Skip to content

Merge branch 'main' into cve-helm-set-status-0.3.0-r2-45daddae2bbf227…

754d200
Select commit
Loading
Failed to load commit list.
Merged

helm-set-status/0.3.0-r2: cve remediation #63423

Merge branch 'main' into cve-helm-set-status-0.3.0-r2-45daddae2bbf227…
754d200
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build succeeded Aug 18, 2025 in 8m 38s

APKs built successfully

Build ID: b5edf703-92bd-4c1f-be46-bcda41ef10ae

Details

x86_64 Logs

Click to expand
termination-log
build completed successfully
Built 1 packages, hash: 39cb8a010acc2c9259be87a75ff15effb663fb169ed7aac96b35b8cf22da261b, size: 27561472 bytes
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.121; latest: 0.2.122). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
running command melange [test helm-set-status.yaml --gcplog --source-dir helm-set-status --test-package-append wolfi-base --arch=x86_64 --env-file=build-x86_64.env --pipeline-dirs=pipelines --runner=qemu --keyring-append=https://packages.wolfi.dev/os/wolfi-signing.rsa.pub --repository-append=https://packages.wolfi.dev/os --repository-append=https://apk.cgr.dev/wolfi-presubmit/258eecb36e9d0e75f281c589832b704de3009536 --repository-append=https://apk.cgr.dev/wolfi-presubmit/258eecb36e9d0e75f281c589832b704de3009536]
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [busybox etcd helm helm-set-status kubernetes kwok kwokctl]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing ld-linux (2.41-r56)
installing libgcc (15.2.0-r0)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing libxcrypt (4.4.38-r4)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r48)
installing etcd-3.6 (3.6.4-r1)
installing helm (3.18.5-r0)
installing helm-set-status (0.3.0-r3)
installing kubernetes-1.33 (1.33.3-r2)
installing kwok (0.7.0-r3)
installing kwokctl (0.7.0-r3)
installing wolfi-keys (1-r12)
installing zlib (1.3.1-r51)
installing libcrypto3 (3.5.2-r1)
installing libssl3 (3.5.2-r1)
installing apk-tools (2.14.10-r7)
installing wolfi-base (1-r7)
populating workspace /tmp/melange-workspace-2309855536 from helm-set-status
qemu: generating ssh key pairs for ephemeral VM
qemu: generating initramfs
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [microvm-init]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing libgcc (15.2.0-r0)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing ld-linux (2.41-r56)
installing gnutar (1.35-r5)
installing libattr1 (2.5.2-r53)
installing attr (2.5.2-r53)
installing zlib (1.3.1-r51)
installing libzstd1 (1.5.7-r3)
installing xz (5.8.1-r2)
installing libcrypto3 (3.5.2-r1)
installing kmod (34.2-r41)
installing libbz2-1 (1.0.8-r21)
installing libelf (0.193-r4)
installing libmnl (1.0.5-r6)
installing libnftnl (1.3.0-r0)
installing xtables (1.8.11-r27)
installing iproute2 (6.16.0-r1)
installing libpcre2-8-0 (10.45-r3)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libxcrypt (4.4.38-r4)
installing libcrypt1 (2.41-r56)
installing linux-pam (1.7.1-r1)
installing openssh-keygen (10.0_p1-r4)
