feat(kube-agent-updater): package build#76409
Merged
Merged
Chainguard Internal / elastic-build
succeeded
Dec 23, 2025 in 14m 16s
APKs built successfully
Build ID: 156eb521-fc38-46e5-b9f9-d7fec5377e4e
Details
builds
x86_64 Logs
Click to expand
list of active Kubernetes sessions. (DEPRECATED: use tsh sessions ls --kind=kube instead)
kube exec Execute a command in a Kubernetes pod.
kube join Join an active Kubernetes session.
mfa ls Get a list of registered MFA devices.
mfa add Add a new MFA device.
mfa rm Remove a MFA device.
scan keys Scan the local machine for SSH private keys and report findings to Teleport.
scopes ls List scopes at which user has assigned privileges.
config Print OpenSSH configuration details.
update Update client tools (tsh, tctl) to the latest version defined by the cluster configuration.
device enroll Enroll this device as a trusted device. Requires Teleport Enterprise.
svid issue Issue a SPIFFE SVID using Teleport Workload Identity and write it to a local directory.
workload-identity issue-x509 Use Teleport Workload Identity to issue an X509 credential write it to a local directory.
vnet Start Teleport VNet, a virtual network for TCP application access.
vnet-ssh-autoconfig Automatically include VNet's generated OpenSSH-compatible config file in ~/.ssh/config.
git login Opens a browser and retrieves your login from GitHub.
git ls List Git servers.
git config Check Teleport config on the working Git directory. Or provide an action ('update' or 'reset') to configure the Git repo.
git clone Clone a Git repository.
piv agent Start PIV key agent.
mcp db config Print client configuration details.
mcp ls List available MCP server applications.
mcp config Print client configuration details.
Try 'tsh help [command]' to get help for a given command.
running step "Test auth service and tctl"
wait-for-it: waiting 30 seconds for 127.0.0.1:3025
wait-for-it: 127.0.0.1:3025 is available after 2 seconds
2025-12-23T09:34:56.314Z DEBU [SQLITE] Connected to database database:file:/tmp/teleport/proc/sqlite.db?_busy_timeout=10000&_sync=FULL&_txlock=immediate poll_stream_period:1s lite/lite.go:260
2025-12-23T09:34:56.315Z DEBU [SQLITE] retrieved pragma values journal_mode:delete synchronous:2 busy_timeout:10000 lite/lite.go:311
2025-12-23T09:34:56.316Z DEBU Auth client connecting auth_servers:[{Addr:127.0.0.1:3025 AddrNetwork:tcp Path:}] authclient/authclient.go:63
Role Allowed to login as Node Labels Access to resources
------------------------ ------------------- ----------- ----------------------
access {{internal.logins}} <all nodes> event:list,read,ses...
access-plugin access_request:list...
auditor session:list,read,e...
editor user:list,create,re...
list-access-request-r... <all nodes> node:list,read,app:...
mcp-user
terraform-provider <all nodes> access_list:list,cr...
wildcard-workload-ide... workload_identity:l...
Auth service test successful!
running step "Test proxy service"
wait-for-it: waiting 30 seconds for 127.0.0.1:3025
wait-for-it: 127.0.0.1:3025 is available after 2 seconds
wait-for-it: waiting 30 seconds for 127.0.0.1:3080
wait-for-it: 127.0.0.1:3080 is available after 1 seconds
Proxy test successful!
