock │ │ ├─21189 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 82878972890fdf0905fdce26c66e8d03a6b11eb2f1523eabf192bcf9c4f4b0bb -address /run/containerd/containerd.sock │ │ ├─22082 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 028835e77ee5103a4ac322974a39c061efab4c8aa8aa99492253c77be439c80d -address /run/containerd/containerd.sock │ │ ├─22219 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 2d7e413f4952d5fe551930a1fa0d4114be55f166fac418857ca288d2aa43d6e1 -address /run/containerd/containerd.sock │ │ ├─23016 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 3829226e597a67d778059663c2e0fc6ad8048a91d26dc9ee62f7b13c9cd4286e -address /run/containerd/containerd.sock │ │ ├─24566 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 0134a7089e21831a9e440eab9356952d641f311ebad6ad7f5a9a94d2d62973b8 -address /run/containerd/containerd.sock │ │ ├─30032 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 6a52714cb806a8bb066ea7e9f84432c717cf660a81e12726b5d426744500197e -address /run/containerd/containerd.sock │ │ ├─30071 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id e570407a4f0edfc61237f8da24bb4f30ad1847951580dcb8ff322dfe2b6961bc -address /run/containerd/containerd.sock │ │ └─30117 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id c09cd016ce6725bf7391587e168fa36e40cbd71c980e3229f4332eb04ebe73a5 -address /run/containerd/containerd.sock │ ├─packagekit.service │ │ └─1337 /usr/libexec/packagekitd │ ├─systemd-networkd.service │ │ └─437 /lib/systemd/systemd-networkd │ ├─systemd-udevd.service │ │ └─327 /lib/systemd/systemd-udevd │ ├─system-serial\x2dgetty.slice │ │ └─serial-getty@ttyS0.service │ │ └─542 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,38400,9600 ttyS0 vt220 │ ├─polkit.service │ │ └─558 /usr/libexec/polkitd --no-debug │ ├─networkd-dispatcher.service │ │ └─533 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers │ ├─kubelet.service │ │ └─5086 /usr/bin/kubelet --bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --config=/var/lib/kubelet/config.yaml --cgroups-per-qos=false --container-runtime-endpoint=/run/containerd/containerd.sock --enforce-node-allocatable= --node-ip=199.204.45.223 --pod-infra-container-image=harbor.atmosphere.dev/registry.k8s.io/pause:3.9 │ ├─system-modprobe.slice │ ├─cloud-init-local.service │ ├─systemd-journald.service │ │ └─295 /lib/systemd/systemd-journald │ ├─ssh.service │ │ ├─ 563 sshd: /usr/sbin/sshd -D [listener] 1 of 10-100 startups │ │ ├─38510 sshd: root [priv] │ │ └─38511 sshd: root [net] │ ├─cloud-final.service │ ├─uuidd.service │ │ └─1000 /usr/sbin/uuidd --socket-activation │ ├─cloud-config.service │ ├─systemd-resolved.service │ │ └─331 /lib/systemd/systemd-resolved │ ├─dbus.service │ │ └─530 @dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only │ ├─systemd-timesyncd.service │ │ └─332 /lib/systemd/systemd-timesyncd │ ├─system-getty.slice │ │ └─getty@tty1.service │ │ └─539 /sbin/agetty -o -p -- \u --noclear tty1 linux │ └─systemd-logind.service │ └─536 /lib/systemd/systemd-logind ├─k8s.io │ ├─3f290989a1717924c4af05008478dca5a7fe748f72729c6b089723a64142ba6e │ │ └─4950 kube-apiserver --advertise-address=199.204.45.223 --allow-privileged=true --authorization-mode=Node,RBAC --client-ca-file=/etc/kubernetes/pki/ca.crt --enable-admission-plugins=NodeRestriction --enable-bootstrap-token-auth=true --etcd-cafile=/etc/kubernetes/pki/etcd/ca.crt --etcd-certfile=/etc/kubernetes/pki/apiserver-etcd-client.crt --etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key --etcd-servers=https://127.0.0.1:2379 --kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt --kubelet-client-key=/etc/kubernetes/pki/apiserver-kubelet-client.