diff --git a/Dockerfile b/Dockerfile index 0bf7405d..258c5dd6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ -ARG K3S_TAG="v1.37.1-k3s1" -ARG K3S_DIGEST="sha256:ca7f37d993d82ef0dcdcfecb2e0e2618ea541dbaffc620c8cedebe01a82acd0d" +ARG K3S_TAG="v1.37.2-k3s1" +ARG K3S_DIGEST="sha256:21ea6e0fac4e3930c2ce8aa40ddd41a8b18cb3e9a0222c030dc005e7e88c4332" #https://hub.docker.com/r/rancher/k3s/tags (multi-arch index digest of K3S_TAG; # rancher stopped publishing per-arch "-amd64" tags after v1.34.1-k3s1) ARG UBUNTU_IMAGE="ubuntu:26.04@sha256:6a06111c3b0a8600feadb270aec771dc239bf407b25625f93f44ab00e11f4d3c" diff --git a/README.md b/README.md index 97236f2c..7233b187 100644 --- a/README.md +++ b/README.md @@ -1710,8 +1710,8 @@ These are Docker **build args** (not runtime env): | Build arg | Default | Description | |--------------|-----------------------|----------------------------------------------| -| `K3S_TAG` | `v1.37.1-k3s1` | K3s image tag from `rancher/k3s` (auto-bumped) | -| `K3S_DIGEST` | `sha256:ca7f37d9…` | index digest of `K3S_TAG` (auto-bumped with it) | +| `K3S_TAG` | `v1.37.2-k3s1` | K3s image tag from `rancher/k3s` (auto-bumped) | +| `K3S_DIGEST` | `sha256:21ea6e0f…` | index digest of `K3S_TAG` (auto-bumped with it) | | `UBUNTU_IMAGE` | `ubuntu:26.04@sha256:…` | Ubuntu base image, pinned by digest (`26.04` default; `24.04` also published) | | `UBUNTU_2404_IMAGE` | `ubuntu:24.04@sha256:…` | the pinned 24.04 base; the release passes it as `UBUNTU_IMAGE` for the `ubuntu24.04` image | @@ -1873,6 +1873,7 @@ Contributions, issues, and feature requests are welcome! Please fork the reposit | Date | K3s Tag | NVIDIA Plugin | Intel GPU Plugin | Gaudi Plugin | |------------|---------------------|---------------|------------------|--------------| +| 2026-11-09 | v1.37.2-k3s1 | v0.20.1 | v0.37.1 | 1.24.2-481 | | 2026-10-17 | v1.37.1-k3s1 | v0.20.1 | v0.37.1 | 1.24.2-481 | | 2026-10-16 | v1.37.1-k3s1 | v0.20.1 | v0.37.1 | 1.24.2-481 | | 2026-09-30 | v1.34.1-k3s1-amd64 | v0.20.1 | — | — | diff --git a/images.lock b/images.lock index 8927a951..a2ca2bad 100644 --- a/images.lock +++ b/images.lock @@ -198,26 +198,26 @@ "tag": "2026.4.1-gpu" }, { - "digest": "sha256:ca7f37d993d82ef0dcdcfecb2e0e2618ea541dbaffc620c8cedebe01a82acd0d", + "digest": "sha256:21ea6e0fac4e3930c2ce8aa40ddd41a8b18cb3e9a0222c030dc005e7e88c4332", "name": "docker.io/rancher/k3s", "sources": [ "Dockerfile" ], - "tag": "v1.37.1-k3s1" + "tag": "v1.37.2-k3s1" }, { - "digest": "sha256:5425a2b4613d2458dbdff99218e8d487ebb59c20e7a941f061c0777070f0aac1", + "digest": "sha256:391ec9f4824d631c49b52c1e3d10e4a2ced37a784afd75852e34bb2a6c7309b1", "name": "docker.io/rancher/klipper-helm", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], - "tag": "v0.13.3-build20260727" + "tag": "v0.13.3-build20261021" }, { "digest": "sha256:910944bb0bd94f060a82a56ca1ea1c577d3e49b3473a093a47a985f32e92d94a", "name": "docker.io/rancher/klipper-lb", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], "tag": "v0.4.17" }, @@ -225,7 +225,7 @@ "digest": "sha256:e757967a5ec338f6a9b371c5a9688bedaa8c3578ea3dd4db329ea0084be0a86f", "name": "docker.io/rancher/local-path-provisioner", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], "tag": "v0.0.37" }, @@ -233,7 +233,7 @@ "digest": "sha256:7efd3c635b03efd68c4e8398fc45f0d993d0e9ab016f72c1cefb0fd6d01aa286", "name": "docker.io/rancher/mirrored-coredns-coredns", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], "tag": "1.14.7" }, @@ -241,23 +241,23 @@ "digest": "sha256:101b4afd76732482eff9b95cae5f94bcf295e521fbec4e01b69c5421f3f3f3e5", "name": "docker.io/rancher/mirrored-library-busybox", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], "tag": "1.37.0" }, { - "digest": "sha256:f86a2cab1b5c649070c49f883c743dd32d8485a56e3368c5f93b9e91f1e91259", + "digest": "sha256:0f6150202bc1fed72a7bd2107460eaa510e5b8a905f3fdb5b84f2c8619c33368", "name": "docker.io/rancher/mirrored-library-traefik", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], - "tag": "3.7.13" + "tag": "3.7.15" }, { "digest": "sha256:d9862115e7c7881280d3d75ca26bda8ffc0fc213315979575bf23ce9826205c0", "name": "docker.io/rancher/mirrored-metrics-server", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], "tag": "v0.9.0" }, @@ -265,7 +265,7 @@ "digest": "sha256:f548e0e8e3dc1896ca956272154dde3314e8cc4fde0a57577ee9fa1c63f5baf4", "name": "docker.io/rancher/mirrored-pause", "sources": [ - "k3s-images.txt v1.37.1-k3s1" + "k3s-images.txt v1.37.2-k3s1" ], "tag": "3.10.2" }, @@ -455,6 +455,6 @@ "tag": "1.24.2-481" } ], - "k3s_tag": "v1.37.1-k3s1", + "k3s_tag": "v1.37.2-k3s1", "schema": "k3d-gpu.images-lock/v1" } diff --git a/tests/console/audit/chat-ui-noauth.golden b/tests/console/audit/chat-ui-noauth.golden index 50d1896a..e7722070 100644 --- a/tests/console/audit/chat-ui-noauth.golden +++ b/tests/console/audit/chat-ui-noauth.golden @@ -1,11 +1,11 @@ -audit FAIL: 1 of 12 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 12 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image ghcr.io/open-webui/open-webui@sha256:10e6a78ba2d172493460a9e8a92c496aaa7a64dc4d26d622a2e95e0c736081c9: sha256:10e6a78ba2d1 in images.lock (share/agent-chat-ui.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 diff --git a/tests/console/audit/chat-ui.golden b/tests/console/audit/chat-ui.golden index ff6cbd1a..36efc7ab 100644 --- a/tests/console/audit/chat-ui.golden +++ b/tests/console/audit/chat-ui.golden @@ -1,11 +1,11 @@ -audit PASS: 0 of 12 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit PASS: 0 of 12 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image ghcr.io/open-webui/open-webui@sha256:10e6a78ba2d172493460a9e8a92c496aaa7a64dc4d26d622a2e95e0c736081c9: sha256:10e6a78ba2d1 in images.lock (share/agent-chat-ui.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 diff --git a/tests/console/audit/default-json.golden b/tests/console/audit/default-json.golden index 4c328606..822f957a 100644 --- a/tests/console/audit/default-json.golden +++ b/tests/console/audit/default-json.golden @@ -22,28 +22,28 @@ "subject": "docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58" }, { - "detail": "sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0", + "detail": "sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0", "fix": null, "rule": "image", "status": "pass", "subject": "docker.io/rancher/local-path-provisioner:v0.0.37" }, { - "detail": "sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0", + "detail": "sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0", "fix": null, "rule": "image", "status": "pass", "subject": "docker.io/rancher/mirrored-coredns-coredns:1.14.7" }, { - "detail": "sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0", + "detail": "sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0", "fix": null, "rule": "image", "status": "pass", "subject": "docker.io/rancher/mirrored-metrics-server:v0.9.0" }, { - "detail": "sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0", + "detail": "sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0", "fix": null, "rule": "image", "status": "pass", @@ -74,11 +74,11 @@ "cluster": "gpu", "lock": { "images": 56, - "k3s_tag": "v1.37.1-k3s1" + "k3s_tag": "v1.37.2-k3s1" }, "schema": "k3d-gpu.audit/v1", "summary": [ - "audit PASS: 0 of 10 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1)" + "audit PASS: 0 of 10 