qemu: sending shutdown signal
running test pipeline for subpackage teleport-18-kube-agent-updater
melange devel with runner qemu is testing:
image configuration:
contents:
build repositories: []
runtime repositories: []
repositories: []
keyring: []
packages: [busybox curl etcd help-check kubernetes kwok kwokctl teleport-18-kube-agent-updater wait-for-it]
accounts:
runas:
users:
- uid=1000(build) gid=1000
groups:
- gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing nghttp3 (1.13.1-r0)
installing zlib (1.3.1-r51)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing libnghttp2-14 (1.68.0-r0)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing gdbm (1.26-r1)
installing libcrypto3 (3.6.0-r6)
installing cyrus-sasl (2.1.28-r45)
installing libssl3 (3.6.0-r6)
installing libldap-2.6 (2.6.10-r7)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing krb5-libs (1.22.1-r1)
installing libcurl-openssl4 (8.17.0-r0)
installing curl (8.17.0-r0)
installing etcd-3.6 (3.6.7-r0)
installing help-check (0.0.35-r1)
installing kubernetes-1.34 (1.34.3-r0)
installing kwok (0.7.0-r6)
installing kwokctl (0.7.0-r6)
installing teleport-18-kube-agent-updater (18.6.0-r1)
installing bash (5.3-r3)
installing libacl1 (2.3.2-r54)
installing libattr1 (2.5.2-r54)
installing libpcre2-8-0 (10.47-r0)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing coreutils (9.9-r1)
installing wait-for-it (0.20200823-r7)
installing wolfi-keys (1-r12)
installing apk-tools (2.14.10-r9)
installing wolfi-base (1-r7)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:51752->127.0.0.1:39503: i/o timeout
qemu: meta-data=/dev/vda isize=512 agcount=8, agsize=1638400 blks
qemu: = sectsz=4096 attr=2, projid32bit=1
qemu: = crc=1 finobt=1, sparse=1, rmapbt=1
qemu: = reflink=1 bigtime=1 inobtcount=1 nrext64=1
qemu: = exchange=0 metadir=0
qemu: data = bsize=4096 blocks=13107200, imaxpct=25
qemu: = sunit=0 swidth=0 blks
qemu: naming =version 2 bsize=4096 ascii-ci=0, ftype=1, parent=0
qemu: log =internal log bsize=4096 blocks=16384, version=2
qemu: = sectsz=4096 sunit=1 blks, lazy-count=1
qemu: realtime =none extsz=4096 blocks=0, rtextents=0
qemu: = rgcount=0 rgsize=0 extents
qemu: = zoned=0 start=0 reserved=0
qemu: Discarding blocks...Done.
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
qemu: ssh-keygen: generating new host keys: RSA ECDSA
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
conn read: read tcp 127.0.0.1:51768->127.0.0.1:39503: i/o timeout
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 51772
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 51786 ssh2: ECDSA SHA256:utTQzdnPjjzEHerE0ZtaXhENH8oseUa0Pt+FPFvzw0g
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 51786
qemu: Accepted publickey for root from 10.0.2.2 port 51794 ssh2: ECDSA SHA256:utTQzdnPjjzEHerE0ZtaXhENH8oseUa0Pt+FPFvzw0g
qemu: Accepted publickey for root from 10.0.2.2 port 58550 ssh2: ECDSA SHA256:utTQzdnPjjzEHerE0ZtaXhENH8oseUa0Pt+FPFvzw0g
qemu: Accepted publickey for root from 10.0.2.2 port 51796 ssh2: ECDSA SHA256:utTQzdnPjjzEHerE0ZtaXhENH8oseUa0Pt+FPFvzw0g
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct 3 22:31:32 UTC 2025
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "test/tw/help-check"
running step "check help information for binaries"
INFO[help-check]: Starting help checks for: teleport-kube-agent-updater
INFO[help-check]: Help flag: auto
PASS[help-check]: 'teleport-kube-agent-updater [/usr/bin/teleport-kube-agent-updater]' help check
INFO[help-check]: tested 1 binaries. 1 passes. 0 fails.
running step "test/kwok/cluster"
{"time":"2025-12-23T09:35:09.319247514Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":304},"msg":"Cluster is creating","cluster":"kwok"}
{"time":"2025-12-23T09:35:09.567030173Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":311},"msg":"Cluster is created","cluster":"kwok","elapsed":{"nanosecond":247783883,"human":"247.783883ms"}}
{"time":"2025-12-23T09:35:09.915799724Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":344},"msg":"Cluster is starting","cluster":"kwok"}
{"time":"2025-12-23T09:35:10.53126288Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":349},"msg":"Cluster is started","cluster":"kwok","elapsed":{"nanosecond":615458495,"human":"615.458495ms"}}
{"time":"2025-12-23T09:35:10.55801081Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale/scale.go","line":112},"msg":"No resource found, use default resource","cluster":"kwok","resource":"node"}
aarch64 Logs
Click to expand
is available after 1 seconds
Proxy test successful!