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt --proxy-client-key-file=/etc/kubernetes/pki/front-proxy-client.key --requestheader-allowed-names=front-proxy-client --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6443 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/etc/kubernetes/pki/sa.pub --service-account-signing-key-file=/etc/kubernetes/pki/sa.key --service-cluster-ip-range=10.96.0.0/12 --tls-cert-file=/etc/kubernetes/pki/apiserver.crt --tls-min-version=VersionTLS13 --tls-private-key-file=/etc/kubernetes/pki/apiserver.key │ ├─a09588ef5cb1fe47c6d3e2e913ce14eca12f43a70ab39661f997c1c05ba82406 │ │ ├─31530 apache2 -DFOREGROUND │ │ ├─33601 (wsgi:h -DFOREGROUND │ │ ├─33602 (wsgi:h -DFOREGROUND │ │ ├─33603 (wsgi:h -DFOREGROUND │ │ ├─33604 (wsgi:h -DFOREGROUND │ │ ├─33605 (wsgi:h -DFOREGROUND │ │ ├─33606 apache2 -DFOREGROUND │ │ └─33607 apache2 -DFOREGROUND │ ├─6c59ca7f7f4b6595bc19163d3d754830b4ab5a27fb2e39d82a7b7f80e6892329 │ │ └─22657 grafana server --homepath=/usr/share/grafana --config=/etc/grafana/grafana.ini --packaging=docker cfg:default.log.mode=console cfg:default.paths.data=/var/lib/grafana/ cfg:default.paths.logs=/var/log/grafana cfg:default.paths.plugins=/var/lib/grafana/plugins cfg:default.paths.provisioning=/etc/grafana/provisioning │ ├─edd1ee8b4a51dd09dffd48c3738dae07f991ee98e9556210fe7cee1bf49a0a1b │ │ └─22194 /bin/sh -ec while true; do tmp="/run/prometheus/libvirt-mounts.prom.$" awk ' function suspicious(target) { return target ~ /^\/etc\/ceph(\/|$)/ || target ~ /^\/var\/lib\/kubelet\/pods\/[^\/]+\/volumes\/kubernetes\.io~host-path\/etcceph(\/|$)/ || target ~ /^\/var\/lib\/kubelet\/pods\/[^\/]+\/volume-subpaths\/(ceph-etc|ceph-keyring|ceph-admin-keyring|external-ceph-keyring|ceph-keyring-[^\/]+)(\/|$)/ } { total++ target = $5 if (suspicious(target)) { count[target]++ } } END { duplicate = 0 max = 0 targets = 0 for (target in count) { targets++ if (count[target] > max) { max = count[target] } if (count[target] > 1) { duplicate += count[target] - 1 } } print "# HELP node_libvirt_ceph_mount_duplicate_entries Number of extra duplicate libvirt Ceph-related mountinfo entries." print "# TYPE node_libvirt_ceph_mount_duplicate_entries gauge" print "node_libvirt_ceph_mount_duplicate_entries " duplicate print "# HELP node_libvirt_ceph_mount_max_duplicates Maximum mountinfo entries seen for a single libvirt Ceph-related mount target." print "# TYPE node_libvirt_ceph_mount_max_duplicates gauge" print "node_libvirt_ceph_mount_max_duplicates " max print "# HELP node_libvirt_ceph_mount_targets Number of libvirt Ceph-related mount targets seen in mountinfo." print "# TYPE node_libvirt_ceph_mount_targets gauge" print "node_libvirt_ceph_mount_targets " targets print "# HELP node_mountinfo_entries Number of entries in /proc/1/mountinfo." print "# TYPE node_mountinfo_entries gauge" print "node_mountinfo_entries " total } ' /host/proc/1/mountinfo > "${tmp}" mv "${tmp}" /run/prometheus/libvirt-mounts.prom sleep 60 done │ ├─69e8f1ce94a448888e1514591c29024b2d146d73ef20ab88726f41863bf6f124 │ │ └─12059 /pause │ ├─316fb82589b9762c16810e1ddc2402f7996cb0401c6bbd4d1ff5b666b6d8ae1d │ │ └─12767 /bin/mysqld_exporter --mysqld.username=monitor --collect.info_schema.processlist │ ├─9c7f72174f62ca123fc13df6f9d5b0770dcd2c4bcf302ca1f9383d558395945f │ │ ├─23508 /bin/sh /opt/rabbitmq/sbin/rabbitmq-server │ │ ├─23526 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/beam.smp -W w -MBas ageffcbf -MHas ageffcbf -MBlmbcs 512 -MHlmbcs 512 -MMmcs 30 -pc unicode -P 1048576 -t 5000000 -stbt db -zdbbl 128000 -sbwt none -sbwtdcpu none -sbwtdio none -B i -- -root /opt/erlang/lib/erlang -bindir /opt/erlang/lib/erlang/erts-15.2.7.2/bin -progname erl -- -home /var/lib/rabbitmq -- -pa -noshell -noinput -s rabbit boot -boot start_sasl -syslog logger [] -syslog syslog_error_logger false -kernel prevent_overlapping_partitions false -- │ │ ├─23532 erl_child_setup 1048576 │ │ ├─23594 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/inet_gethost 4 │ │ ├─23595 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/inet_gethost 4 │ │ ├─23605 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/epmd -daemon │ │ └─23866 /bin/sh -s rabbit_disk_monitor │ ├─6a52714cb806a8bb066ea7e9f84432c717cf660a81e12726b5d426744500197e │ │ └─30059 /pause │ ├─eae41f7bf52f322959b2c7219ddd2d08351f313037032aac08693cd48f9ecf33 │ │ ├─6376 cilium-agent --config-dir=/tmp/cilium/config-map │ │ └─6744 cilium-health-responder --listen 4240 --pidfile /var/run/cilium/state/health-endpoint.pid │ ├─92c6c3c13f7f10c60257ec47cfd87ced021c9ee84d30cddf3d423be959b8952b │ │ └─23102 /bin/prometheus --web.console.templates=/etc/prometheus/consoles --web.console.libraries=/etc/prometheus/console_libraries --config.file=/etc/prometheus/config_out/prometheus.env.yaml --web.enable-lifecycle --web.external-url=http://prometheus.199-204-45-223.nip.io/ --web.route-prefix=/ --storage.tsdb.retention.time=10d --storage.tsdb.path=/prometheus --storage.tsdb.wal-compression --web.config.file=/etc/prometheus/web_config/web-config.yaml │ ├─680e43cefa828649f2bc1665ae43d888c610ac8e7b48adf6a2a1db121fed0efe │ │ └─23212 /bin/alertmanager --config.file=/etc/alertmanager/config_out/alertmanager.env.yaml --storage.path=/alertmanager --data.retention=120h --cluster.listen-address= --web.listen-address=:9093 --web.external-url=http://alertmanager.199-204-45-223.nip.io/ --web.route-prefix=/ --cluster.label=monitoring/kube-prometheus-stack-alertmanager --cluster.peer=alertmanager-kube-prometheus-stack-alertmanager-0.alertmanager-operated:9094 --cluster.reconnect-timeout=5m --web.config.file=/etc/alertmanager/web_config/web-config.yaml │ ├─08cf80f3fa158c41b5c031e298ed869c1aa775bb2ad0472ec4b887cde300f58c │ │ └─6169 cilium-operator-generic --config-dir=/tmp/cilium/config-map --debug=false │ ├─1bfac2b4f5d4d19236ded2966370b68f8cfb01831657b4a0b70e6b5798f6edb7 │ │ └─14221 /pause │ ├─fc5eb0b0d115900b389d943e68c104e9767fe361c88f03191745226a1abf79a7 │ │ └─4927 etcd --advertise-client-urls=https://199.204.45.223:2379 --cert-file=/etc/kubernetes/pki/etcd/server.crt --client-cert-auth=true --data-dir=/var/lib/etcd --experimental-initial-corrupt-check=true --experimental-watch-progress-notify-interval=5s --initial-advertise-peer-urls=https://199.204.45.223:2380 --initial-cluster=instance=https://199.204.45.223:2380 --key-file=/etc/kubernetes/pki/etcd/server.key --listen-client-urls=https://127.0.0.1:2379,https://199.204.45.223:2379 --listen-metrics-urls=http://127.0.0.1:2381 --listen-peer-urls=https://199.204.45.223:2380 --name=instance --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt --peer-client-cert-auth=true --peer-key-file=/etc/kubernetes/pki/etcd/peer.key --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt --snapshot-count=10000 --tls-min-version=TLS1.3 --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt │ ├─986297edaf16d570e3a7e6bc682ccf539f4d322822b64111389edc836f728291 │ │ └─10763 /pause │ ├─4614f3ac31cfd79e37dbc839ca8d79d186a360cf7c472a14bc51dffa29804df5 │ │ └─21434 /bin/operator --kubelet-service=kube-system/kube-prometheus-stack-kubelet --localhost=127.0.0.1 --prometheus-config-reloader=harbor.atmosphere.dev/quay.io/prometheus-operator/prometheus-config-reloader:v0.73.0 --config-reloader-cpu-request=0 --config-reloader-cpu-limit=0 --config-reloader-memory-request=0 --config-reloader-memory-limit=0 --thanos-default-base-image=quay.io/thanos/thanos:v0.35.1 --secret-field-selector=type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1 --web.enable-tls=true --web.cert-file=/cert/cert --web.key-file=/cert/key --web.listen-address=:10250 --web.tls-min-version=VersionTLS13 │ ├─0467d0921cf4491ec7dafaa96901a553e8f0e95b0ebe23413412c7b68e2be685 │ │ └─11491 /pause │ ├─fa4b9f5f9e71422238c5ad3fc93369b3033e6bef8f643508ea58ee849ece8145 │ │ └─5039 /kube-vip manager │ ├─113426f11d2f4edfe95cc842cbc0f05b09706393bd77b8654a39ffd1c2033c7f │ │ └─23472 /bin/oauth2-proxy │ ├─f5a32032cbef0738b64330c0728ca1cf33d158cbc0a4d75ea3678667d22e34bb │ │ └─4831 /pause │ ├─142ea1d5a204e872f8bf72d7c40084c1c6cfa5665d8c1149db42829c16d4b1df │ │ └─4892 kube-scheduler --authentication-kubeconfig=/etc/kubernetes/scheduler.conf --authorization-kubeconfig=/etc/kubernetes/scheduler.conf --bind-address=0.0.0.0 --kubeconfig=/etc/kubernetes/scheduler.conf --leader-elect=true --tls-min-version=VersionTLS13 │ ├─cba957e3d08d271e795cb03df0f7b15c9251bdceca913f5e70ceddb82d9047d9 │ │ └─8552 /app/cmd/cainjector/cainjector --v=2 --leader-election-namespace=cert-manager │ ├─b19fc5c8acb7a5f969c2af8e0c959c7e7eb08cd895158c5008df6afc3c98d06c │ │ ├─21948 python -u /app/sidecar.py │ │ ├─22125 python -u /app/sidecar.py │ │ └─22126 python -u /app/sidecar.py │ ├─0cb5d26a64619c59fb4ad1b6408800fdd840a704f97d5753dbcb8e6f437eab8c │ │ ├─31491 apache2 -DFOREGROUND │ │ ├─33681 (wsgi:h -DFOREGROUND │ │ ├─33682 (wsgi:h -DFOREGROUND │ │ ├─33683 (wsgi:h -DFOREGROUND │ │ ├─33684 (wsgi:h -DFOREGROUND │ │ ├─33685 (wsgi:h -DFOREGROUND │ │ ├─33686 apache2 -DFOREGROUND │ │ └─33687 apache2 -DFOREGROUND │ ├─fbe184589457f94b90dae824de92bf215b4aa51a5a4d3c34cdb1511b8198c4ed │ │ └─23450 /bin/oauth2-proxy │ ├─3829226e597a67d778059663c2e0fc6ad8048a91d26dc9ee62f7b13c9cd4286e │ │ └─23039 /pause │ ├─14231f69b1be3c6984382273ddb4839d9ffa6048dc4a7267052b483998eb3083 │ │ └─12699 /opt/percona/peer-list -on-change=/opt/percona/haproxy_add_pxc_nodes.sh -service=percona-xtradb-pxc -protocol=$(PEER_LIST_SRV_PROTOCOL) │ ├─b5e195a229c20a9e22799541b5e794fe534d12bcb6774b38cd05f77d3826bb6f │ │ └─7523 /coredns -conf /etc/coredns/Corefile │ ├─354210bb50a07642026bd9627471c59822fc0bba0e54ea9fc91e0977b030f48d │ │ └─23136 /bin/prometheus-config-reloader --listen-address=:8080 --reload-url=http://127.0.0.1:9090/-/reload --config-file=/etc/prometheus/config/prometheus.yaml.gz --config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml --watched-dir=/etc/prometheus/rules/prometheus-kube-prometheus-stack-prometheus-rulefiles-0 │ ├─f26d8dbfe56960a903a0efa05a69e6d6cc81d2cb765685edd0eb17b2c7b9a722 │ │ └─22150 /usr/bin/pod-tls-sidecar --template=/config/certificate-template.yml --ca-path=/certs/ca.crt --cert-path=/certs/tls.crt --key-path=/certs/tls.key │ ├─0134a7089e21831a9e440eab9356952d641f311ebad6ad7f5a9a94d2d62973b8 │ │ └─24600 /pause │ ├─71f87a54246fc5e2d8eedd417112d7778c694d4309741837cb75dc2ac165b0c2 │ │ └─21718 /kube-state-metrics --port=8080 --telemetry-port=8081 --port=8080 --resources=certificatesigningrequests,configmaps,cronjobs,daemonsets,deployments,endpoints,horizontalpodautoscalers,ingresses,jobs,leases,limitranges,mutatingwebhookconfigurations,namespaces,networkpolicies,nodes,persistentvolumeclaims,persistentvolumes,poddisruptionbudgets,pods,replicasets,replicationcontrollers,resourcequotas,secrets,services,statefulsets,storageclasses,validatingwebhookconfigurations,volumeattachments │ ├─028835e77ee5103a4ac322974a39c061efab4c8aa8aa99492253c77be439c80d │ │ └─22107 /pause │ ├─a6d9193cfc1bd3c01e1b94eb90848aeb90600e991ff762ef43d1502ffd8e983e │ │ └─4719 /pause │ ├─0dfc7a7b293eadb4496c5184625cc80f8985d842e8b0629340a0ed15e0abdbe2 │ │ └─8511 /app/cmd/webhook/webhook --v=2 --secure-port=10250 --feature-gates=AdditionalCertificateOutputFormats=true --dynamic-serving-ca-secret-namespace=cert-manager --dynamic-serving-ca-secret-name=cert-manager-webhook-ca --dynamic-serving-dns-names=cert-manager-webhook --dynamic-serving-dns-names=cert-manager-webhook.cert-manager --dynamic-serving-dns-names=cert-manager-webhook.cert-manager.svc --feature-gates=AdditionalCertificateOutputFormats=true │ ├─6f4adce0f5b0c911fc5c5c74e406f736d26993c1c73e5b0aa14f6191038c6c9a │ │ └─7857 /pause │ ├─e9d08935741ea0028ac734b10107f40394f394af7718eec221b76148e1f28b84 │ │ └─8324 /pause │ ├─b1fda956581b1723703e63837ac80f8e72b444e1c620d2a3b057ed07f5261dff │ │ └─7458 /pause │ ├─5206b62d50452ffbb48599c6313cfc9db8e9a3e3425874800479cb282992dbf0 │ │ └─14578 memcached -v -p 11211 -U 0 -c 8192 -m 1024 │ ├─c33509f4e8ac8cc72e8af3847ae3f016eb8704c9cdd0baff2a2f764ec8dc8468 │ │ └─8374 /pause │ ├─f4c1bdd570933748f682ecacd12d17577463dbdd7aa68c2979e5c548397f75cd │ │ └─7503 /pause │ ├─1a8c53165bb3ac44d55feb5b7114b1f754f77eb7121ce41292db54180fa9b6e2 │ │ └─8402 /pause │ ├─9077747ffea86659cf737384fde0f128161ae5b62e1aa90a920009088ae43e10 │ │ └─11790 /pause │ ├─35cd8df9acd3c7f3339822fead21a2fc28c12595c2a2c5da739effe1b38f3b35 │ │ └─23066 /bin/node_exporter --path.procfs=/host/proc --path.sysfs=/host/sys --path.rootfs=/host/root --path.udev.data=/host/root/run/udev/data --web.listen-address=[0.0.0.0]:9100 --collector.diskstats.ignored-devices=^(ram|loop|nbd|fd|(h|s|v|xv)d[a-z]|nvme\\d+n\\d+p)\\d+$ --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|fuse.squashfuse_ll|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$ --collector.filesystem.mount-points-exclude=^/(dev|proc|run/credentials/.+|sys|var/lib/docker/.