ault=false)
                                               EKSEnableIAM=true|false (BETA - default=false)
                                               EKSFargate=true|false (ALPHA - default=false)
                                               EventBridgeInstanceState=true|false (ALPHA - default=false)
                                               ExternalResourceGC=true|false (ALPHA - default=false)
                                               KubeadmBootstrapFormatIgnition=true|false (ALPHA - default=false)
                                               MachinePool=true|false (BETA - default=true)
                                               MachinePoolMachines=true|false (ALPHA - default=false)
                                               MachineSetPreflightChecks=true|false (BETA - default=true)
                                               MachineWaitForVolumeDetachConsiderVolumeAttachments=true|false (BETA - default=true)
                                               ROSA=true|false (ALPHA - default=false)
                                               RuntimeSDK=true|false (ALPHA - default=false)
                                               TagUnmanagedNetworkResources=true|false (ALPHA - default=true)
      --health-addr string                     The address the health endpoint binds to. (default ":9440")
      --insecure-diagnostics                   Enable insecure diagnostics serving. For more details see the description of --diagnostics-address.
      --instance-state-concurrency int         Number of concurrent watches for instance state changes (default 5)
      --kubeconfig string                      Paths to a kubeconfig. Only required if out-of-cluster.
      --leader-elect                           Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --leader-elect-lease-duration duration   Interval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)
      --leader-elect-namespace string          Namespace that the controller performs leader election in. If unspecified, the controller will discover which namespace it is running in.
      --leader-elect-renew-deadline duration   Duration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)
      --leader-elect-retry-period duration     Duration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)
      --log-flush-frequency duration           Maximum number of seconds between log flushes (default 5s)
      --log-json-info-buffer-size quantity     [Alpha] In JSON format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-json-split-stream                  [Alpha] In JSON format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-info-buffer-size quantity     [Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-split-stream                  [Alpha] In text format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --log_backtrace_at traceLocations        when logging hits line file:N, emit a stack trace
      --log_dir string                         If non-empty, write log files in this directory
      --log_link string                        If non-empty, add symbolic links in this directory to the log files
      --logbuflevel int                        Buffer log messages logged at this level or lower (-1 means don't buffer; 0 means buffer INFO only; ...). Has limited applicability on non-prod platforms.
      --logging-format string                  Sets the log format. Permitted formats: "json" (gated by LoggingBetaOptions), "text". (default "text")
      --logtostderr                            log to standard error instead of files
      --namespace string                       Namespace that the controller watches to reconcile cluster-api objects. If unspecified, the controller watches for cluster-api objects across all namespaces.
      --profiler-address string                Bind address to expose the pprof profiler (e.g. localhost:6060)
      --service-endpoints string               Set custom AWS service endpoints in semi-colon separated format: ${SigningRegion1}:${ServiceID1}=${URL},${ServiceID2}=${URL};${SigningRegion2}...
      --stderrthreshold severityFlag           logs at or above this threshold go to stderr (default 2)
      --sync-period duration                   The minimum interval at which watched resources are reconciled. If EKS is enabled the maximum allowed is 10m0s (default 10m0s)
      --tls-cipher-suites strings              Comma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true). If omitted, the default Go cipher suites will be used. 
                                               Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256. 
                                               Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_RC4_128_SHA.
      --tls-min-version string                 The minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).
                                               Possible values are VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13. (default "VersionTLS12")
  -v, --v Level                                number for the log level verbosity
      --vmodule pattern=N,...                  comma-separated list of pattern=N settings for file-filtered logging (only works for text log format)
      --wait-infra-period duration             The minimum interval at which reconcile process wait for infrastructure to be ready. (default 1m0s)
      --watch-filter string                    Label value that the controller watches to reconcile cluster-api objects. Label key is always cluster.x-k8s.io/watch-filter. If unspecified, the controller watches for all cluster-api objects.