pod 5c131f14bd21dc362aa7f476cd04adf14eba432d9df40252df9812d239314d6d terminated
running test pipeline for subpackage teleport-18-kube-agent-updater
melange devel with runner docker is testing:
image configuration:
contents:
build repositories: []
runtime repositories: []
repositories: []
keyring: []
packages: [busybox curl etcd help-check kubernetes kwok kwokctl teleport-18-kube-agent-updater wait-for-it]
accounts:
runas:
users:
- uid=1000(build) gid=1000
groups:
- gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing nghttp3 (1.13.1-r0)
installing zlib (1.3.1-r51)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing libnghttp2-14 (1.68.0-r0)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing gdbm (1.26-r1)
installing libcrypto3 (3.6.0-r6)
installing cyrus-sasl (2.1.28-r45)
installing libssl3 (3.6.0-r6)
installing libldap-2.6 (2.6.10-r7)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing krb5-libs (1.22.1-r1)
installing libcurl-openssl4 (8.17.0-r0)
installing curl (8.17.0-r0)
installing etcd-3.6 (3.6.7-r0)
installing help-check (0.0.35-r1)
installing kubernetes-1.34 (1.34.3-r0)
installing kwok (0.7.0-r6)
installing kwokctl (0.7.0-r6)
installing teleport-18-kube-agent-updater (18.6.0-r1)
installing bash (5.3-r3)
installing libacl1 (2.3.2-r54)
installing libattr1 (2.5.2-r54)
installing libpcre2-8-0 (10.47-r0)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing coreutils (9.9-r1)
installing wait-for-it (0.20200823-r7)
installing wolfi-keys (1-r12)
installing apk-tools (2.14.10-r9)
installing wolfi-base (1-r7)
layer digest: sha256:1cab86b90cb8ae77dd2f5ebc8830d444cedadb0e40ccd26a4bbcabd7ab1303a5
layer diffID: sha256:3b22e373b1f02f74688479a2f0f7b086b72595e5688561c1904e515c70d47831
saving OCI image locally: apko.local/cache:806446ea0a7a9cce661a564802a88359f9a3f6811c93c9a3c1b897ebabceb36d
tagging local image apko.local/cache:806446ea0a7a9cce661a564802a88359f9a3f6811c93c9a3c1b897ebabceb36d as index.docker.io/library/melange:latest
running step "test/tw/help-check"
running step "check help information for binaries"
INFO[help-check]: Starting help checks for: teleport-kube-agent-updater
INFO[help-check]: Help flag: auto
PASS[help-check]: 'teleport-kube-agent-updater [/usr/bin/teleport-kube-agent-updater]' help check
INFO[help-check]: tested 1 binaries. 1 passes. 0 fails.
running step "test/kwok/cluster"
{"time":"2025-12-23T09:35:03.040698288Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":304},"msg":"Cluster is creating","cluster":"kwok"}
{"time":"2025-12-23T09:35:03.265879259Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":311},"msg":"Cluster is created","cluster":"kwok","elapsed":{"nanosecond":225187934,"human":"225.187934ms"}}
{"time":"2025-12-23T09:35:03.267374557Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":344},"msg":"Cluster is starting","cluster":"kwok"}
{"time":"2025-12-23T09:35:03.988405802Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/create/cluster/cluster.go","line":349},"msg":"Cluster is started","cluster":"kwok","elapsed":{"nanosecond":721024852,"human":"721.024852ms"}}
{"time":"2025-12-23T09:35:04.00682237Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale.runE","file":"sigs.k8s.io/kwok/pkg/kwokctl/cmd/scale/scale.go","line":112},"msg":"No resource found, use default resource","cluster":"kwok","resource":"node"}
{"time":"2025-12-23T09:35:04.029408171Z","level":"INFO","source":{"function":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot.(*Loader).finishLoad","file":"sigs.k8s.io/kwok/pkg/kwokctl/snapshot/load.go","line":187},"msg":"Load resources","cluster":"kwok","name":"node","replicas":1,"resource":"nodes","counter":1,"elapsed":{"nanosecond":15592751,"human":"15.592751ms"}}
Attempt 1: /healthz not ready, retrying...
Attempt 2: /healthz not ready, retrying...
/healthz is ready
/readyz is ready
/openapi/v2 is ready
node/node-000000 condition met
Kubernetes control plane is running at https://127.0.0.1:32764
To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
running step "Create ServiceAccount and Token"
Skipping ServiceAccount and Token creation as per input
running step "test/daemon-check-output"
running step "start daemon on localhost"
daemon started as pid 660 with: teleport-kube-agent-updater --agent-name=test-agent --agent-namespace=default --metrics-addr=:8080 --healthz-addr=:8081 --disable-leader-election --insecure-no-verify-image --insecure-no-resolve-image