installing openssh-server-config (10.0_p1-r4)
installing openssh-server (10.0_p1-r4)
installing libstdc++ (15.2.0-r0)
installing inih (61-r1)
installing liburcu (0.15.3-r1)
installing libblkid (2.41.1-r4)
installing libuuid (2.41.1-r4)
installing xfsprogs-core (6.15.0-r2)
installing xfsprogs (6.15.0-r2)
installing libmount (2.41.1-r4)
installing mount (2.41.1-r4)
installing ncurses-terminfo-base (6.5_p20250621-r1)
installing ncurses (6.5_p20250621-r1)
installing setarch (2.41.1-r4)
installing libfdisk (2.41.1-r4)
installing sqlite-libs (3.50.4-r0)
installing util-linux (2.41.1-r4)
installing libsmartcols (2.41.1-r4)
installing util-linux-misc (2.41.1-r4)
installing busybox (1.37.0-r48)
installing microvm-init (0.0.1-r12)
qemu: starting VM
qemu: waiting for SSH
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
qemu: ssh-keygen: generating new host keys: RSA ECDSA ED25519 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 52930
qemu: Accepted publickey for root from 10.0.2.2 port 52936 ssh2: ECDSA SHA256:bYm/d68THC9mjlVM1MIYGPTiR1UBRS1JNSkW9TIEtz8
qemu: Connection closed by 10.0.2.2 port 52936
qemu: Accepted publickey for root from 10.0.2.2 port 52948 ssh2: ECDSA SHA256:bYm/d68THC9mjlVM1MIYGPTiR1UBRS1JNSkW9TIEtz8
qemu: Accepted publickey for root from 10.0.2.2 port 35186 ssh2: ECDSA SHA256:bYm/d68THC9mjlVM1MIYGPTiR1UBRS1JNSkW9TIEtz8
qemu: setting up local workspace
running the main test pipeline
set-status	0.1.0  	Manually set the status of a helm release
running step "test/kwok/cluster"
{"time":"2025-08-18T13:46:22.941686375Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":304},"msg":"Cluster is creating","cluster":"kwok"}
{"time":"2025-08-18T13:46:23.966639975Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":311},"msg":"Cluster is created","cluster":"kwok","elapsed":{"nanosecond":1024961194,"human":"1.024961194s"}}
{"time":"2025-08-18T13:46:23.980634094Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":344},"msg":"Cluster is starting","cluster":"kwok"}
{"time":"2025-08-18T13:46:25.264413322Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":349},"msg":"Cluster is started","cluster":"kwok","elapsed":{"nanosecond":1283773624,"human":"1.283773624s"}}
{"time":"2025-08-18T13:46:25.291319173Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale/scale.go","line":112},"msg":"No resource found, use default resource","cluster":"kwok","resource":"node"}
{"time":"2025-08-18T13:46:25.40462009Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot.(*Loader).finishLoad","file":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot/load.go","line":187},"msg":"Load resources","cluster":"kwok","name":"node","replicas":1,"resource":"nodes","counter":1,"elapsed":{"nanosecond":104415996,"human":"104.415996ms"}}
Attempt 1: /healthz not ready, retrying...
Attempt 2: /healthz not ready, retrying...
/healthz is ready
/readyz is ready
/openapi/v2 is ready
node/node-000000 condition met
Kubernetes control plane is running at https://127.0.0.1:32764

