Docker in Docker enabled, initializing... ================================================================================ net.ipv6.conf.all.disable_ipv6 = 0 net.ipv6.conf.all.forwarding = 1 cgroup: delegating [cpuset cpu io memory hugetlb pids misc] under /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod88289286_1efc_4eb8_99ce_0801868c80e9.slice/cri-containerd-391deaa32e204fe998a7bc99871346c69a9400a3731b9930fea774a7cf1e20d6.scope cgroup: /kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod88289286_1efc_4eb8_99ce_0801868c80e9.slice/cri-containerd-391deaa32e204fe998a7bc99871346c69a9400a3731b9930fea774a7cf1e20d6.scope subtree_control=[cpuset cpu io memory hugetlb pids misc], dind subtree_control=[cpuset cpu io memory hugetlb pids misc] Configuring docker to use mirror.gcr.io Starting Docker: docker. Waiting for docker to be ready, sleeping for 1 seconds. ================================================================================ Done setting up docker in docker. + WRAPPED_COMMAND_PID=258 + wait 258 + env KUBERNETES_VERSION=latest ./capz/run-capz-e2e.sh installing Azure CLI Get:1 https://download.docker.com/linux/debian bookworm InRelease [46.6 kB] Get:2 http://deb.debian.org/debian bookworm InRelease [151 kB] Get:3 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB] Get:4 https://download.docker.com/linux/debian bookworm/stable amd64 Packages [78.7 kB] Get:5 http://deb.debian.org/debian-security bookworm-security InRelease [34.8 kB] Get:6 http://deb.debian.org/debian bookworm/main amd64 Packages [8790 kB] Get:7 http://deb.debian.org/debian bookworm-updates/main amd64 Packages [6924 B] Get:8 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages [339 kB] Fetched 9503 kB in 1s (11.4 MB/s) Reading package lists... Reading package lists... Building dependency tree... Reading state information... curl is already the newest version (7.88.1-10+deb12u15). apt-transport-https is already the newest version (2.6.1). lsb-release is already the newest version (12.0-1). gnupg is already the newest version (2.2.40-1.1+deb12u2). gnupg set to manually installed. The following packages will be upgraded: ca-certificates 1 upgraded, 0 newly installed, 0 to remove and 9 not upgraded. Need to get 162 kB of archives. After this operation, 3072 B of additional disk space will be used. Get:1 http://deb.debian.org/debian-security bookworm-security/main amd64 ca-certificates all 20250419~deb12u1 [162 kB] debconf: delaying package configuration, since apt-utils is not installed Fetched 162 kB in 0s (2966 kB/s) (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 23372 files and directories currently installed.) Preparing to unpack .../ca-certificates_20250419~deb12u1_all.deb ... Unpacking ca-certificates (20250419~deb12u1) over (20230311+deb12u1) ... Setting up ca-certificates (20250419~deb12u1) ... debconf: unable to initialize frontend: Dialog debconf: (No usable dialog-like program is installed, so the dialog based frontend cannot be used. at /usr/share/perl5/Debconf/FrontEnd/Dialog.pm line 78.) debconf: falling back to frontend: Readline debconf: unable to initialize frontend: Readline debconf: (This frontend requires a controlling tty.) debconf: falling back to frontend: Teletype Updating certificates in /etc/ssl/certs... rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL 21 added, 13 removed; done. Processing triggers for ca-certificates (20250419~deb12u1) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. deb [arch=amd64] https://packages.microsoft.com/repos/azure-cli/ bookworm main Hit:1 https://download.docker.com/linux/debian bookworm InRelease Hit:2 http://deb.debian.org/debian bookworm InRelease Hit:3 http://deb.debian.org/debian bookworm-updates InRelease Hit:4 http://deb.debian.org/debian-security bookworm-security InRelease Get:5 https://packages.microsoft.com/repos/azure-cli bookworm InRelease [3576 B] Get:6 https://packages.microsoft.com/repos/azure-cli bookworm/main amd64 Packages [3231 B] Fetched 6807 B in 0s (25.7 kB/s) Reading package lists... Reading package lists... Building dependency tree... Reading state information... The following NEW packages will be installed: azure-cli 0 upgraded, 1 newly installed, 0 to remove and 9 not upgraded. Need to get 54.2 MB of archives. After this operation, 599 MB of additional disk space will be used. Get:1 https://packages.microsoft.com/repos/azure-cli bookworm/main amd64 azure-cli amd64 2.89.1-1~bookworm [54.2 MB] debconf: delaying package configuration, since apt-utils is not installed Fetched 54.2 MB in 0s (141 MB/s) Selecting previously unselected package azure-cli. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 23380 files and directories currently installed.) Preparing to unpack .../azure-cli_2.89.1-1~bookworm_amd64.deb ... Unpacking azure-cli (2.89.1-1~bookworm) ... Setting up azure-cli (2.89.1-1~bookworm) ... Logging in with federated token generating sshkey for e2e Fri, 21 Aug 2026 15:16:58 +0000: Selected Kubernetes version: Fri, 21 Aug 2026 15:16:58 +0000: v1.38.0-alpha.0.29+e81f39c0e03ce8 IS_PRESUBMIT=false Fri, 21 Aug 2026 15:16:58 +0000: install helm % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 12252 100 12252 0 0 376k 0 --:--:-- --:--:-- --:--:-- 385k Downloading https://get.helm.sh/helm-v3.15.2-linux-amd64.tar.gz Verifying checksum... Done. Preparing to install helm into /home/prow/go/src/sigs.k8s.io/windows-testing/capz/tools/bin helm installed into /home/prow/go/src/sigs.k8s.io/windows-testing/capz/tools/bin/helm Fri, 21 Aug 2026 15:16:59 +0000: install clusterctl % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 68.2M 100 68.2M 0 0 97.8M 0 --:--:-- --:--:-- --:--:-- 97.8M Fri, 21 Aug 2026 15:16:59 +0000: preparing cloud-provider-azure images and credential-provider artifacts Login Succeeded /home/prow/go/src/sigs.k8s.io/cloud-provider-azure /home/prow/go/src/sigs.k8s.io/cluster-api-provider-azure /home/prow/go/src/sigs.k8s.io/cluster-api-provider-azure Image registry is capzcicommunity.azurecr.io Image Tag CCM is 7b31c76 Image Tag CNM is 7b31c76 Image Tag ACR credential provider is 7b31c76 Fri, 21 Aug 2026 15:17:09 +0000: starting to create cluster Using /home/prow/go/src/sigs.k8s.io/windows-testing/capz/templates/windows-ci.yaml