looking for 1 lines in output within 30 seconds
found within 2 seconds: Starting Controller
running post from /tmp/tmp.ykFbRwP8Rh/post
# HELP go_info Information about the Go environment.
# TYPE go_info gauge
go_info{version="go1.25.5"} 1
-- begin output --
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"generated new updater ID","id":"d585edea-6389-4a3f-aa6a-bca00d2252f2"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"update ID and group are set","update_id":"d585edea-6389-4a3f-aa6a-bca00d2252f2","update_group":""}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"fetching versions from the version server","version_server_url":"https://updates.releases.teleport.dev/v1/stable/cloud"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"INSECURE: Image validation and resolution disabled"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"starting the updater","version":"18.6.0"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Starting metrics server","logger":"controller-runtime/metrics"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"starting server","name":"health probe","addr":"[::]:8081"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Serving metrics server","logger":"controller-runtime/metrics","bindAddress":":8080","secure":false}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Starting EventSource","controller":"deployment","controllerGroup":"apps","controllerKind":"Deployment"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Starting EventSource","controller":"statefulset","controllerGroup":"apps","controllerKind":"StatefulSet"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Starting Controller","controller":"statefulset","controllerGroup":"apps","controllerKind":"StatefulSet"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Starting workers","controller":"statefulset","controllerGroup":"apps","controllerKind":"StatefulSet","worker count":1}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Starting Controller","controller":"deployment","controllerGroup":"apps","controllerKind":"Deployment"}
> {"timestamp":"2025-12-23T09:35:06Z","level":"info","message":"Starting workers","controller":"deployment","controllerGroup":"apps","controllerKind":"Deployment","worker count":1}
-- end output --
found 1 of expected 1 line in output.
found 0 / 9 error strings in output.
twk: SIGTERM sent to pid 660. kill returned 0.
twk: pid 660 exited within 2 seconds after SIGTERM
pod ceacee34a87bfac9ab8b80b768e61536c63f21aa8abacdc7fed988f68329f8f4 terminated
running test pipeline for subpackage teleport-18-kube-agent-updater-compat
melange devel with runner docker is testing:
image configuration:
contents:
build repositories: []
runtime repositories: []
repositories: []
keyring: []
packages: [symlink-check teleport-18-kube-agent-updater-compat]
accounts:
runas:
users:
- uid=1000(build) gid=1000
groups:
- gid=1000(build) members=[build]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing symlink-check (0.0.35-r1)
installing teleport-18-kube-agent-updater (18.6.0-r1)
installing teleport-18-kube-agent-updater-compat (18.6.0-r1)
installing wolfi-keys (1-r12)
installing zlib (1.3.1-r51)
installing libcrypto3 (3.6.0-r6)
installing libssl3 (3.6.0-r6)
installing apk-tools (2.14.10-r9)
installing wolfi-base (1-r7)
layer digest: sha256:0b9f4423588e2691fa36aa5968b064a8c0caf1310a0ebda938ad8a0272b042af
layer diffID: sha256:7a82e3d3be6f5dccb42d019501046d65182b98ae29fa9d9a190bbc94797e8949
saving OCI image locally: apko.local/cache:0d8101a2072dc6f0dd63c13d40a1cfb5e1bf56d662c6b04ef4688a9966f51b16
tagging local image apko.local/cache:0d8101a2072dc6f0dd63c13d40a1cfb5e1bf56d662c6b04ef4688a9966f51b16 as index.docker.io/library/melange:latest
running step "test/tw/symlink-check"
running step "check for broken/dangling symlinks"
PASS[symlink-check]: /teleport-kube-agent-updater -> ./usr/bin/teleport-kube-agent-updater
INFO[symlink-check]: Tested [1] symlinks with [symlink-check]. [1/1] passed.
pod 5d4adf7b6e62a2bae24b2dff941c2888756a5afadff63eb667a4278b16ea760f terminated
tests completed successfully
all tests passed
Indexes
https://apk.cgr.dev/wolfi-presubmit/f21de15dbcc5925644380f1d9384e05c4d19fab4
Packages
- ✅ teleport-18 (success | 9m34s | x86_64 logs | aarch64 logs)
Tests
- ✅ teleport-18 (success | 50s | x86_64 logs | aarch64 logs)
More Observability
Command
cg build log \
--build-id 156eb521-fc38-46e5-b9f9-d7fec5377e4e \
--project prod-wolfi-os \
--cluster elastic-pre-a \
--namespace pre-wolfi \
--start 2025-12-23T09:21:04Z \
--end 2025-12-23T09:45:21Z
Loading