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1)" ], "verdict": "pass" } diff --git a/tests/console/audit/default.golden b/tests/console/audit/default.golden index 0e404200..54204fd9 100644 --- a/tests/console/audit/default.golden +++ b/tests/console/audit/default.golden @@ -1,11 +1,11 @@ -audit PASS: 0 of 10 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit PASS: 0 of 10 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 ok secret /stub/default/kubeconfig: mode 0600 diff --git a/tests/console/audit/image-digest-moved.golden b/tests/console/audit/image-digest-moved.golden index 76d01b24..e394abfc 100644 --- a/tests/console/audit/image-digest-moved.golden +++ b/tests/console/audit/image-digest-moved.golden @@ -1,12 +1,12 @@ -audit FAIL: 1 of 10 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 10 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) FAIL image docker.io/intel/intel-gpu-plugin:0.37.1: docker.io/intel/intel-gpu-plugin is sha256:2222222222222222222222222222222222222222222222222222222222222222, images.lock pins sha256:004641b2547d58f1eadce58473fa160ad71377de1eb588cf1f82832387bf3e33 (tag 0.37.1); on k3d-gpu-server-0 fix: redeploy from the pinned digest, or bump the pin with scripts/images-lock update ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 ok secret /stub/image-digest-moved/kubeconfig: mode 0600 diff --git a/tests/console/audit/image-no-digest.golden b/tests/console/audit/image-no-digest.golden index a2143ddd..58b79b6c 100644 --- a/tests/console/audit/image-no-digest.golden +++ b/tests/console/audit/image-no-digest.golden @@ -1,13 +1,13 @@ -audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) FAIL image docker.io/library/app:dev: no registry digest, so it cannot match images.lock; on k3d-gpu-server-0 fix: remove it, or load the image from a registry reference that images.lock pins ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 ok secret /stub/image-no-digest/kubeconfig: mode 0600 diff --git a/tests/console/audit/image-not-in-lock.golden b/tests/console/audit/image-not-in-lock.golden index 8bf92b54..937f0cf7 100644 --- a/tests/console/audit/image-not-in-lock.golden +++ b/tests/console/audit/image-not-in-lock.golden @@ -1,13 +1,13 @@ -audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) FAIL image docker.io/bitnami/redis:7.4: not in images.lock: docker.io/bitnami/redis; on k3d-gpu-server-0 fix: remove the workload that runs it, or pin it in the repo and run scripts/images-lock update ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 ok secret /stub/image-not-in-lock/kubeconfig: mode 0600 diff --git a/tests/console/audit/ipv6-unauth.golden b/tests/console/audit/ipv6-unauth.golden index c8f4787f..0af5d5cf 100644 --- a/tests/console/audit/ipv6-unauth.golden +++ b/tests/console/audit/ipv6-unauth.golden @@ -1,13 +1,13 @@ -audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) FAIL listener [::]:8000 vllm (EAT chart, no auth): unauthenticated listener off loopback: no authentication; off loopback, auth none (fixture: EAT#9 layout) fix: bind it to 127.0.0.1, or put OIDC in front of it (k3d-gpu plan --bind picks oidc off loopback) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 ok secret /home/user/.kube/config: mode 0600 diff --git a/tests/console/audit/kubeconfig-0644.golden b/tests/console/audit/kubeconfig-0644.golden index 860a8a2a..37373de7 100644 --- a/tests/console/audit/kubeconfig-0644.golden +++ b/tests/console/audit/kubeconfig-0644.golden @@ -1,11 +1,11 @@ -audit FAIL: 1 of 10 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 10 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 FAIL secret /stub/kubeconfig-0644/kubeconfig: mode 0644: readable beyond its owner diff --git