Fri, 21 Aug 2026 15:17:10 +0000: using AKS management cluster Kubernetes version: 1.35 Fri, 21 Aug 2026 15:17:10 +0000: create resource group and management cluster { "id": "/subscriptions/46678f10-4bbb-447e-98e8-d2829589f2d8/resourceGroups/capz-conf-y3pf5n", "location": "canadacentral", "managedBy": null, "name": "capz-conf-y3pf5n", "properties": { "provisioningState": "Succeeded" }, "tags": { "creationTimestamp": "2026-08-21T15:17:10Z" }, "type": "Microsoft.Resources/resourceGroups" } WARNING: SSH key files '/root/.ssh/id_rsa' and '/root/.ssh/id_rsa.pub' have been generated under ~/.ssh to allow SSH access to the VM. If using machines without permanent storage like Azure Cloud Shell without an attached file share, back up your keys to a safe location WARNING: Merged "capz-conf-y3pf5n" as current context in /home/prow/go/src/sigs.k8s.io/windows-testing/capz/management.kubeconfig Fri, 21 Aug 2026 15:21:27 +0000: applying role assignment to management cluster identity to have permissions to create workload cluster Fri, 21 Aug 2026 15:21:32 +0000: Install cluster api azure onto management cluster Fetching providers Installing cert-manager version="v1.19.1" Waiting for cert-manager to be available... spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`. Installing provider="cluster-api" version="v1.14.0" targetNamespace="capi-system" spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`. Installing provider="bootstrap-kubeadm" version="v1.14.0" targetNamespace="capi-kubeadm-bootstrap-system" spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`. Installing provider="control-plane-kubeadm" version="v1.14.0" targetNamespace="capi-kubeadm-control-plane-system" spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`. Installing provider="infrastructure-azure" version="v1.26.0" targetNamespace="capz-system" spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`. spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`. Your management cluster has been initialized successfully! You can now create your first workload cluster by running the following: clusterctl generate cluster [name] --kubernetes-version [version] | kubectl apply -f - Fri, 21 Aug 2026 15:22:15 +0000: wait for core CRDs to be installed pod/azureserviceoperator-controller-manager-5c75849b9-sbngs condition met pod/azureserviceoperator-controller-manager-5c75849b9-sgr5v condition met pod/capz-controller-manager-65f8f49ccb-tkgc2 condition met Fri, 21 Aug 2026 15:23:04 +0000: Provision workload cluster Warning: bootstrap.cluster.x-k8s.io/v1beta1 KubeadmConfigTemplate is deprecated; use bootstrap.cluster.x-k8s.io/v1beta2 KubeadmConfigTemplate kubeadmconfigtemplate.bootstrap.cluster.x-k8s.io/capz-conf-y3pf5n-md-win created Warning: cluster.x-k8s.io/v1beta1 Cluster is deprecated; use cluster.x-k8s.io/v1beta2 Cluster cluster.cluster.x-k8s.io/capz-conf-y3pf5n created Warning: cluster.x-k8s.io/v1beta1 MachineDeployment is deprecated; use cluster.x-k8s.io/v1beta2 MachineDeployment machinedeployment.cluster.x-k8s.io/capz-conf-y3pf5n-md-win created Warning: controlplane.cluster.x-k8s.io/v1beta1 KubeadmControlPlane is deprecated; use controlplane.cluster.x-k8s.io/v1beta2 KubeadmControlPlane kubeadmcontrolplane.controlplane.cluster.x-k8s.io/capz-conf-y3pf5n-control-plane created azurecluster.infrastructure.cluster.x-k8s.io/capz-conf-y3pf5n created azureclusteridentity.infrastructure.cluster.x-k8s.io/cluster-identity created azuremachinetemplate.infrastructure.cluster.x-k8s.io/capz-conf-y3pf5n-control-plane created azuremachinetemplate.infrastructure.cluster.x-k8s.io/capz-conf-y3pf5n-md-win created Fri, 21 Aug 2026 15:23:07 +0000: wait for workload cluster config Fri, 21 Aug 2026 15:25:34 +0000: cluster creation complete Fri, 21 Aug 2026 15:25:34 +0000: wait for "capz-conf-y3pf5n" cluster to stabilize Fri, 21 Aug 2026 15:25:34 +0000: bastion info: capi@capz-conf-y3pf5n-4c71c086.canadacentral.cloudapp.azure.com:22 Fri, 21 Aug 2026 15:25:34 +0000: create_cluster complete Fri, 21 Aug 2026 15:25:35 +0000: discovered workload cluster Azure resource group: capz-conf-y3pf5n Fri, 21 Aug 2026 15:25:35 +0000: exporting AZURE_RESOURCE_GROUP=capz-conf-y3pf5n Fri, 21 Aug 2026 15:25:35 +0000: entering apply_workload_configuration Fri, 21 Aug 2026 15:25:35 +0000: wait for cluster to stabilize Fri, 21 Aug 2026 15:27:27 +0000: installing calico WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /home/prow/go/src/sigs.k8s.io/windows-testing/capz/capz-conf-y3pf5n.kubeconfig WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /home/prow/go/src/sigs.k8s.io/windows-testing/capz/capz-conf-y3pf5n.kubeconfig "projectcalico" has been added to your repositories namespace/calico-system created WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /home/prow/go/src/sigs.k8s.io/windows-testing/capz/capz-conf-y3pf5n.kubeconfig WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /home/prow/go/src/sigs.k8s.io/windows-testing/capz/capz-conf-y3pf5n.kubeconfig history.go:56: [debug] getting history for release calico Release "calico" does not exist. Installing it now. install.go:222: [debug] Original chart version: "v3.31.0" install.go:239: [debug] CHART PATH: /root/.cache/helm/repository/tigera-operator-v3.31.0.tgz client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 1 resource(s) wait.go:50: [debug] beginning wait for 32 resources with timeout of 1m0s install.go:208: [debug] Clearing REST mapper cache client.go:142: [debug] creating 1 resource(s) client.go:142: [debug] creating 10 resource(s) NAME: calico LAST DEPLOYED: Fri Aug 21 15:27:36 2026 NAMESPACE: tigera-operator STATUS: deployed REVISION: 1 TEST SUITE: None USER-SUPPLIED VALUES: calicoctl: image: capzcicommunity.azurecr.io/calico/ctl dnsConfig: nameservers: - 127.0.0.53 options: - name: edns0 - name: trust-ad installation: calicoNetwork: bgp: Disabled ipPools: - cidr: 192.168.0.0/16 encapsulation: VXLAN mtu: 1350 windowsDataplane: HNS cni: type: Calico serviceCIDRs: - 10.96.0.0/12 tigeraOperator: image: tigera/operator registry: capzcicommunity.azurecr.io COMPUTED VALUES: additionalLabels: {} affinity: {} apiServer: enabled: true calicoctl: image: capzcicommunity.azurecr.io/calico/ctl tag: v3.31.0 certs: node: cert: null commonName: null