kubectl describe pod -n aqua aqua-enforcer-ds-8glk2
Name:             aqua-enforcer-ds-8glk2
Namespace:        aqua
Priority:         0
Service Account:  aqua-enforcer-sa
Node:             ip-10-0-149-125.us-west-2.compute.internal/10.0.149.125
Start Time:       Thu, 14 Mar 2024 17:50:32 +0000
Labels:           app=aqua-enforcer-ds
                  app.kubernetes.io/instance=aqua-enforcer
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=enforcer
                  app.kubernetes.io/version=2022.4
                  aqua.component=enforcer
                  controller-revision-hash=5575f5d885
                  helm.sh/chart=enforcer-2022.4.20
                  pod-template-generation=1
Annotations:      checksum/config: 29dc5284eedf0b1302e8ece8d3baafcacfc6e30ca84b5a97c467ad937f9a166e
                  container.apparmor.security.beta.kubernetes.io/enforcer: unconfined
                  kubearmor-policy: enabled
                  kubearmor-visibility: process,file,network,capabilities
Status:           Running
IP:               10.0.131.123
IPs:
  IP:           10.0.131.123
Controlled By:  DaemonSet/aqua-enforcer-ds
Containers:
  enforcer:
    Container ID:   containerd://1467250d7aa6231a62a4ad405bc85d0c480ab6bd79b6ca6b8d14ba0f0d44e4df
    Image:          registry.aquasec.com/enforcer:2022.4.460
    Image ID:       registry.aquasec.com/enforcer@sha256:c7ec3c28b05f2580cc488e2223c455d86c8c97ab64a5648a39544d09a886f3d7
    Port:           <none>
    Host Port:      <none>
    State:          Running
      Started:      Thu, 14 Mar 2024 17:51:07 +0000
    Ready:          True
    Restart Count:  0
    Liveness:       http-get http://:8096/healthz delay=60s timeout=1s period=30s #success=1 #failure=3
    Readiness:      http-get http://:8096/readinessz delay=60s timeout=1s period=30s #success=1 #failure=3
    Environment Variables from:
      aqua-enforcer-enforcer-config  ConfigMap  Optional: false
    Environment:
      AQUA_NODE_NAME:      (v1:spec.nodeName)
      AQUA_LOGICAL_NAME:   (v1:spec.nodeName)
      AQUA_TOKEN:         <set to the key 'token' in secret 'aqua-enforcer-agent-token'>  Optional: false
    Mounts:
      /data from aquasec-data (rw)
      /dev from dev (rw)
      /host/etc from etc (ro)
      /host/opt/aquasec from aquasec (ro)
      /host/proc from proc (ro)
      /host/sys from sys (ro)
      /opt/aquasec/audit from aquasec-audit (rw)
      /opt/aquasec/tmp from aquasec-tmp (rw)
      /var/lib/containers from containers (rw)
      /var/run from var-run (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-qjf4b (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             True 
  ContainersReady   True 
  PodScheduled      True 
Volumes:
  var-run:
    Type:          HostPath (bare host directory volume)
    Path:          /var/run
    HostPathType:  
  dev:
    Type:          HostPath (bare host directory volume)
    Path:          /dev
    HostPathType:  
  sys:
    Type:          HostPath (bare host directory volume)
    Path:          /sys
    HostPathType:  
  proc:
    Type:          HostPath (bare host directory volume)
    Path:          /proc
    HostPathType:  
  etc:
    Type:          HostPath (bare host directory volume)
    Path:          /etc
    HostPathType:  
  aquasec:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec
    HostPathType:  
  aquasec-tmp:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/tmp
    HostPathType:  
  aquasec-audit:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/audit
    HostPathType:  
  aquasec-data:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/aquasec/data
    HostPathType:  
  containers:
    Type:          HostPath (bare host directory volume)
    Path:          /var/lib/containers
    HostPathType:  
  kube-api-access-qjf4b:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/disk-pressure:NoSchedule op=Exists
                             node.kubernetes.io/memory-pressure:NoSchedule op=Exists
                             node.kubernetes.io/not-ready:NoExecute op=Exists
                             node.kubernetes.io/pid-pressure:NoSchedule op=Exists
                             node.kubernetes.io/unreachable:NoExecute op=Exists
                             node.kubernetes.io/unschedulable:NoSchedule op=Exists
Events:
  Type     Reason       Age    From               Message
  ----     ------       ----   ----               -------
  Normal   Scheduled    7m46s  default-scheduler  Successfully assigned aqua/aqua-enforcer-ds-8glk2 to ip-10-0-149-125.us-west-2.compute.internal
  Warning  FailedMount  7m44s  kubelet            MountVolume.SetUp failed for volume "kube-api-access-qjf4b" : failed to sync configmap cache: timed out waiting for the condition
  Normal   Pulling      7m43s  kubelet            Pulling image "registry.aquasec.com/enforcer:2022.4.460"
  Normal   Pulled       7m11s  kubelet            Successfully pulled image "registry.aquasec.com/enforcer:2022.4.460" in 31.783s (31.783s including waiting)
  Normal   Created      7m11s  kubelet            Created container enforcer
  Normal   Started      7m11s  kubelet            Started container enforcer
  Warning  Unhealthy    5m43s  kubelet            Readiness probe failed: HTTP probe failed with statuscode: 503