affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchFields:
- key: metadata.name
operator: In
values:
- sed-infra-server-master-mcg58ax2-aa1e3892
containers:
- env:
- name: DATASTORE_TYPE
value: kubernetes
- name: WAIT_FOR_DATASTORE
value: 'true'
- name: NODENAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.nodeName
- name: CALICO_NETWORKING_BACKEND
valueFrom:
configMapKeyRef:
key: calico_backend
name: calico-config
- name: CLUSTER_TYPE
value: k8s,bgp
- name: IP
value: autodetect
- name: CALICO_IPV4POOL_IPIP
value: Always
- name: CALICO_IPV4POOL_VXLAN
value: Never
- name: FELIX_IPINIPMTU
valueFrom:
configMapKeyRef:
key: veth_mtu
name: calico-config
- name: FELIX_VXLANMTU
valueFrom:
configMapKeyRef:
key: veth_mtu
name: calico-config
- name: FELIX_WIREGUARDMTU
valueFrom:
configMapKeyRef:
key: veth_mtu
name: calico-config
- name: CALICO_DISABLE_FILE_LOGGING
value: 'true'
- name: FELIX_DEFAULTENDPOINTTOHOSTACTION
value: ACCEPT
- name: FELIX_IPV6SUPPORT
value: 'false'
- name: FELIX_HEALTHENABLED
value: 'true'
envFrom:
- configMapRef:
name: kubernetes-services-endpoint
optional: true
image: calico/node:v3.19.1
imagePullPolicy: IfNotPresent
livenessProbe:
exec:
command:
- /bin/calico-node
- -felix-live
- -bird-live
failureThreshold: 6
initialDelaySeconds: 10
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: calico-node
readinessProbe:
exec:
command:
- /bin/calico-node
- -felix-ready
- -bird-ready
failureThreshold: 3
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
requests:
cpu: 250m
securityContext:
privileged: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /lib/modules
name: lib-modules
readOnly: true
- mountPath: /run/xtables.lock
name: xtables-lock
- mountPath: /var/run/calico
name: var-run-calico
- mountPath: /var/lib/calico
name: var-lib-calico
- mountPath: /var/run/nodeagent
name: policysync
- mountPath: /sys/fs/
mountPropagation: Bidirectional
name: sysfs
- mountPath: /var/log/calico/cni
name: cni-log-dir
readOnly: true
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-nk76r
readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
hostNetwork: true
initContainers:
- command:
- /opt/cni/bin/calico-ipam
- -upgrade
env:
- name: KUBERNETES_NODE_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.nodeName
- name: CALICO_NETWORKING_BACKEND
valueFrom:
configMapKeyRef:
key: calico_backend
name: calico-config
envFrom:
- configMapRef:
name: kubernetes-services-endpoint
optional: true
image: calico/cni:v3.19.1
imagePullPolicy: IfNotPresent
name: upgrade-ipam
resources: {}
securityContext:
privileged: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/lib/cni/networks
name: host-local-net-dir
- mountPath: /host/opt/cni/bin
name: cni-bin-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-nk76r
readOnly: true
- command:
- /opt/cni/bin/install
env:
- name: CNI_CONF_NAME
value: 10-calico.conflist
- name: CNI_NETWORK_CONFIG
valueFrom:
configMapKeyRef:
key: cni_network_config
name: calico-config
- name: KUBERNETES_NODE_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: spec.nodeName
- name: CNI_MTU
valueFrom:
configMapKeyRef:
key: veth_mtu
name: calico-config
- name: SLEEP
value: 'false'
envFrom:
- configMapRef:
name: kubernetes-services-endpoint
optional: true
image: calico/cni:v3.19.1
imagePullPolicy: IfNotPresent
name: install-cni
resources: {}
securityContext:
privileged: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /host/opt/cni/bin
name: cni-bin-dir
- mountPath: /host/etc/cni/net.d
name: cni-net-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-nk76r
readOnly: true
- image: calico/pod2daemon-flexvol:v3.19.1
imagePullPolicy: IfNotPresent
name: flexvol-driver
resources: {}
securityContext:
privileged: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /host/driver
name: flexvol-driver-host
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: kube-api-access-nk76r
readOnly: true
nodeName: sed-infra-server-master-mcg58ax2-aa1e3892
nodeSelector:
kubernetes.io/os: linux
preemptionPolicy: PreemptLowerPriority
priority: 2000001000
priorityClassName: system-node-critical
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
serviceAccount: calico-node
serviceAccountName: calico-node
terminationGracePeriodSeconds: 0
tolerations:
- effect: NoSchedule
operator: Exists
- key: CriticalAddonsOnly
operator: Exists
- effect: NoExecute
operator: Exists
- effect: NoExecute
key: node.kubernetes.io/not-ready
operator: Exists
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
- effect: NoSchedule
key: node.kubernetes.io/disk-pressure
operator: Exists
- effect: NoSchedule
key: node.kubernetes.io/memory-pressure
operator: Exists
- effect: NoSchedule