key: null typha: caBundle: null cert: null commonName: null key: null defaultFelixConfiguration: enabled: false dnsConfig: nameservers: - 127.0.0.53 options: - name: edns0 - name: trust-ad goldmane: enabled: true imagePullSecrets: {} installation: calicoNetwork: bgp: Disabled ipPools: - cidr: 192.168.0.0/16 encapsulation: VXLAN mtu: 1350 windowsDataplane: HNS cni: type: Calico enabled: true imagePullSecrets: [] kubeletVolumePluginPath: None kubernetesProvider: "" serviceCIDRs: - 10.96.0.0/12 kubernetesServiceEndpoint: host: "" port: "6443" manageCRDs: true nodeSelector: kubernetes.io/os: linux podAnnotations: {} podLabels: {} priorityClassName: "" resources: {} tigeraOperator: image: tigera/operator registry: capzcicommunity.azurecr.io version: v1.40.0 tolerations: - effect: NoExecute operator: Exists - effect: NoSchedule operator: Exists whisker: enabled: true HOOKS: --- # Source: tigera-operator/templates/tigera-operator/00-uninstall.yaml apiVersion: batch/v1 kind: Job metadata: name: tigera-operator-uninstall namespace: tigera-operator labels: helm.sh/chart: "tigera-operator-v3.31.0" k8s-app: tigera-operator annotations: # Mark this Job as a pre-deletion hook. This will only be executed as part # of helm uninstall, in order to ensure the Installation is cleaned up prior to # tearing down the operator. helm.sh/hook: pre-delete helm.sh/hook-weight: "-5" helm.sh/hook-delete-policy: hook-succeeded spec: template: metadata: name: "calico" labels: helm.sh/chart: "tigera-operator-v3.31.0" spec: nodeSelector: kubernetes.io/os: linux tolerations: - effect: NoExecute operator: Exists - effect: NoSchedule operator: Exists restartPolicy: Never hostNetwork: true dnsPolicy: ClusterFirstWithHostNet serviceAccountName: tigera-operator containers: - name: cleanup-job image: capzcicommunity.azurecr.io/tigera/operator:v1.40.0 args: ["-pre-delete"] MANIFEST: --- # Source: tigera-operator/templates/tigera-operator/02-serviceaccount-tigera-operator.yaml apiVersion: v1 kind: ServiceAccount metadata: name: tigera-operator namespace: tigera-operator labels: k8s-app: tigera-operator imagePullSecrets: [] --- # Source: tigera-operator/templates/tigera-operator/02-role-tigera-operator-secrets.yaml # Permissions required to manipulate operator secrets for a Calico cluster. apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: tigera-operator-secrets labels: k8s-app: tigera-operator rules: - apiGroups: - "" resources: - secrets verbs: - create - update - delete --- # Source: tigera-operator/templates/tigera-operator/02-role-tigera-operator.yaml # Permissions required when running the operator for a Calico cluster. apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: tigera-operator labels: k8s-app: tigera-operator rules: # The tigera/operator installs CustomResourceDefinitions necessary for itself # and Calico more broadly to function. - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - get - list - watch - create # We only allow update access to our own CRDs. - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - update resourceNames: - apiservers.operator.tigera.io - gatewayapis.operator.tigera.io - imagesets.operator.tigera.io - installations.operator.tigera.io - tigerastatuses.operator.tigera.io - bgpconfigurations.crd.projectcalico.org - bgpfilters.crd.projectcalico.org - bgppeers.crd.projectcalico.org - blockaffinities.crd.projectcalico.org - caliconodestatuses.crd.projectcalico.org - clusterinformations.crd.projectcalico.org - felixconfigurations.crd.projectcalico.org - globalnetworkpolicies.crd.projectcalico.org - stagedglobalnetworkpolicies.crd.projectcalico.org - globalnetworksets.crd.projectcalico.org - hostendpoints.crd.projectcalico.org - ipamblocks.crd.projectcalico.org - ipamconfigs.crd.projectcalico.org - ipamhandles.crd.projectcalico.org - ippools.crd.projectcalico.org - ipreservations.crd.projectcalico.org - kubecontrollersconfigurations.crd.projectcalico.org - networkpolicies.crd.projectcalico.org - stagednetworkpolicies.crd.projectcalico.org - stagedkubernetesnetworkpolicies.crd.projectcalico.org - networksets.crd.projectcalico.org - tiers.crd.projectcalico.org - whiskers.operator.tigera.io - goldmanes.operator.tigera.io - managementclusterconnections.operator.tigera.io # We need update and delete access for ANP/BANP CRDs to set owner refs when assuming control of pre-existing CRDs, for example on OCP. - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - update - delete resourceNames: - adminnetworkpolicies.policy.networking.k8s.io - baselineadminnetworkpolicies.policy.networking.k8s.io - apiGroups: - "" resources: - namespaces - pods - podtemplates - services - endpoints - events - configmaps - serviceaccounts verbs: - create - get - list - update - delete - watch - apiGroups: - "" resources: - resourcequotas - secrets verbs: - list - get - watch - apiGroups: - "" resources: - resourcequotas verbs: - create - get - list - update - delete - watch resourceNames: - calico-critical-pods - tigera-critical-pods - apiGroups: - "" resources: - nodes verbs: # Need to update node labels when migrating nodes. - get - patch - list # We need this for Typha autoscaling - watch - apiGroups: - authentication.k8s.io resources: # The operator creates a token review to learn its identity. - tokenreviews verbs: - create - apiGroups: - rbac.authorization.k8s.io resources: - clusterroles - clusterrolebindings - rolebindings - roles verbs: - create - get - list - update - delete - watch - bind - escalate - apiGroups: - apps resources: - deployments - daemonsets - statefulsets verbs: - create - get - list - patch - update - delete - watch - apiGroups: - apps resourceNames: - tigera-operator resources: - deployments/finalizers verbs: - update # The operator needs read and update permissions on the APIs that it controls. - apiGroups: - operator.tigera.io resources: # Note: any resources used by the operator within an OwnerReference for resources # it creates requires permissions to /finalizers. - apiservers - apiservers/finalizers - apiservers/status - gatewayapis - gatewayapis/finalizers - goldmanes - goldmanes/finalizers - goldmanes/status - imagesets - installations - installations/finalizers - installations/status - managementclusterconnections - managementclusterconnections/finalizers - managementclusterconnections/status - tigerastatuses - tigerastatuses/status - tigerastatuses/finalizers - whiskers - whiskers/finalizers - whiskers/status verbs: - get - list - update - patch - watch # In addition to the above, the operator creates and deletes TigeraStatus resources. - apiGroups: - operator.tigera.io resources: - tigerastatuses verbs: - create - delete # In addition to the above, the operator should have the ability to delete their own resources during uninstallation. - apiGroups: - operator.tigera.io resources: - installations - apiservers - whiskers - goldmanes verbs: - delete - apiGroups: - networking.k8s.io resources: - networkpolicies verbs: - create - update - delete - get - list - watch - apiGroups: - crd.projectcalico.org resources: - felixconfigurations - ippools verbs: - create - patch - list - get - watch - apiGroups: - crd.projectcalico.org resources: - kubecontrollersconfigurations - bgpconfigurations - clusterinformations verbs: - get - list - watch - apiGroups: - projectcalico.org resources: - ippools verbs: - create - update - delete - patch - get - list - watch - apiGroups: - projectcalico.org resources: - ipamconfigurations - clusterinformations verbs: - get - list - watch - apiGroups: - scheduling.k8s.io resources: - priorityclasses verbs: - create - get - list - update - delete - watch - apiGroups: - policy resources: - poddisruptionbudgets verbs: - create - get - list - update - delete - watch - apiGroups: - apiregistration.k8s.io resources: - apiservices verbs: - list - watch - create - update - apiGroups: - discovery.k8s.io resources: - endpointslices verbs: - get - list - watch - apiGroups: - admissionregistration.k8s.io resources: - mutatingwebhookconfigurations verbs: - delete - get - list - watch # Needed for operator lock - apiGroups: - coordination.k8s.io resources: - leases verbs: - create - get - list - update - delete - watch - apiGroups: - storage.k8s.io resources: - csidrivers verbs: - list - watch - update - get - create - delete # Add the permissions to monitor the status of certificate signing requests when certificate management is enabled. - apiGroups: - certificates.k8s.io resources: - certificatesigningrequests verbs: - list - watch # Add the appropriate pod security policy permissions - apiGroups: - policy resources: - podsecuritypolicies resourceNames: - tigera-operator verbs: - use - apiGroups: - policy resources: - podsecuritypolicies verbs: - get - list - watch - create - update - delete # For tiered network policy actions, tigera-apiserver requires that we authorize the operator for the tier.networkpolicies and tier.globalnetworkpolicies pseudo-kinds. - apiGroups: - projectcalico.org resourceNames: - allow-tigera.* resources: - tier.networkpolicies - tier.globalnetworkpolicies verbs: - list - watch - get - create - update - delete # For tiered network policy actions, tigera-apiserver requires get authorization on the associated tier. - apiGroups: - projectcalico.org resourceNames: - allow-tigera resources: - tiers verbs: - get - delete - update # Separated from the above rule since resourceNames does not support the create verb, and requires a field selector for list/watch verbs. - apiGroups: - projectcalico.org resources: - tiers verbs: - create - list - watch # Additions for Gateway API support. # 1. The operator needs to reconcile gateway.networking.k8s.io and gateway.envoyproxy.io CRDs. - apiGroups: - apiextensions.k8s.io resources: - customresourcedefinitions verbs: - update resourceNames: - backendlbpolicies.gateway.networking.k8s.io - backendtlspolicies.gateway.networking.k8s.io - gatewayclasses.gateway.networking.k8s.io - gateways.gateway.networking.k8s.io - grpcroutes.gateway.networking.k8s.io - httproutes.gateway.networking.k8s.io - referencegrants.gateway.networking.k8s.io - tcproutes.gateway.networking.k8s.io - tlsroutes.gateway.networking.k8s.io - udproutes.gateway.networking.k8s.io - backends.gateway.envoyproxy.io - backendtrafficpolicies.gateway.envoyproxy.io - clienttrafficpolicies.gateway.envoyproxy.io - envoyextensionpolicies.gateway.envoyproxy.io - envoypatchpolicies.gateway.envoyproxy.io - envoyproxies.gateway.envoyproxy.io - httproutefilters.gateway.envoyproxy.io - securitypolicies.gateway.envoyproxy.io # 2. GatewayClasses and EnvoyProxy configurations. - apiGroups: - gateway.networking.k8s.io resources: - gatewayclasses verbs: - create - update - delete - list - get - watch - apiGroups: - gateway.envoyproxy.io resources: - envoyproxies verbs: - create - update - delete - list - get - watch # 3. For Gateway API the operator needs to be able to create and reconcile a certificate # generation job. - apiGroups: - batch resources: - jobs verbs: - create - list - watch - apiGroups: - batch resources: - jobs verbs: - update resourceNames: - tigera-gateway-api-gateway-helm-certgen --- # Source: tigera-operator/templates/tigera-operator/02-rolebinding-tigera-operator.yaml kind: ClusterRoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: tigera-operator labels: k8s-app: tigera-operator subjects: - kind: ServiceAccount name: tigera-operator namespace: tigera-operator roleRef: kind: ClusterRole name: tigera-operator apiGroup: rbac.authorization.k8s.io --- # Source: tigera-operator/templates/tigera-operator/02-rolebinding-tigera-operator-secrets.yaml kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: tigera-operator-secrets namespace: tigera-operator labels: k8s-app: tigera-operator subjects: - kind: ServiceAccount name: tigera-operator namespace: tigera-operator roleRef: kind: ClusterRole name: tigera-operator-secrets apiGroup: rbac.authorization.k8s.io --- # Source: tigera-operator/templates/tigera-operator/02-tigera-operator.yaml apiVersion: apps/v1 kind: Deployment metadata: name: tigera-operator namespace: tigera-operator labels: k8s-app: tigera-operator spec: replicas: 1 selector: matchLabels: name: tigera-operator template: metadata: labels: name: tigera-operator k8s-app: tigera-operator spec: nodeSelector: kubernetes.io/os: linux tolerations: - effect: NoExecute operator: Exists - effect: NoSchedule operator: Exists serviceAccountName: tigera-operator # Set the termination grace period to match how long