kubectl describe pod -n aqua aqua-enforcer-ds-7tbww
Name:             aqua-enforcer-ds-7tbww
Namespace:        aqua
Priority:         0
Service Account:  aqua-enforcer-sa
Node:             ip-10-0-176-30.us-west-2.compute.internal/10.0.176.30
Start Time:       Thu, 14 Mar 2024 19:49:55 +0000
Labels:           app=aqua-enforcer-ds
                  app.kubernetes.io/instance=aqua-enforcer
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=enforcer
                  app.kubernetes.io/version=2022.4
                  aqua.component=enforcer
                  controller-revision-hash=5575f5d885
                  helm.sh/chart=enforcer-2022.4.20
                  pod-template-generation=1
Annotations:      checksum/config: 29dc5284eedf0b1302e8ece8d3baafcacfc6e30ca84b5a97c467ad937f9a166e
                  container.apparmor.security.beta.kubernetes.io/enforcer: unconfined
                  kubearmor-policy: enabled
                  kubearmor-visibility: process,file,network,capabilities
Status:           Pending
IP:               10.0.163.197
IPs:
  IP:           10.0.163.197
Controlled By:  DaemonSet/aqua-enforcer-ds
Containers:
  enforcer:
    Container ID:   
    Image:          registry.aquasec.com/enforcer:2022.4.460
    Image ID:       
    Port:           <none>
    Host Port:      <none>
    State:          Waiting
      Reason:       ImagePullBackOff
    Ready:          False
    Restart Count:  0
    Liveness:       http-get http://:8096/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness:      http-get http://:8096/readinessz delay=60s timeout=1s period=30s #success=1 #failure=3
    Environment Variables from:
      aqua-enforcer-enforcer-config  ConfigMap  Optional: false
    Environment:
      AQUA_NODE_NAME:      (v1:spec.nodeName)
      AQUA_LOGICAL_NAME:   (v1:spec.nodeName)
      AQUA_TOKEN:         <set to the key 'token' in secret 'aqua-enforcer-agent-token'>  Optional: false
    Mounts:
      /data from aquasec-data (rw)
      /dev from dev (rw)
      /host/etc from etc (ro)
      /host/opt/aquasec from aquasec (ro)
      /host/proc from proc (ro)
      /host/sys from sys (ro)
      /opt/aquasec/audit from aquasec-audit (rw)
      /opt/aquasec/tmp from aquasec-tmp (rw)
      /var/lib/containers from containers (rw)
      /var/run from var-run (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-vdwpq (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  var-run:
    Type:          HostPath (bare host directory volume)
    Path:          /var/run
    HostPathType:  
  dev:
    Type:          HostPath (bare host directory volume)
    Path:          /dev
    HostPathType:  
  sys:
    Type:          HostPath (bare host directory volume)
    Path:          /sys
    HostPathType:  
  proc:
    Type:          HostPath (bare host directory volume)
    Path:          /proc
    HostPathType:  
  etc:
    Type:          HostPath (bare host directory volume)
    Path:          /etc
    HostPathType:  
  aquasec:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec
    HostPathType:  
  aquasec-tmp:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/tmp
    HostPathType:  
  aquasec-audit:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/audit
    HostPathType:  
  aquasec-data:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/data
    HostPathType:  
  containers:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/containers
    HostPathType:  
  kube-api-access-vdwpq:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/disk-pressure:NoSchedule op=Exists
                             node.kubernetes.io/memory-pressure:NoSchedule op=Exists
                             node.kubernetes.io/not-ready:NoExecute op=Exists
                             node.kubernetes.io/pid-pressure:NoSchedule op=Exists
                             node.kubernetes.io/unreachable:NoExecute op=Exists
                             node.kubernetes.io/unschedulable:NoSchedule op=Exists
Events:
  Type     Reason     Age                 From               Message
  ----     ------     ----                ----               -------
  Normal   Scheduled  105s                default-scheduler  Successfully assigned aqua/aqua-enforcer-ds-7tbww to ip-10-0-176-30.us-west-2.compute.internal
  Normal   Pulling    24s (x4 over 104s)  kubelet            Pulling image "registry.aquasec.com/enforcer:2022.4.460"
  Warning  Failed     24s (x4 over 103s)  kubelet            Failed to pull image "registry.aquasec.com/enforcer:2022.4.460": rpc error: code = NotFound desc = failed to pull and unpack image "registry.aquasec.com/enforcer:2022.4.460": no match for platform in manifest: not found
  Warning  Failed     24s (x4 over 103s)  kubelet            Error: ErrImagePull
  Normal   BackOff    0s (x6 over 103s)   kubelet            Back-off pulling image "registry.aquasec.com/enforcer:2022.4.460"
  Warning  Failed     0s (x6 over 103s)   kubelet            Error: ImagePullBackOff