pickup containerd 2.2.1 and bookworm

[BenTheElder]

clears up some logspam via containerd/containerd#12579

haproxy and local-path provisioner: #4003 + #4081

tested locally to confirm logspam fix and verify multiple control plane nodes work with the new haproxy

note: last commit currently uses a staging node image, to exercise github actions

were we to release to users at least, we'd want to promote it to kindest/node first and switch to that

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: BenTheElder

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [BenTheElder]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[BenTheElder]

/hold

[BenTheElder]

Was looking into the kubeadm v1beta4 stuff ... took a quick look here, PVs are broken, will need to investigate further.

[aojea]

checking https://prow.k8s.io/view/gs/kubernetes-ci-logs/pr-logs/pull/kubernetes-sigs_kind/4086/pull-kind-e2e-kubernetes/2002170163704631296

Warning FailedScheduling 0s default-scheduler running PreBind plugin "VolumeBinding": binding volumes: context deadline exceeded

inside the local path provisioner https://storage.googleapis.com/kubernetes-ci-logs/pr-logs/pull/kubernetes-sigs_kind/4086/pull-kind-e2e-kubernetes/2002170163704631296/artifacts/kind-control-plane/pods/local-path-storage_local-path-provisioner-9cc47865c-x8jdl_a30574b4-0f3b-4584-9f1c-26b49ad09f47/local-path-provisioner/0.log

2025-12-20T00:29:29.820474801Z stderr F time="2025-12-20T00:29:29Z" level=info msg="create the helper pod helper-pod-create-pvc-beaebb34-bb82-4c26-a947-1f54e133e473 into local-path-storage"
2025-12-20T00:29:29.820476613Z stderr F I1220 00:29:29.820444 1 event.go:389] "Event occurred" object="statefulset-4457/datadir-ss-0" fieldPath="" kind="PersistentVolumeClaim" apiVersion="v1" type="Normal" reason="Provisioning" message="External provisioner is provisioning volume for claim "statefulset-4457/datadir-ss-0""
2025-12-20T00:29:49.524987502Z stderr F time="2025-12-20T00:29:49Z" level=debug msg="config doesn't contain node kind-worker2, use DEFAULT_PATH_FOR_NON_LISTED_NODES instead"
2025-12-20T00:29:49.525000852Z stderr F time="2025-12-20T00:29:49Z" level=info msg="Creating volume pvc-05cab45f-ecb9-4fea-975c-5d2988d24812 at kind-worker2:/var/local-path-provisioner/pvc-05cab45f-ecb9-4fea-975c-5d2988d24812_pvc-protection-5315_pvc-protectionsn84b"

a possible problem with pkg/build/nodeimage/const_storage.go ?

It seems the kubelet can not start those helper pods https://storage.googleapis.com/kubernetes-ci-logs/pr-logs/pull/kubernetes-sigs_kind/4086/pull-kind-e2e-kubernetes/2002170163704631296/artifacts/kind-worker/kubelet.log

[BenTheElder]

Yeah it's definitely something with the updated storage driver images, not enough logs to tell from CI. Will replicate later.

[BenTheElder]

Warning Failed 25s kubelet spec.containers{helper-pod}: Error: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: exec: "/bin/sh": stat /bin/sh: no such file or directory

[BenTheElder]

$ docker run --rm docker.io/kindest/local-path-helper:v20251218-c8778675 /usr/bin/sh -c 'echo "hello"'
/usr/bin/sh: error while loading shared libraries: libtinfo.so.6: cannot open shared object file: No such file or directory

[BenTheElder]

#4103 for image fixes, then we can try this again

[k8s-ci-robot]

@BenTheElder: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-kind-e2e-kubernetes-1-32	486c51a	link	true	/test pull-kind-e2e-kubernetes-1-32
pull-kind-e2e-kubernetes-1-33	486c51a	link	true	/test pull-kind-e2e-kubernetes-1-33
pull-kind-e2e-kubernetes-1-34	486c51a	link	true	/test pull-kind-e2e-kubernetes-1-34
pull-kind-e2e-kubernetes-1-31	486c51a	link	true	/test pull-kind-e2e-kubernetes-1-31
pull-kind-e2e-kubernetes	486c51a	link	true	/test pull-kind-e2e-kubernetes
pull-kind-conformance-parallel-dual-stack-ipv4-ipv6	486c51a	link	true	/test pull-kind-conformance-parallel-dual-stack-ipv4-ipv6

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[BenTheElder]

#4103 replaces this