the operator will wait for # resources to terminate when being uninstalled. terminationGracePeriodSeconds: 60 hostNetwork: true # This must be set when hostNetwork is true or else the cluster services won't resolve dnsPolicy: ClusterFirstWithHostNet dnsConfig: nameservers: - 127.0.0.53 options: - name: edns0 - name: trust-ad containers: - name: tigera-operator image: capzcicommunity.azurecr.io/tigera/operator:v1.40.0 imagePullPolicy: IfNotPresent command: - operator args: # Configure tigera-operator to manage installation of the necessary CRDs. - -manage-crds=true volumeMounts: - name: var-lib-calico readOnly: true mountPath: /var/lib/calico env: - name: WATCH_NAMESPACE value: "" - name: POD_NAME valueFrom: fieldRef: fieldPath: metadata.name - name: OPERATOR_NAME value: "tigera-operator" - name: TIGERA_OPERATOR_INIT_IMAGE_VERSION value: v1.40.0 envFrom: - configMapRef: name: kubernetes-services-endpoint optional: true volumes: - name: var-lib-calico hostPath: path: /var/lib/calico --- # Source: tigera-operator/templates/crs/custom-resources.yaml apiVersion: operator.tigera.io/v1 kind: APIServer metadata: name: default spec: {} --- # Source: tigera-operator/templates/crs/custom-resources.yaml apiVersion: operator.tigera.io/v1 kind: Goldmane metadata: name: default spec: {} --- # Source: tigera-operator/templates/crs/custom-resources.yaml apiVersion: operator.tigera.io/v1 kind: Installation metadata: name: default spec: calicoNetwork: bgp: Disabled ipPools: - cidr: 192.168.0.0/16 encapsulation: VXLAN mtu: 1350 windowsDataplane: HNS cni: type: Calico imagePullSecrets: [] kubeletVolumePluginPath: None kubernetesProvider: "" serviceCIDRs: - 10.96.0.0/12 --- # Source: tigera-operator/templates/crs/custom-resources.yaml apiVersion: operator.tigera.io/v1 kind: Whisker metadata: name: default spec: {} Fri, 21 Aug 2026 15:32:38 +0000: cleaning up cloud-provider-azure cleanup make: Entering directory '/home/prow/go/src/sigs.k8s.io/cloud-provider-azure' rm -rf bin .pkg_config testResults make: Leaving directory '/home/prow/go/src/sigs.k8s.io/cloud-provider-azure' NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME capz-conf-m9gd9 NotReady 92s v1.38.0-alpha.0.29+e81f39c0e03ce8 10.1.0.4 Windows Server 2022 Datacenter 10.0.20348.5256 (amd64) containerd://2.3.4 capz-conf-y3pf5n-control-plane-8chv2 NotReady control-plane 5m22s v1.38.0-alpha.0.29+e81f39c0e03ce8 Ubuntu 24.04.4 LTS 6.17.0-1022-azure (amd64) containerd://2.3.2 Fri, 21 Aug 2026 15:32:38 +0000: collecting logs /home/prow/go/src/sigs.k8s.io/cluster-api-provider-azure /home/prow/go/src/sigs.k8s.io/windows-testing go: downloading github.com/onsi/gomega v1.42.1 go: downloading k8s.io/klog/v2 v2.140.0 go: downloading sigs.k8s.io/cluster-api/test v1.14.0 go: downloading sigs.k8s.io/controller-runtime v0.24.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.7.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4 v4.8.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservicefleet/armcontainerservicefleet v1.2.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/kubernetesconfiguration/armkubernetesconfiguration v1.1.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.13.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/msi/armmsi v1.3.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.2.0 go: downloading github.com/Azure/azure-service-operator/v2 v2.19.0 go: downloading sigs.k8s.io/cluster-api v1.14.0 go: downloading github.com/blang/semver v3.5.1+incompatible go: downloading github.com/hashicorp/go-retryablehttp v0.7.8 go: downloading github.com/onsi/ginkgo/v2 v2.32.1 go: downloading github.com/pkg/errors v0.9.1 go: downloading github.com/pkg/sftp v1.13.11 go: downloading golang.org/x/crypto v0.55.0 go: downloading golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93 go: downloading golang.org/x/mod v0.40.0 go: downloading k8s.io/api v0.36.3 go: downloading k8s.io/apimachinery v0.36.3 go: downloading k8s.io/client-go v0.36.3 go: downloading k8s.io/kubectl v0.36.2 go: downloading k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 go: downloading sigs.k8s.io/cluster-api/api v1.14.0 go: downloading sigs.k8s.io/kind v0.32.0 go: downloading github.com/go-logr/logr v1.4.4 go: downloading github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0 go: downloading github.com/AzureAD/microsoft-authentication-library-for-go v1.7.2 go: downloading github.com/google/go-cmp v0.7.0 go: downloading github.com/prometheus/common v0.67.5 go: downloading k8s.io/apiextensions-apiserver v0.36.3 go: downloading sigs.k8s.io/yaml v1.6.0 go: downloading github.com/hashicorp/go-cleanhttp v0.5.2 go: downloading github.com/Masterminds/semver/v3 v3.4.0 go: downloading github.com/kr/fs v0.1.0 go: downloading gopkg.in/inf.v0 v0.9.1 go: downloading sigs.k8s.io/randfill v1.0.0 go: downloading k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.4.2 go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 go: downloading golang.org/x/net v0.58.0 go: downloading github.com/spf13/pflag v1.0.10 go: downloading golang.org/x/term v0.45.0 go: downloading github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 go: downloading k8s.io/streaming v0.36.3 go: downloading github.com/fatih/camelcase v1.0.0 go: downloading golang.org/x/text v0.41.0 go: downloading k8s.io/cli-runtime v0.36.2 go: downloading k8s.io/component-helpers v0.36.2 go: downloading github.com/Azure/azure-sdk-for-go/sdk/tracing/azotel v0.4.0 go: downloading github.com/Azure/msi-dataplane v0.4.3 go: downloading go.opentelemetry.io/otel v1.44.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns v1.3.