a/tests/console/audit/loopback-published.golden b/tests/console/audit/loopback-published.golden index 1c4e50b5..5c7980ea 100644 --- a/tests/console/audit/loopback-published.golden +++ b/tests/console/audit/loopback-published.golden @@ -1,12 +1,12 @@ -audit PASS: 0 of 11 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit PASS: 0 of 11 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok listener 127.0.0.1:8000 published node port 30080/tcp: loopback, auth unknown (docker port 30080/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 ok secret /stub/loopback-published/kubeconfig: mode 0600 diff --git a/tests/console/audit/runtime-fetch.golden b/tests/console/audit/runtime-fetch.golden index abd5bfd6..e6e7379f 100644 --- a/tests/console/audit/runtime-fetch.golden +++ b/tests/console/audit/runtime-fetch.golden @@ -1,11 +1,11 @@ -audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 FAIL fetch docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: pulled at runtime on k3d-gpu-server-0 diff --git a/tests/console/audit/runtime-pull.golden b/tests/console/audit/runtime-pull.golden index cf09dc4f..d6fc2bce 100644 --- a/tests/console/audit/runtime-pull.golden +++ b/tests/console/audit/runtime-pull.golden @@ -1,11 +1,11 @@ -audit FAIL: 2 of 12 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 2 of 12 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 FAIL fetch nvidia/cuda:13.4.3-base-ubuntu26.04: pulled at runtime on k3d-gpu-server-0 diff --git a/tests/console/audit/unauth-published.golden b/tests/console/audit/unauth-published.golden index a6c65a26..bf2473fb 100644 --- a/tests/console/audit/unauth-published.golden +++ b/tests/console/audit/unauth-published.golden @@ -1,13 +1,13 @@ -audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.1-k3s1) +audit FAIL: 1 of 11 checks failed (images.lock: 56 images, k3s v1.37.2-k3s1) FAIL listener 0.0.0.0:8000 published node port 30080/tcp: unauthenticated listener off loopback: no authentication this audit can establish; off loopback, auth unknown (docker port 30080/tcp on k3d-gpu-server-0) fix: bind it to 127.0.0.1, or put OIDC in front of it (k3d-gpu plan --bind picks oidc off loopback) ok listener 0.0.0.0:39651 kube-apiserver: off loopback, auth client-cert (docker port 6443/tcp on k3d-gpu-server-0) ok image docker.io/intel/intel-gpu-plugin:0.37.1: sha256:004641b2547d in images.lock (share/intel-gpu-plugin.yml, share/intel-gpu-wsl-plugin.yml); on k3d-gpu-server-0 ok image docker.io/openvino/model_server@sha256:a928903fe429f1e3e27107cc45932d30d95febfd2d1159dc50869c3eac76fc58: sha256:a928903fe429 in images.lock (scripts/k3d-gpu AGENT_OVMS_IMAGE, scripts/k3d-gpu NPU_UMD_IMAGE, share/npu-embeddings.yml); on k3d-gpu-server-0 -ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 -ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.1-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/local-path-provisioner:v0.0.37: sha256:e757967a5ec3 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-coredns-coredns:1.14.7: sha256:7efd3c635b03 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-metrics-server:v0.9.0: sha256:d9862115e7c7 in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 +ok image docker.io/rancher/mirrored-pause:3.10.2: sha256:f548e0e8e3dc in images.lock (k3s-images.txt v1.37.2-k3s1); on k3d-gpu-server-0 ok image ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0: sha256:bacbef6f002f in images.lock (share/nri-balloons-guard.yml, share/nri-balloons.yml); on k3d-gpu-server-0 ok image registry.k8s.io/nfd/node-feature-discovery:v0.20.1: sha256:6fc5c9af9176 in images.lock (share/node-feature-discovery.yml); on k3d-gpu-server-0 ok secret /stub/unauth-published/kubeconfig: mode 0600