Name:             aqua-test-vmware-brr47
Namespace:        aqua
Priority:         0
Service Account:  aqua-enforcer-sa
Node:             eksa-vsphere-conformitron-md-0-27ftg-hzxhw/10.2.128.84
Start Time:       Thu, 14 Mar 2024 16:13:27 +0000
Labels:           batch.kubernetes.io/controller-uid=4b1ec459-f09e-4b86-8296-9da7f786600a
                  batch.kubernetes.io/job-name=aqua-test-vmware
                  controller-uid=4b1ec459-f09e-4b86-8296-9da7f786600a
                  job-name=aqua-test-vmware
Annotations:      kubearmor-policy: enabled
                  kubearmor-visibility: process,file,network,capabilities
Status:           Failed
IP:               192.168.3.16
IPs:
  IP:           192.168.3.16
Controlled By:  Job/aqua-test-vmware
Containers:
  test-aqua-enforcer:
    Container ID:  containerd://68e96607535f00c1581d45cfe0227ad66cf805b03649dfa7295cb6c17bff0dcf
    Image:         alpine/k8s:1.26.2
    Image ID:      docker.io/alpine/k8s@sha256:b6980881cf440a3ae78dfa9c021aaa9bb66fc3c27b7120cfa2b2fa1c35ceaa20
    Port:          <none>
    Host Port:     <none>
    Command:
      /bin/bash
    Args:
      -c
      echo "Checking Aqua Enforcer"; sleep 5; timeout_seconds=420;  retry_interval=30;  max_retry_attempts=10;  start_time=$(date +%s); aqua_enforcer_pods=($(kubectl get pods -n aqua -l app=aqua-enforcer-ds --field-selector=status.phase==Running -o jsonpath="{.items[*].metadata.name}"));
      for aqua_enforcer_pod in "${aqua_enforcer_pods[@]}"; do

          while true; do
              current_time=$(date +%s); elapsed_time=$((current_time - start_time));

              if [ $elapsed_time -ge $timeout_seconds ]; then
                  echo "Error: Timeout reached while waiting for Aqua Enforcer pods to be ready.";
                  exit 1;
              fi;

              aqua_enforcer_pod_status=$(kubectl get pod $aqua_enforcer_pod -n aqua -o jsonpath="{.status.phase}");

              if [[ $aqua_enforcer_pod_status != "Running" ]]; then
                  echo "LOG: Pod $aqua_enforcer_pod, $aqua_enforcer_pod_status";
                  sleep 15;
              else
                  echo "LOG: Pod $aqua_enforcer_pod, Running";
                  break;
              fi;
          done;
      done;
      for aqua_enforcer_pod in "${aqua_enforcer_pods[@]}"; do

          kubectl exec -n aqua $aqua_enforcer_pod -- /opt/aquasec/./slk status > /dev/null 2>&1;
          status_command_exit_code=$?;

          if [ $status_command_exit_code -eq 0 ]; then
              echo "Aqua Enforcer pod $aqua_enforcer_pod is running and connected";
          else
              echo "Error: status command failed for pod $aqua_enforcer_pod.";
              echo "Retrying for 5 minutes.";

              start_time_retry=$(date +%s); retry_elapsed_time=0;

              while [ $retry_elapsed_time -lt $((retry_interval * max_retry_attempts)) ]; do
                  kubectl exec -n aqua $aqua_enforcer_pod -- /opt/aquasec/./slk status > /dev/null 2>&1;
                  status_command_exit_code=$?;

                  if [ $status_command_exit_code -eq 0 ]; then
                      echo "status command executed successfully for pod $aqua_enforcer_pod.";
                      break;
                  else
                      echo "Retry: status command failed. Retrying in 30 seconds.";
                      sleep $retry_interval;
                      retry_elapsed_time=$((retry_elapsed_time + retry_interval));
                  fi;
              done;

              if [ $status_command_exit_code -ne 0 ]; then
                  echo "Error: Retry limit reached. status command still not successful for pod $aqua_enforcer_pod.";
                  exit 1;
              fi;
          fi;
      done;
      echo "Job completed successfully for all Aqua Enforcer pods."; exit 0;
    State:          Terminated
      Reason:       Error
      Exit Code:    1
      Started:      Thu, 14 Mar 2024 16:13:30 +0000
      Finished:     Thu, 14 Mar 2024 16:18:41 +0000
    Ready:          False
    Restart Count:  0
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-x45k8 (ro)
Conditions:
  Type              Status
  Initialized       True
  Ready             False
  ContainersReady   False
  PodScheduled      True
Volumes:
  kube-api-access-x45k8:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type    Reason     Age    From               Message
  ----    ------     ----   ----               -------
  Normal  Scheduled  9m17s  default-scheduler  Successfully assigned aqua/aqua-test-vmware-brr47 to eksa-vsphere-conformitron-md-0-27ftg-hzxhw
  Normal  Pulling    9m15s  kubelet            Pulling image "alpine/k8s:1.26.2"
  Normal  Pulled     9m15s  kubelet            Successfully pulled image "alpine/k8s:1.26.2" in 138ms (138ms including waiting)
  Normal  Created    9m15s  kubelet            Created container test-aqua-enforcer
  Normal  Started    9m14s  kubelet            Started container test-aqua-enforcer