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcehealth/armresourcehealth v1.4.0 go: downloading sigs.k8s.io/cloud-provider-azure v1.34.3 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2 v2.2.0 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading k8s.io/cluster-bootstrap v0.36.3 go: downloading github.com/blang/semver/v4 v4.0.0 go: downloading github.com/evanphx/json-patch/v5 v5.9.11 go: downloading github.com/rotisserie/eris v0.5.4 go: downloading github.com/benbjohnson/clock v1.3.5 go: downloading go.yaml.in/yaml/v3 v3.0.4 go: downloading github.com/prometheus/client_model v0.6.2 go: downloading google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af go: downloading go.yaml.in/yaml/v2 v2.4.4 go: downloading github.com/kylelemons/godebug v1.1.0 go: downloading k8s.io/apiserver v0.36.3 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/fatih/color v1.19.0 go: downloading github.com/gobuffalo/flect v1.0.3 go: downloading github.com/olekukonko/tablewriter v1.1.4 go: downloading github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c go: downloading github.com/google/go-github/v82 v82.0.0 go: downloading golang.org/x/oauth2 v0.36.0 go: downloading github.com/moby/moby/api v1.55.0 go: downloading github.com/distribution/reference v0.6.0 go: downloading github.com/moby/moby/client v0.5.1 go: downloading github.com/MakeNowJust/heredoc v1.0.0 go: downloading golang.org/x/sys v0.47.0 go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 go: downloading github.com/fxamacker/cbor/v2 v2.9.0 go: downloading github.com/google/gnostic-models v0.7.0 go: downloading golang.org/x/time v0.15.0 go: downloading github.com/json-iterator/go v1.1.12 go: downloading github.com/spf13/cobra v1.10.2 go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0 go: downloading github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de go: downloading github.com/moby/term v0.5.2 go: downloading golang.org/x/sync v0.22.0 go: downloading sigs.k8s.io/kustomize/api v0.21.1 go: downloading sigs.k8s.io/kustomize/kyaml v0.21.1 go: downloading go.opentelemetry.io/otel/trace v1.44.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azsecrets v1.4.0 go: downloading github.com/fsnotify/fsnotify v1.9.0 go: downloading k8s.io/component-base v0.36.3 go: downloading github.com/adrg/xdg v0.5.3 go: downloading github.com/drone/envsubst/v2 v2.0.0-20210730161058-179042472c46 go: downloading github.com/spf13/viper v1.21.0 go: downloading github.com/pelletier/go-toml v1.9.5 go: downloading al.essio.dev/pkg/shellescape v1.5.1 go: downloading gomodules.xyz/jsonpatch/v2 v2.5.0 go: downloading github.com/prometheus/client_golang v1.23.2 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v6 v6.4.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v6 v6.2.0 go: downloading github.com/samber/lo v1.53.0 go: downloading go.uber.org/mock v0.6.0 go: downloading k8s.io/cloud-provider v0.34.0 go: downloading sigs.k8s.io/cloud-provider-azure/pkg/azclient v0.9.2 go: downloading sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader v0.8.4 go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 go: downloading go.opentelemetry.io/otel/metric v1.44.0 go: downloading github.com/golang-jwt/jwt/v5 v5.3.1 go: downloading github.com/mattn/go-colorable v0.1.14 go: downloading github.com/mattn/go-isatty v0.0.20 go: downloading github.com/mattn/go-runewidth v0.0.19 go: downloading github.com/olekukonko/errors v1.2.0 go: downloading github.com/olekukonko/ll v0.1.6 go: downloading github.com/google/go-querystring v1.2.0 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading golang.org/x/tools v0.49.0 go: downloading github.com/containerd/errdefs v1.0.0 go: downloading github.com/containerd/errdefs/pkg v0.3.0 go: downloading github.com/docker/go-connections v0.7.0 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 go: downloading github.com/docker/go-units v0.5.0 go: downloading github.com/moby/docker-image-spec v1.3.1 go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc go: downloading github.com/peterbourgon/diskv v2.0.1+incompatible go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/go-openapi/swag v0.23.1 go: downloading github.com/go-openapi/jsonreference v0.21.0 go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee go: downloading github.com/antlr4-go/antlr/v4 v4.13.1 go: downloading github.com/hashicorp/golang-lru v1.0.2 go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 go: downloading github.com/Masterminds/sprig/v3 v3.3.0 go: downloading github.com/google/cel-go v0.29.0 go: downloading github.com/jellydator/ttlcache/v3 v3.4.0 go: downloading github.com/go-viper/mapstructure/v2 v2.4.0 go: downloading github.com/sagikazarmark/locafero v0.11.0 go: downloading github.com/spf13/afero v1.15.0 go: downloading github.com/spf13/cast v1.10.0 go: downloading go.opentelemetry.io/otel/exporters/prometheus v0.66.0 go: downloading go.opentelemetry.io/otel/sdk/metric v1.44.0 go: downloading go.opentelemetry.io/otel/sdk v1.44.0 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/beorn7/perks v1.0.1 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/prometheus/procfs v0.20.1 go: downloading github.com/clipperhouse/uax29/v2 v2.6.0 go: downloading github.com/clipperhouse/displaywidth v0.10.0 go: downloading github.com/moby/spdystream v0.5.1 go: downloading github.com/olekukonko/cat v0.0.0-20250911104152-50322a0618f6 go: downloading github.com/felixge/httpsnoop v1.0.4 go: downloading github.com/google/btree v1.1.3 go: downloading github.com/mailru/easyjson v0.9.0 go: downloading github.com/valyala/fastjson v1.6.10 go: downloading github.com/go-openapi/jsonpointer v0.23.1 go: downloading github.com/go-errors/errors v1.4.2 go: downloading dario.cat/mergo v1.0.1 go: downloading github.com/Masterminds/goutils v1.1.1 go: downloading github.com/huandu/xstrings v1.5.0 go: downloading github.com/mitchellh/copystructure v1.2.0 go: downloading github.com/shopspring/decimal v1.4.0 go: downloading cel.dev/expr v0.25.1 go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa go: downloading github.com/subosito/gotenv v1.6.0 go: downloading github.com/pelletier/go-toml/v2 v2.2.4 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.8.1 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v6 v6.6.