To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
running step "Create ServiceAccount and Token"
Skipping ServiceAccount and Token creation as per input
running step "Install test chart and change status"
"kubernetes-dashboard" has been added to your repositories
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "kubernetes-dashboard" chart repository
Update Complete. ⎈Happy Helming!⎈
NAME: test-dashboard
LAST DEPLOYED: Mon Aug 18 13:46:30 2025
NAMESPACE: default
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
*************************************************************************************************
*** PLEASE BE PATIENT: Kubernetes Dashboard may need a few minutes to get up and become ready ***
*************************************************************************************************

Congratulations! You have just installed Kubernetes Dashboard in your cluster.

To access Dashboard run:
  kubectl -n default port-forward svc/test-dashboard-kong-proxy 8443:443

NOTE: In case port-forward command does not work, make sure that kong service name is correct.
      Check the services in Kubernetes Dashboard namespace using:
        kubectl -n default get svc

Dashboard will be available at:
  https://localhost:8443
STATUS: deployed
2025/08/18 13:46:33 release test-dashboard status updated
STATUS: failed
qemu: sending shutdown signal
command "melange" completed successfully
tests completed successfully
all tests passed

aarch64 Logs

Click to expand
rectory /tmp/tmp.5RM7dY
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v0.3.0 --depth=1 https://github.com/k3s-io/helm-set-status.git /tmp/tmp.5RM7dY
[git checkout] execute: cd /tmp/tmp.5RM7dY
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.3.0:refs/origin/tags/v0.3.0
[git checkout] execute: git checkout --quiet origin/tags/v0.3.0
[git checkout] tag v0.3.0 is 260bbd88a52aba1a76d44ed2ae66dccf5615dbf3
running step "go/bump"
2025/08/18 13:42:28 Local Go version: 1.25.0
2025/08/18 13:42:28 Running go mod tidy with go version '1.25.0' ...
2025/08/18 13:42:43 Update package: github.com/containerd/containerd
2025/08/18 13:42:43 Running go mod edit -droprequire ...
2025/08/18 13:42:43 Running go get ...
2025/08/18 13:43:02 Update package: golang.org/x/net
2025/08/18 13:43:02 Running go mod edit -droprequire ...
2025/08/18 13:43:02 Running go get ...
2025/08/18 13:43:06 Update package: golang.org/x/oauth2
2025/08/18 13:43:06 Running go mod edit -droprequire ...
2025/08/18 13:43:06 Running go get ...
2025/08/18 13:43:07 Update package: helm.sh/helm/v3
2025/08/18 13:43:07 Running go mod edit -droprequire ...
2025/08/18 13:43:07 Running go get ...
2025/08/18 13:43:14 Running go mod tidy with go version '1.25.0' ...
running step "go/build"
retrieving workspace from builder: 
retrieved and wrote post-build workspace to: /tmp/melange-workspace-4228730507
running package linters for helm-set-status
linting apk: helm-set-status
checking license information
  LICENSE: Apache-2.0 (1.000000) (notice)
checking gathered license information against the configuration
no license differences detected
license information check complete
invalid license: NOASSERTION
writing SBOM for helm-set-status
generating package helm-set-status-0.3.0-r3
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
interpreter for helm-set-status => /lib/ld-linux-aarch64.so.1
  found lib libc.so.6 for usr/bin/helm-set-status
scanning for commands...
  found command usr/bin/helm-set-status
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
  runtime:
    so:ld-linux-aarch64.so.1
    so:libc.so.6
  provides:
    cmd:helm-set-status=0.3.0-r3
  installed-size: 85745436
  data.tar.gz digest: 10f525545313a3c6b06ff1559ed244e61b2fc89cc6da84b2f3f06f4d73e9132e
wrote packages/aarch64/helm-set-status-0.3.0-r3.apk
cleaning Workspace by removing 15 file/directories in /home/build
generating apk index from packages in packages/aarch64
processing package packages/aarch64/helm-set-status-0.3.0-r3.apk
updating index at packages/aarch64/APKINDEX.tar.gz with new packages: [helm-set-status-0.3.0-r3]
command "melange" completed successfully
build completed successfully
uploading packages...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
running command curl [-s --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/aarch64/1755524443270195878-helm-set-status-0.3.0-r3.tar.gz?Expires=1755567643&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=FssnfnY4pqlHc3i7D7aT9rtuGNbJKAiD7bcPyy6GEOr7M35Dcf7DH7yf1f2qS5KbZF0131qEC7gN5ov%2B%2FH%2FpN1XBbF8KJrKL8VOJTmV3BbwA%2FQht3tcL7M7NFyEhabwvorFozMwWYtNECJ2Smi6lMJQr4dtpgsvj2cAJQMXOm5970ey5llQtu1vv%2BPoMUNfW%2BuMzn74EZCnFJuo6eixVUewoult1ys3HYrOxxdLJQOifcDFIsfoRb81tH2FeH%2BybkcJzaaGZqtTsYMMhg22%2FcO5025FVUMeB27Fg3O%2BfC%2BJjamaKt2y7rC1i2eEW0PpWPXFHxHr8OOB1UJYUxuayTA%3D%3D]