key: node.kubernetes.io/pid-pressure
operator: Exists
- effect: NoSchedule
key: node.kubernetes.io/unschedulable
operator: Exists
- effect: NoSchedule
key: node.kubernetes.io/network-unavailable
operator: Exists
volumes:
- hostPath:
path: /lib/modules
type: ''
name: lib-modules
- hostPath:
path: /var/run/calico
type: ''
name: var-run-calico
- hostPath:
path: /var/lib/calico
type: ''
name: var-lib-calico
- hostPath:
path: /run/xtables.lock
type: FileOrCreate
name: xtables-lock
- hostPath:
path: /sys/fs/
type: DirectoryOrCreate
name: sysfs
- hostPath:
path: /opt/cni/bin
type: ''
name: cni-bin-dir
- hostPath:
path: /etc/cni/net.d
type: ''
name: cni-net-dir
- hostPath:
path: /var/log/calico/cni
type: ''
name: cni-log-dir
- hostPath:
path: /var/lib/cni/networks
type: ''
name: host-local-net-dir
- hostPath:
path: /var/run/nodeagent
type: DirectoryOrCreate
name: policysync
- hostPath:
path: /usr/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds
type: DirectoryOrCreate
name: flexvol-driver-host
- name: kube-api-access-nk76r
projected:
defaultMode: 420
sources:
- serviceAccountToken:
expirationSeconds: 3607
path: token
- configMap:
items:
- key: ca.crt
path: ca.crt
name: kube-root-ca.crt
- downwardAPI:
items:
- fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
path: namespace
calico-node-hkwtj
kubectl.kubernetes.io/restartedAt: 2023-09-06T21:49:54+02:00
Owner:
calico-node (DaemonSet)
Spec
Status
conditions:
- lastProbeTime: null
lastTransitionTime: '2025-10-19T10:15:46Z'
status: 'True'
type: Initialized
- lastProbeTime: null
lastTransitionTime: '2024-04-28T13:57:08Z'
message: 'containers with unready status: [calico-node]'
reason: ContainersNotReady
status: 'False'
type: Ready
- lastProbeTime: null
lastTransitionTime: '2024-04-28T13:57:08Z'
message: 'containers with unready status: [calico-node]'
reason: ContainersNotReady
status: 'False'
type: ContainersReady
- lastProbeTime: null
lastTransitionTime: '2024-04-28T13:57:08Z'
status: 'True'
type: PodScheduled
containerStatuses:
- containerID: containerd://9c917e9baecb5084b57d35a7a9e1c479c7c06770f43f3422cd0f4c3c71a0f2c7
image: docker.io/calico/node:v3.19.1
imageID: docker.io/calico/node@sha256:bc4a631d553b38fdc169ea4cb8027fa894a656e80d68d513359a4b9d46836b55
lastState:
terminated:
containerID: containerd://dff5cd74cb701506f39cc77c33adefa1359157cb86247fa3d33e50cf70de7817
exitCode: 255
finishedAt: '2025-10-19T10:15:24Z'
reason: Unknown
startedAt: '2025-10-10T05:12:37Z'
name: calico-node
ready: false
restartCount: 14
started: true
state:
running:
startedAt: '2025-10-19T10:15:47Z'
hostIP: 192.168.1.3
initContainerStatuses:
- containerID: containerd://93344b48c2e686a19b327904a280a294e582caf2886b8cc442f9310123a41a37
image: docker.io/calico/cni:v3.19.1
imageID: docker.io/calico/cni@sha256:f301171be0add870152483fcce71b28cafb8e910f61ff003032e9b1053b062c4
lastState: {}
name: upgrade-ipam
ready: true
restartCount: 14
state:
terminated:
containerID: containerd://93344b48c2e686a19b327904a280a294e582caf2886b8cc442f9310123a41a37
exitCode: 0
finishedAt: '2025-10-19T10:15:43Z'
reason: Completed
startedAt: '2025-10-19T10:15:42Z'
- containerID: containerd://46be18c2ec39b8a9600e41e95b96e8f4be1c6439352fc5cf8327385475fa8c87
image: docker.io/calico/cni:v3.19.1
imageID: docker.io/calico/cni@sha256:f301171be0add870152483fcce71b28cafb8e910f61ff003032e9b1053b062c4
lastState: {}
name: install-cni
ready: true
restartCount: 0
state:
terminated:
containerID: containerd://46be18c2ec39b8a9600e41e95b96e8f4be1c6439352fc5cf8327385475fa8c87
exitCode: 0
finishedAt: '2025-10-19T10:15:45Z'
reason: Completed
startedAt: '2025-10-19T10:15:43Z'
- containerID: containerd://13202fbee0867f0e81f46b790d08ac06108fbcfe141c5fb3dae71aa66d1b789c
image: docker.io/calico/pod2daemon-flexvol:v3.19.1
imageID: docker.io/calico/pod2daemon-flexvol@sha256:bcac7dc4f1301b062d91a177a52d13716907636975c44131fb8350e7f851c944
lastState: {}
name: flexvol-driver
ready: true
restartCount: 0
state:
terminated:
containerID: containerd://13202fbee0867f0e81f46b790d08ac06108fbcfe141c5fb3dae71aa66d1b789c
exitCode: 0
finishedAt: '2025-10-19T10:15:46Z'
reason: Completed
startedAt: '2025-10-19T10:15:46Z'
phase: Running
podIP: 192.168.1.3
podIPs:
- ip: 192.168.1.3
qosClass: Burstable
startTime: '2024-04-28T13:57:08Z'
Events
| Type | Reason | Age | From | Message |
|---|---|---|---|---|
| Warning | Unhealthy | 2025-10-25 17:10:57 | kubelet | (combined from similar events): Readiness probe failed: 2025-10-25 17:10:57.142 [INFO][20854] confd/health.go 180: Number of node(s) with BGP peering established = 0 calico/node is not ready: BIRD is not ready: BGP not established with 192.168.1.4,192.168.1.5 |