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerregistry/armcontainerregistry v1.2.0 go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/keyvault/armkeyvault v1.5.0 go: downloading github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8 go: downloading github.com/prometheus/otlptranslator v1.0.0 go: downloading github.com/emicklei/go-restful/v3 v3.13.0 go: downloading github.com/BurntSushi/toml v1.4.0 go: downloading github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 go: downloading github.com/xlab/treeprint v1.2.0 go: downloading github.com/josharian/intern v1.0.0 go: downloading github.com/go-openapi/swag/jsonname v0.26.0 go: downloading github.com/mitchellh/reflectwalk v1.0.2 go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa go: downloading google.golang.org/grpc v1.82.1 go: downloading sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0 go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0 go: downloading go.opentelemetry.io/proto/otlp v1.10.0 go: downloading github.com/cenkalti/backoff/v5 v5.0.3 go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 Collecting logs for cluster capz-conf-y3pf5n in namespace default and dumping logs to /logs/artifacts INFO: Creating log watcher for controller capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-controller-manager, pod capi-kubeadm-bootstrap-controller-manager-777754859d-thhg8, container manager INFO: Creating log watcher for controller capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-controller-manager, pod capi-kubeadm-control-plane-controller-manager-67c886c747-bjq9x, container manager INFO: Creating log watcher for controller capi-system/capi-controller-manager, pod capi-controller-manager-6979b7c47c-x725b, container manager INFO: Creating log watcher for controller capz-system/azureserviceoperator-controller-manager, pod azureserviceoperator-controller-manager-5c75849b9-sgr5v, container manager INFO: Creating log watcher for controller capz-system/azureserviceoperator-controller-manager, pod azureserviceoperator-controller-manager-5c75849b9-sgr5v, container migrate-aso-crd-stored-versions INFO: Creating log watcher for controller capz-system/azureserviceoperator-controller-manager, pod azureserviceoperator-controller-manager-5c75849b9-sbngs, container manager INFO: Creating log watcher for controller capz-system/azureserviceoperator-controller-manager, pod azureserviceoperator-controller-manager-5c75849b9-sbngs, container migrate-aso-crd-stored-versions INFO: Creating log watcher for controller capz-system/capz-controller-manager, pod capz-controller-manager-65f8f49ccb-tkgc2, container manager I0821 15:37:31.734750 22731 warning_handler.go:64] "AzureManagedCluster and the AzureManaged API are deprecated. Please migrate to infrastructure.cluster.x-k8s.io/v1beta1 AzureASOManagedCluster and related AzureASOManaged resources instead." I0821 15:37:31.767482 22731 warning_handler.go:64] "AzureManagedControlPlane and the AzureManaged API are deprecated. Please migrate to infrastructure.cluster.x-k8s.io/v1beta1 AzureASOManagedControlPlane and related AzureASOManaged resources instead." I0821 15:37:33.157656 22731 warning_handler.go:64] "AzureManagedControlPlaneTemplate and the AzureManaged API are deprecated. Please migrate to infrastructure.cluster.x-k8s.io/v1beta1 AzureASOManagedControlPlaneTemplate and related AzureASOManaged resources instead." I0821 15:37:33.185846 22731 warning_handler.go:64] "AzureManagedMachinePool and the AzureManaged API are deprecated. Please migrate to infrastructure.cluster.x-k8s.io/v1beta1 AzureASOManagedMachinePool and related AzureASOManaged resources instead." I0821 15:37:34.327835 22731 warning_handler.go:64] "AzureManagedMachinePoolTemplate and the AzureManaged API are deprecated. Please migrate to infrastructure.cluster.x-k8s.io/v1beta1 AzureASOManagedMachinePoolTemplate and related AzureASOManaged resources instead." I0821 15:37:37.374830 22731 warning_handler.go:64] "AzureManagedClusterTemplate and the AzureManaged API are deprecated. Please migrate to infrastructure.cluster.x-k8s.io/v1beta1 AzureASOManagedClusterTemplate and related AzureASOManaged resources instead." INFO: clusterctl describe cluster capz-conf-y3pf5n --show-conditions=all --show-machinesets=true --grouping=false --echo=true --v1beta2 Aug 21 15:37:41.316: INFO: Dumping workload cluster default/capz-conf-y3pf5n logs Aug 21 15:37:42.150: INFO: Collecting logs for Linux node capz-conf-y3pf5n-control-plane-8chv2 in cluster capz-conf-y3pf5n in namespace default Aug 21 15:38:43.148: INFO: Collecting boot logs for resource group capz-conf-y3pf5n, VM capz-conf-y3pf5n-control-plane-8chv2 Failed to get logs for Machine capz-conf-y3pf5n-control-plane-8chv2, Cluster default/capz-conf-y3pf5n: running command "sudo cat /var/log/calico/cni/cni.log": Process exited with status 1, stderr: cat: /var/log/calico/cni/cni.log: No such file or directory Aug 21 15:38:44.148: INFO: Collecting logs for Windows node capz-conf-fbvx4 in cluster capz-conf-y3pf5n in namespace default Aug 21 15:42:47.398: INFO: Attempting to copy file /c:/crashdumps.tar on node capz-conf-fbvx4 to /logs/artifacts/clusters/capz-conf-y3pf5n/machines/capz-conf-y3pf5n-md-win-pj5db-fbvx4/crashdumps.tar Aug 21 15:42:47.776: INFO: Collecting boot logs for resource group capz-conf-y3pf5n, VM capz-conf-fbvx4 Failed to get logs for Machine capz-conf-y3pf5n-md-win-pj5db-fbvx4, Cluster default/capz-conf-y3pf5n: dialing from control plane to target node at capz-conf-fbvx4: ssh: rejected: connect failed ("Temporary failure in name resolution") Aug 21 15:42:48.797: INFO: Collecting logs for Windows node capz-conf-m9gd9 in cluster capz-conf-y3pf5n in namespace default INFO: Error starting logs stream for pod capi-system/capi-controller-manager-6979b7c47c-x725b, container manager: Get "https://10.224.0.4:10250/containerLogs/capi-system/capi-controller-manager-6979b7c47c-x725b/manager?follow=true": unexpected EOF INFO: Error starting logs stream for pod capz-system/capz-controller-manager-65f8f49ccb-tkgc2, container manager: Get "https://10.224.0.4:10250/containerLogs/capz-system/capz-controller-manager-65f8f49ccb-tkgc2/manager?follow=true": unexpected EOF Aug 21 15:45:10.176: INFO: Attempting to copy file /c:/crashdumps.tar on node capz-conf-m9gd9 to /logs/artifacts/clusters/capz-conf-y3pf5n/machines/capz-conf-y3pf5n-md-win-pj5db-m9gd9/crashdumps.tar Aug 21 15:45:11.473: INFO: Collecting boot logs for resource group capz-conf-y3pf5n, VM capz-conf-m9gd9 Failed to get logs for Machine capz-conf-y3pf5n-md-win-pj5db-m9gd9, Cluster default/capz-conf-y3pf5n: [running command "Get-Content \"C:\\\\cni.log\"": Process exited with status 1, stderr: Get-Content : Cannot find path 'C:\cni.log' because it does not exist. At line:1 char:1 + Get-Content "C:\\cni.log" + ~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ObjectNotFound: (C:\cni.log:String) [Get-Content], ItemNotFoundExce ption + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetContentCommand, running command "$p = 'c:\\localdumps' ; if (Test-Path $p) { tar.exe -cvzf c:\\crashdumps.tar $p *>&1 | %{ Write-Output \"$_\"} } else { Write-Host \"No crash dumps found at $p\" }": Process exited with status 1, stderr: ] Aug 21 15:45:12.014: INFO: Dumping workload cluster default/capz-conf-y3pf5n nodes Aug 21 15:45:12.323: INFO: Describing Node capz-conf-m9gd9 Aug 21 15:45:12.475: INFO: Describing Node capz-conf-y3pf5n-control-plane-8chv2 Aug 21 15:45:12.659: INFO: Fetching nodes took 645.075828ms Aug 21 15:45:12.659: INFO: Dumping workload cluster default/capz-conf-y3pf5n pod logs Aug 21 15:45:12.993: INFO: Describing Pod calico-system/calico-apiserver-5d66bdf99-7frch Aug 21 15:45:12.993: INFO: Creating log watcher for controller calico-system/calico-apiserver-5d66bdf99-7frch, container calico-apiserver Aug 21 15:45:13.044: INFO: Describing Pod calico-system/calico-apiserver-5d66bdf99-ljn74 Aug 21 15:45:13.044: INFO: Creating log watcher for controller calico-system/calico-apiserver-5d66bdf99-ljn74, container calico-apiserver Aug 21 15:45:13.096: INFO: Describing Pod calico-system/calico-kube-controllers-6cb667cd94-qkpc2 Aug 21 15:45:13.096: INFO: Creating log watcher for controller calico-system/calico-kube-controllers-6cb667cd94-qkpc2, container calico-kube-controllers Aug 21 15:45:13.150: INFO: Describing Pod calico-system/calico-node-zsvgm Aug 21 15:45:13.150: INFO: Creating log watcher for controller calico-system/calico-node-zsvgm, container ebpf-bootstrap Aug 21 15:45:13.150: INFO: Creating log watcher for controller calico-system/calico-node-zsvgm, container flexvol-driver Aug 21 15:45:13.150: INFO: Creating log watcher for controller calico-system/calico-node-zsvgm, container calico-node Aug 21 15:45:13.150: INFO: Creating log watcher for controller calico-system/calico-node-zsvgm, container install-cni Aug 21 15:45:13.208: INFO: Describing Pod calico-system/calico-typha-75674949bc-c8dzx Aug 21 15:45:13.208: INFO: Creating log watcher for controller calico-system/calico-typha-75674949bc-c8dzx, container calico-typha Aug 21 15:45:13.227: INFO: Error starting logs stream for pod calico-system/calico-node-zsvgm, container ebpf-bootstrap: container "ebpf-bootstrap" in pod "calico-node-zsvgm" is waiting to start: trying and failing to pull image Aug 21 15:45:13.228: INFO: Error starting logs stream for pod calico-system/calico-node-zsvgm, container calico-node: container "calico-node" in pod "calico-node-zsvgm" is waiting to start: PodInitializing Aug 21 15:45:13.228: INFO: Error starting logs stream for pod calico-system/calico-node-zsvgm, container install-cni: container "install-cni" in pod "calico-node-zsvgm" is waiting to start: PodInitializing Aug 21 15:45:13.370: INFO: Describing Pod calico-system/goldmane-58f84d69fc-vb59b Aug 21 15:45:13.370: INFO: Creating log watcher for controller calico-system/goldmane-58f84d69fc-vb59b, container goldmane Aug 21 15:45:13.768: INFO: Describing Pod calico-system/whisker-67dfd4949d-r5ttn Aug 21 15:45:13.768: INFO: Creating log watcher for controller calico-system/whisker-67dfd4949d-r5ttn, container whisker Aug 21 15:45:13.768: INFO: Creating log watcher for controller calico-system/whisker-67dfd4949d-r5ttn, container whisker-backend Aug 21 15:45:14.169: INFO: Describing Pod kube-system/coredns-559f6c778d-bktc7 Aug 21 15:45:14.169: INFO: Creating log watcher for controller kube-system/coredns-559f6c778d-bktc7, container coredns Aug 21 15:45:14.569: INFO: Describing Pod kube-system/coredns-559f6c778d-gnzn2 Aug 21 15:45:14.569: INFO: Creating log watcher for controller kube-system/coredns-559f6c778d-gnzn2, container coredns Aug 21 15:45:14.968: INFO: Describing Pod kube-system/etcd-capz-conf-y3pf5n-control-plane-8chv2 Aug 21 15:45:14.968: INFO: Creating log watcher for controller kube-system/etcd-capz-conf-y3pf5n-control-plane-8chv2, container etcd Aug 21 15:45:15.368: INFO: Describing Pod kube-system/kube-apiserver-capz-conf-y3pf5n-control-plane-8chv2 Aug 21 15:45:15.368: INFO: Creating log watcher for controller kube-system/kube-apiserver-capz-conf-y3pf5n-control-plane-8chv2, container kube-apiserver Aug 21 15:45:15.768: INFO: Describing Pod kube-system/kube-controller-manager-capz-conf-y3pf5n-control-plane-8chv2 Aug 21 15:45:15.768: INFO: Creating log watcher for controller kube-system/kube-controller-manager-capz-conf-y3pf5n-control-plane-8chv2, container kube-controller-manager Aug 21 15:45:16.169: INFO: Describing Pod kube-system/kube-proxy-bqscb Aug 21 15:45:16.169: INFO: Creating log watcher for controller kube-system/kube-proxy-bqscb, container kube-proxy Aug 21 15:45:16.569: INFO: Describing Pod kube-system/kube-scheduler-capz-conf-y3pf5n-control-plane-8chv2 Aug 21 15:45:16.569: INFO: Creating log watcher for controller kube-system/kube-scheduler-capz-conf-y3pf5n-control-plane-8chv2, container kube-scheduler Aug 21 15:45:16.969: INFO: Describing Pod tigera-operator/tigera-operator-5c4fd66d78-5fgfg Aug 21 15:45:16.969: INFO: Fetching pod logs took 4.310462561s Aug 21 15:45:16.969: INFO: Dumping workload cluster default/capz-conf-y3pf5n Azure activity log Aug 21 15:45:16.969: INFO: Creating log watcher for controller tigera-operator/tigera-operator-5c4fd66d78-5fgfg, container tigera-operator Aug 21 15:45:19.208: INFO: Fetching activity logs took 2.238731613s /home/prow/go/src/sigs.k8s.io/windows-testing ================ REDACTING LOGS ================ All sensitive variables are redacted Fri, 21 Aug 2026 15:45:20 +0000: removing role assignment if the RG is not locked Fri, 21 Aug 2026 15:45:23 +0000: deleting cluster + EXIT_VALUE=124 + set +o xtrace Cleaning up after docker in docker. ================================================================================ Waiting 30 seconds for pods stopped with terminationGracePeriod:30 Cleaning up after docker Waiting for docker to stop for 30 seconds Stopping Docker: dockerProgram process in pidfile '/var/run/docker-ssd.pid', 1 process(es), refused to die. ================================================================================ Done cleaning up after docker in docker.