+|var/lib/kubelet/pods/.+|var/lib/kubelet/plugins/kubernetes.io/csi/.+|run/containerd/.+)($|/) --collector.ethtool --collector.netclass.ignored-devices=^(lxc|cilium_(host|net)|qbr|qvb|qvo|tap|ovs-system|br|tbr|gre_sys|[0-9a-f]+_eth|vxlan).*$ --collector.netdev.device-exclude=^(lxc|cilium_(host|net)|qbr|qvb|qvo|tap|ovs-system|br|tbr|gre_sys|[0-9a-f]+_eth|vxlan).*$ --collector.processes --collector.systemd --collector.stat.softirq --collector.textfile.directory=/run/prometheus --web.config.file=/config/node-exporter.yml │ ├─8e20d056cbc0c10782481de2cb074622c668e8a33e8e89c439d96f2bc67f11c5 │ │ └─5228 /usr/local/bin/kube-proxy --config=/var/lib/kube-proxy/config.conf --hostname-override=instance │ ├─c1525b16f30a2cea6759746d37010e9cc148fc81bb2c58d43cd54316e62ef447 │ │ └─21077 /pause │ ├─5c1a8a4a9653c5aaa6abac43d3d19f72771933dba248bc26c80e411e0cdf19c8 │ │ └─11031 /server │ ├─88e6c7b576d960062c59d0c4003ee3279410644234961ef04e168a783e822386 │ │ └─7136 /usr/local/bin/envoy-gateway server --config-path=/config/envoy-gateway.yaml │ ├─de9f0966c0c298177bef0711cb59d7a43717d0990ecdcb9109103ab941f71c3c │ │ └─4916 kube-controller-manager --authentication-kubeconfig=/etc/kubernetes/controller-manager.conf --authorization-kubeconfig=/etc/kubernetes/controller-manager.conf --bind-address=0.0.0.0 --client-ca-file=/etc/kubernetes/pki/ca.crt --cluster-name=kubernetes --cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt --cluster-signing-key-file=/etc/kubernetes/pki/ca.key --controllers=*,bootstrapsigner,tokencleaner --kubeconfig=/etc/kubernetes/controller-manager.conf --leader-elect=true --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt --root-ca-file=/etc/kubernetes/pki/ca.crt --service-account-private-key-file=/etc/kubernetes/pki/sa.key --tls-min-version=VersionTLS13 --use-service-account-credentials=true │ ├─8fdb9cec1e1b3c560ff79f17462e71c7c1cf443cfbf8fcb2d0be721cb533c1b5 │ │ └─23244 /bin/prometheus-config-reloader --listen-address=:8080 --reload-url=http://127.0.0.1:9093/-/reload --config-file=/etc/alertmanager/config/alertmanager.yaml.gz --config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml --watched-dir=/etc/alertmanager/config │ ├─c94e416b2a5cce03f0aa60f8dcc0701738eba8c912c5382fac3389d5d85e458d │ │ └─4817 /pause │ ├─ae2c70a3fa245ec22c5eb043a170daf139fedab1cc2b6e5ac32f8d81ac792c42 │ │ └─7565 /coredns -conf /etc/coredns/Corefile │ ├─ef52cc44b260137ca8b57cb49f883f0e4d80ed3ac8380b7423cd8e4ca8eeff6a │ │ └─11919 percona-xtradb-cluster-operator │ ├─729e34197defc211cf53fa4e9b539a277a84045ae984443b84256ff2e97bd7b5 │ │ └─21175 /pause │ ├─b3af5d563760bc5b29243a78779029722c39f892afe455483ddaca088c64fa62 │ │ └─14954 java -Dkc.config.built=true -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Dfile.encoding=UTF-8 -Dsun.stdout.encoding=UTF-8 -Dsun.err.encoding=UTF-8 -Dstdout.encoding=UTF-8 -Dstderr.encoding=UTF-8 -XX:+ExitOnOutOfMemoryError -Djava.security.egd=file:/dev/urandom -XX:+UseParallelGC -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:FlightRecorderOptions=stackdepth=512 -XX:MinHeapFreeRatio=10 -XX:MaxHeapFreeRatio=20 -XX:MaxRAMPercentage=70 -XX:MinRAMPercentage=70 -XX:InitialRAMPercentage=50 --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED -Djgroups.dns.query=keycloak-headless.auth-system.svc.cluster.local -Dkc.home.dir=/opt/keycloak/bin/.. -Djboss.server.config.dir=/opt/keycloak/bin/../conf -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Dpicocli.disable.closures=true -Dquarkus-log-max-startup-records=10000 -cp /opt/keycloak/bin/../lib/quarkus-run.jar io.quarkus.bootstrap.runner.QuarkusEntryPoint --verbose start --health-enabled=true --http-enabled=true --http-port=8080 --hostname-strict=false --spi-events-listener-jboss-logging-success-level=info --spi-events-listener-jboss-logging-error-level=warn --transaction-xa-enabled=false --metrics-enabled=true │ ├─dc0104b235319c625f62ef4abeade4bb1cbf85262a1e81e1b9254fc27d5da193 │ │ └─5204 /pause │ ├─2f11e729e6265c1d22c8e5bef895891933f8d9d227613a67427be7aa0fe85f81 │ │ └─4769 /pause │ ├─24606aa3112a8196280529c121ef821727f38338768f1bda0264098c82e422b4 │ │ └─7110 /pause │ ├─c09cd016ce6725bf7391587e168fa36e40cbd71c980e3229f4332eb04ebe73a5 │ │ └─30143 /pause │ ├─9950d40432ddf22ff4247abfbb97793b91ff7d3b4bc405950a603818644e5f65 │ │ ├─31512 apache2 -DFOREGROUND │ │ ├─33493 (wsgi:h -DFOREGROUND │ │ ├─33494 (wsgi:h -DFOREGROUND │ │ ├─33495 (wsgi:h -DFOREGROUND │ │ ├─33496 (wsgi:h -DFOREGROUND │ │ ├─33497 (wsgi:h -DFOREGROUND │ │ ├─33498 apache2 -DFOREGROUND │ │ └─33499 apache2 -DFOREGROUND │ ├─802320927e8927472b09958bf39c9408f0cef48a0852dd7706058c8c1ccb263b │ │ ├─21978 python -u /app/sidecar.py │ │ ├─22209 python -u /app/sidecar.py │ │ └─22210 python -u /app/sidecar.py │ ├─0e41579954750bb02b4fa306607e92b03e8fd9791db9638d21625c4d30f01a17 │ │ └─21136 /pause │ ├─e570407a4f0edfc61237f8da24bb4f30ad1847951580dcb8ff322dfe2b6961bc │ │ └─30103 /pause │ ├─b06238c6b57f4701d3c0e80e205c511f0f54994732990596233f17d8fe796baf │ │ └─11399 /pause │ ├─72d3b5d22029989b77c4d4742a15b4404617836198205cca279c1c3bf7136302 │ │ └─5969 /pause │ ├─5005abb8438c1cc38b1fa1688564bfac1417a9f79f4d0834b44ca17411cfc3df │ │ └─5948 /pause │ ├─df468271f22c5ca4db4a39c66e5dcea27ca4e931e1d6ab23087cf912c245a38a │ │ └─8590 /app/cmd/controller/controller --v=2 --cluster-resource-namespace=cert-manager --leader-election-namespace=cert-manager --acme-http01-solver-image=harbor.atmosphere.dev/quay.io/jetstack/cert-manager-acmesolver:v1.12.17 --feature-gates=AdditionalCertificateOutputFormats=true --max-concurrent-challenges=60 │ ├─0bf25da3a43fc716e664bbab365c572450951cbf8c3c0add82ac6474a6029bca │ │ └─12453 /pause │ ├─21f035d3c9d1c801276f557289bbb847259e16471f595383e65eb5c0755f93ce │ │ └─23174 /usr/bin/pod-tls-sidecar --template=/config/certificate-template.yml --ca-path=/certs/ca.crt --cert-path=/certs/tls.crt --key-path=/certs/tls.key │ ├─08983e0a3a6292545870dd148ec24b4d52dff8860122fb8493dbe0775664847d │ │ └─11635 /manager --metrics-bind-address=:8080 │ ├─df491ae1f2c66e55315a201ec90cb552be07ac4642e7e7fb8442f84727279378 │ │ └─10677 /pause │ ├─fe2b861b5f5c7a9d7e39b9d254f0341db26c096dc6e6e0ee1cd15f5742419cfa │ │ ├─12548 haproxy -W -db -f /etc/haproxy-custom/haproxy-global.cfg -f /etc/haproxy/pxc/haproxy.cfg -p /etc/haproxy/pxc/haproxy.pid -S /etc/haproxy/pxc/haproxy-main.sock │ │ └─13841 haproxy -sf 15 -x sockpair@4 -W -db -f /etc/haproxy-custom/haproxy-global.cfg -f /etc/haproxy/pxc/haproxy.cfg -p /etc/haproxy/pxc/haproxy.pid -S /etc/haproxy/pxc/haproxy-main.sock │ ├─0558e7150414202f9f4b3840af77c50d0f8a0c80bfef719bd6f8eb7f36f85322 │ │ └─14868 /pause │ ├─2d7e413f4952d5fe551930a1fa0d4114be55f166fac418857ca288d2aa43d6e1 │ │ └─22242 /pause │ ├─b12df9d51fbfb3772140d391c328233a4b9c23be9f3ecb3df79e2587b45fa0ae │ │ └─14630 /bin/memcached_exporter │ ├─82878972890fdf0905fdce26c66e8d03a6b11eb2f1523eabf192bcf9c4f4b0bb │ │ └─21216 /pause │ ├─7d8a6e86199e8183da6b428ff4aef7c920a3e75987e2401abf7be516013196ae │ │ └─18364 /secretgen-controller │ ├─a814db5ea5b7f37f8964642ef991699c34680ffa23aec93053e100b45e48eb25 │ │ └─7905 local-path-provisioner --debug start --config /etc/config/config.json --service-account-name local-path-provisioner --provisioner-name cluster.local/local-path-provisioner --helper-image harbor.atmosphere.dev/ghcr.io/containerd/busybox:1.36 --configmap-name local-path-config │ ├─4032e4ea3add409c00c569eea391f0de40655e355be0ec7375969227822fb92f │ │ └─4805 /pause │ ├─26ab87a8b2f8aad4941da3e671bfd7a71d2dbbbde9da4b1ef04acf8dc5508c20 │ │ ├─12602 mysqld --wsrep_start_position=e145576a-6422-11f1-8fa8-4faa6c15db9b:20 │ │ └─12727 /var/lib/mysql/mysql-state-monitor │ ├─347584189ba6d65aa06c80ad4cb2d4423a6fce9c03fb9805946189b3e49e0ce7 │ │ ├─26734 apache2 -DFOREGROUND │ │ ├─26760 (wsgi:k -DFOREGROUND │ │ ├─26761 (wsgi:k -DFOREGROUND │ │ ├─26762 (wsgi:k -DFOREGROUND │ │ ├─26763 (wsgi:k -DFOREGROUND │ │ ├─26766 apache2 -DFOREGROUND │ │ ├─26767 apache2 -DFOREGROUND │ │ ├─26769 apache2 -DFOREGROUND │ │ ├─26772 apache2 -DFOREGROUND │ │ ├─26773 apache2 -DFOREGROUND │ │ ├─26774 apache2 -DFOREGROUND │ │ ├─26775 apache2 -DFOREGROUND │ │ ├─26777 apache2 -DFOREGROUND │ │ ├─26778 apache2 -DFOREGROUND │ │ └─26779 apache2 -DFOREGROUND │ ├─11f9100cddf525cb4004a32152c269748549ce3786aed22b18c95c992f5ab814 │ │ └─18244 /pause │ ├─0248215547515e22223a8e07910e49e75465f6cbe5a1e655cf14fff5181305ee │ │ ├─10967 /usr/bin/dumb-init -- /nginx-ingress-controller --default-backend-service=ingress-nginx/ingress-nginx-defaultbackend --publish-service=ingress-nginx/ingress-nginx-controller --election-id=ingress-nginx-leader --controller-class=k8s.io/ingress-nginx --ingress-class=atmosphere --configmap=ingress-nginx/ingress-nginx-controller --tcp-services-configmap=ingress-nginx/ingress-nginx-tcp --udp-services-configmap=ingress-nginx/ingress-nginx-udp --validating-webhook=:7443 --validating-webhook-certificate=/usr/local/certificates/cert --validating-webhook-key=/usr/local/certificates/key --enable-metrics=true │ │ ├─10980 /nginx-ingress-controller --default-backend-service=ingress-nginx/ingress-nginx-defaultbackend --publish-service=ingress-nginx/ingress-nginx-controller --election-id=ingress-nginx-leader --controller-class=k8s.io/ingress-nginx --ingress-class=atmosphere --configmap=ingress-nginx/ingress-nginx-controller --tcp-services-configmap=ingress-nginx/ingress-nginx-tcp --udp-services-configmap=ingress-nginx/ingress-nginx-udp --validating-webhook=:7443 --validating-webhook-certificate=/usr/local/certificates/cert --validating-webhook-key=/usr/local/certificates/key --enable-metrics=true │ │ ├─11109 nginx: master process /usr/bin/nginx -c /etc/nginx/nginx.conf │ │ ├─31215 nginx: worker process │ │ ├─31216 nginx: worker process │ │ └─31217 nginx: cache manager process │ └─a32c70409747eed359e73e34483677d66145c7dde1983120a84b87b2c76db8b3 │ └─11537 /manager --metrics-bind-address=:9782 ├─proc-sys-fs-binfmt_misc.mount └─dev-hugepages.mount