command "curl" completed successfully
upload completed successfully
packages.tar sha256sum: d6752b3090456f4471ede9c48affcf9f77774d1d5bfd72df8c9124cf001b3f34
sha256sum "d6752b3090456f4471ede9c48affcf9f77774d1d5bfd72df8c9124cf001b3f34" written to /dev/termination-log
build completed successfully
Built 1 packages, hash: d6752b3090456f4471ede9c48affcf9f77774d1d5bfd72df8c9124cf001b3f34, size: 25349120 bytes
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.121; latest: 0.2.122). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
running command melange [test helm-set-status.yaml --gcplog --source-dir helm-set-status --test-package-append wolfi-base --arch=aarch64 --env-file=build-aarch64.env --pipeline-dirs=pipelines --runner=docker --keyring-append=https://packages.wolfi.dev/os/wolfi-signing.rsa.pub --repository-append=https://packages.wolfi.dev/os --repository-append=https://apk.cgr.dev/wolfi-presubmit/258eecb36e9d0e75f281c589832b704de3009536 --repository-append=https://apk.cgr.dev/wolfi-presubmit/258eecb36e9d0e75f281c589832b704de3009536]
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [busybox etcd helm helm-set-status kubernetes kwok kwokctl]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r23)
installing ca-certificates-bundle (20250619-r5)
installing libgcc (15.2.0-r0)
installing ld-linux (2.41-r56)
installing glibc-locale-posix (2.41-r56)
installing glibc (2.41-r56)
installing libxcrypt (4.4.38-r4)
installing libcrypt1 (2.41-r56)
installing busybox (1.37.0-r48)
installing etcd-3.6 (3.6.4-r1)
installing helm (3.18.5-r0)
installing helm-set-status (0.3.0-r3)
installing kubernetes-1.33 (1.33.3-r2)
installing kwok (0.7.0-r3)
installing kwokctl (0.7.0-r3)
installing wolfi-keys (1-r12)
installing zlib (1.3.1-r51)
installing libcrypto3 (3.5.2-r1)
installing libssl3 (3.5.2-r1)
installing apk-tools (2.14.10-r7)
installing wolfi-base (1-r7)
layer digest: sha256:132b2cb8bbc72856b711939d3c274813cf2a0e65898bc6dfaeb208f44885096f
layer diffID: sha256:2f711060063592a61f7df808dbf6b1fa1abcab37750714d4bd66d961b36b559d
saving OCI image locally: apko.local/cache:2b8e716928408d44af63e387707dcde397f94f059b0bb9d0e7215a8662c4e8e3
populating workspace /tmp/melange-workspace-3714599049 from helm-set-status
running the main test pipeline
set-status	0.1.0  	Manually set the status of a helm release
running step "test/kwok/cluster"
{"time":"2025-08-18T13:46:20.741467404Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":304},"msg":"Cluster is creating","cluster":"kwok"}
{"time":"2025-08-18T13:46:21.175251009Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":311},"msg":"Cluster is created","cluster":"kwok","elapsed":{"nanosecond":433791052,"human":"433.791052ms"}}
{"time":"2025-08-18T13:46:21.176766368Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":344},"msg":"Cluster is starting","cluster":"kwok"}
{"time":"2025-08-18T13:46:21.912966863Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":349},"msg":"Cluster is started","cluster":"kwok","elapsed":{"nanosecond":736196266,"human":"736.196266ms"}}
{"time":"2025-08-18T13:46:21.938706802Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale/scale.go","line":112},"msg":"No resource found, use default resource","cluster":"kwok","resource":"node"}
{"time":"2025-08-18T13:46:22.051433433Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot.(*Loader).finishLoad","file":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot/load.go","line":187},"msg":"Load resources","cluster":"kwok","name":"node","replicas":1,"resource":"nodes","counter":1,"elapsed":{"nanosecond":105200896,"human":"105.200896ms"}}
Attempt 1: /healthz not ready, retrying...
Attempt 2: /healthz not ready, retrying...
Attempt 3: /healthz not ready, retrying...
Attempt 4: /healthz not ready, retrying...
Attempt 5: /healthz not ready, retrying...
Attempt 6: /healthz not ready, retrying...
/healthz is ready
/readyz is ready
/openapi/v2 is ready
node/node-000000 condition met
Kubernetes control plane is running at https://127.0.0.1:32764

To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
running step "Create ServiceAccount and Token"
Skipping ServiceAccount and Token creation as per input
running step "Install test chart and change status"
"kubernetes-dashboard" has been added to your repositories
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "kubernetes-dashboard" chart repository
Update Complete. ⎈Happy Helming!⎈

Indexes

https://apk.cgr.dev/wolfi-presubmit/258eecb36e9d0e75f281c589832b704de3009536

Packages

Tests

More Observability

Command

cg build log \
  --build-id b5edf703-92bd-4c1f-be46-bcda41ef10ae \
  --project prod-wolfi-os \
  --cluster elastic-pre-a \
  --namespace pre-wolfi \
  --start 2025-08-18T13:38:01Z \
  --end 2025-08-18T13:56:41Z