      --webhook-cert-dir string                Webhook cert dir, only used when webhook-port is specified. (default "/tmp/k8s-webhook-server/serving-certs/")
      --webhook-port int                       Webhook Server port. (default 9443)
pflag: help requested
pod 08a0a4d5d235eec50760b5cbebf593a8c87c3ae0f6a7338d2e6a5aae3c1c90be terminated
running test pipeline for subpackage cluster-api-aws-controller-compat
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [cluster-api-aws-controller cluster-api-aws-controller-compat symlink-check]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing cluster-api-aws-controller (2.8.4-r2)
installing cluster-api-aws-controller-compat (2.8.4-r2)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing libgcc (15.1.0-r4)
installing ct-manylinux-2.28 (1.27.0-r1)
installing libstdc++ (15.1.0-r4)
installing gmp (6.3.0-r8)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing posix-cc-wrappers (1-r7)
installing zlib (1.3.1-r51)
installing isl (0.27-r4)
installing libzstd1 (1.5.7-r3)
installing libstdc++-14 (14.3.0-r5)
installing libstdc++-14-dev (14.3.0-r5)
installing libquadmath (15.1.0-r4)
installing binutils (2.45-r0)
installing openssf-compiler-options (20240627-r26)
installing libxcrypt (4.4.38-r3)
installing libxcrypt-dev (4.4.38-r3)
installing nss-db (2.41-r56)
installing nss-hesiod (2.41-r56)
installing linux-headers (6.16-r0)
installing glibc-dev (2.41-r56)
installing gcc-14 (14.3.0-r5)
installing libgfortran-14 (14.3.0-r5)
installing gfortran-14 (14.3.0-r5)
installing libgfortran (15.1.0-r4)
installing gcc-14-default (14.3.0-r5)
installing libcrypto3 (3.5.1-r1)
installing libssl3 (3.5.1-r1)
installing apk-tools (2.14.10-r7)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r47)
installing symlink-check (0.0.23-r1)
installing wolfi-keys (1-r12)
installing wolfi-base (1-r7)
layer digest: sha256:afb24e6efb44306b5af6d77f8ea1487194aa0b7bbea6dae9df840258072dfa94
layer diffID: sha256:bcfaaf48160819d79ed5ba1ac9a2ee781f2a8bd73f0447d071a8df732f650630
saving OCI image locally: apko.local/cache:48102bd11f5561f22ff29942e0da5e9a216b45caa2747c58edf1b64e6d487b04

test/tw/symlink-check"
running step "check for broken/dangling symlinks"
INFO[symlink-check]: No symlinks found to check
Usage of /manager:
      --alsologtostderr                        log to standard error as well as files
      --awscluster-concurrency int             Number of AWSClusters to process simultaneously (default 5)
      --awsmachine-concurrency int             Number of AWSMachines to process simultaneously (default 10)
      --diagnostics-address string             The address the diagnostics endpoint binds to. Per default metrics are served via https and withauthentication/authorization. To serve via http and without authentication/authorization set --insecure-diagnostics. If --insecure-diagnostics is not set the diagnostics endpoint also serves pprof endpoints and an endpoint to change the log level. (default ":8443")
      --disable-controllers strings            Sets of controllers that should be disabled for this instance of the controller manager in a comma-separated list. Options are: "unmanaged"
      --feature-gates mapStringBool            A set of key=value pairs that describe feature gates for alpha/experimental features. Options are:
                                               AllAlpha=true|false (ALPHA - default=false)
                                               AllBeta=true|false (BETA - default=false)
                                               AlternativeGCStrategy=true|false (ALPHA - default=false)
                                               AutoControllerIdentityCreator=true|false (ALPHA - default=true)
                                               BootstrapFormatIgnition=true|false (ALPHA - default=false)
                                               ClusterResourceSet=true|false (BETA - default=true)
                                               ClusterTopology=true|false (ALPHA - default=false)
                                               EKS=true|false (BETA - default=true)
                                               EKSAllowAddRoles=true|false (BETA - default=false)
                                               EKSEnableIAM=true|false (BETA - default=false)
                                               EKSFargate=true|false (ALPHA - default=false)
                                               EventBridgeInstanceState=true|false (ALPHA - default=false)
                                               ExternalResourceGC=true|false (ALPHA - default=false)
                                               KubeadmBootstrapFormatIgnition=true|false (ALPHA - default=false)
                                               MachinePool=true|false (BETA - default=true)
                                               MachinePoolMachines=true|false (ALPHA - default=false)
                                               MachineSetPreflightChecks=true|false (BETA - default=true)
                                               MachineWaitForVolumeDetachConsiderVolumeAttachments=true|false (BETA - default=true)
                                               ROSA=true|false (ALPHA - default=false)
                                               RuntimeSDK=true|false (ALPHA - default=false)
                                               TagUnmanagedNetworkResources=true|false (ALPHA - default=true)
      --health-addr string                     The address the health endpoint binds to. (default ":9440")
      --insecure-diagnostics                   Enable insecure diagnostics serving. For more details see the description of --diagnostics-address.
      --instance-state-concurrency int         Number of concurrent watches for instance state changes (default 5)
      --kubeconfig string                      Paths to a kubeconfig. Only required if out-of-cluster.
      --leader-elect                           Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
      --leader-elect-lease-duration duration   Interval at which non-leader candidates will wait to force acquire leadership (duration string) (default 15s)
      --leader-elect-namespace string          Namespace that the controller performs leader election in. If unspecified, the controller will discover which namespace it is running in.
      --leader-elect-renew-deadline duration   Duration that the leading controller manager will retry refreshing leadership before giving up (duration string) (default 10s)
      --leader-elect-retry-period duration     Duration the LeaderElector clients should wait between tries of actions (duration string) (default 2s)
      --log-flush-frequency duration           Maximum number of seconds between log flushes (default 5s)
      --log-json-info-buffer-size quantity     [Alpha] In JSON format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-json-split-stream                  [Alpha] In JSON format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-info-buffer-size quantity     [Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
      --log-text-split-stream                  [Alpha] In text format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
      --log_backtrace_at traceLocations        when logging hits line file:N, emit a stack trace
      --log_dir string                         If non-empty, write log files in this directory
      --log_link string                        If non-empty, add symbolic links in this directory to the log files
      --logbuflevel int                        Buffer log messages logged at this level or lower (-1 means don't buffer; 0 means buffer INFO only; ...). Has limited applicability on non-prod platforms.
      --logging-format string                  Sets the log format. Permitted formats: "json" (gated by LoggingBetaOptions), "text". (default "text")
      --logtostderr                            log to standard error instead of files
      --namespace string                       Namespace that the controller watches to reconcile cluster-api objects. If unspecified, the controller watches for cluster-api objects across all namespaces.
      --profiler-address string                Bind address to expose the pprof profiler (e.g. localhost:6060)
      --service-endpoints string               Set custom AWS service endpoints in semi-colon separated format: ${SigningRegion1}:${ServiceID1}=${URL},${ServiceID2}=${URL};${SigningRegion2}...
      --stderrthreshold severityFlag           logs at or above this threshold go to stderr (default 2)
      --sync-period duration                   The minimum interval at which watched resources are reconciled. If EKS is enabled the maximum allowed is 10m0s (default 10m0s)
      --tls-cipher-suites strings              Comma-separated list of cipher suites for the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true). If omitted, the default Go cipher suites will be used. 
                                               Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256. 
                                               Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_RC4_128_SHA.
      --tls-min-version string                 The minimum TLS version in use by the webhook server and metrics server (the latter only if --insecure-diagnostics is not set to true).
                                               Possible values are VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13. (default "VersionTLS12")
  -v, --v Level                                number for the log level verbosity
      --vmodule pattern=N,...                  comma-separated list of pattern=N settings for file-filtered logging (only works for text log format)
      --wait-infra-period duration             The minimum interval at which reconcile process wait for infrastructure to be ready. (default 1m0s)
      --watch-filter string                    Label value that the controller watches to reconcile cluster-api objects. Label key is always cluster.x-k8s.io/watch-filter. If unspecified, the controller watches for all cluster-api objects.
      --webhook-cert-dir string                Webhook cert dir, only used when webhook-port is specified. (default "/tmp/k8s-webhook-server/serving-certs/")
      --webhook-port int                       Webhook Server port. (default 9443)
pflag: help requested
pod 16ff74e70e14f76acef607791146a22c43eb039753ebf59e03188a9cc954db81 terminated
command "melange" completed successfully
tests completed successfully