{"process_exec":{"process":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwNDA5NzYzMTI5NDAyNTo2MDI3MjY=","pid":602726,"uid":0,"cwd":"/","binary":"/bin/sleep","arguments":"5","flags":"execve rootcwd inInitTree","start_time":"2025-08-26T21:56:05.098779459Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":1,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","tid":602726,"in_init_tree":true},"parent":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","pid":602726,"uid":0,"cwd":"/","binary":"/bin/sh","arguments":"-lc \"echo \"started\"; sleep 360; /bin/sh -lc \"echo late shell $(date)\"; sleep 5\"","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:50:05.092540977Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":1,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","tid":602726,"in_init_tree":true},"ancestors":[{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","pid":602669,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e -address /run/containerd/containerd.sock","flags":"execve clone","start_time":"2025-08-26T21:50:04.931814297Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","tid":602669,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","pid":602660,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e start","flags":"execve clone","start_time":"2025-08-26T21:50:04.924990706Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","tid":602660,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","pid":2743,"uid":0,"cwd":"/","binary":"/usr/bin/containerd","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:24.667485178Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","tid":2743,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","pid":1,"uid":0,"cwd":"/","binary":"/usr/lib/systemd/systemd","arguments":"--switched-root --system --deserialize 21","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:07.527485203Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTow","tid":1,"in_init_tree":false}]},"node_name":"ip-10-0-10-253.us-west-2.compute.internal","time":"2025-08-26T21:56:05.098779178Z","cluster_name":"isovalent-2","node_labels":{"alpha.eksctl.io/cluster-name":"isovalent-2","alpha.eksctl.io/instance-id":"i-0839d680c54ccef60","alpha.eksctl.io/nodegroup-name":"ng-default","beta.kubernetes.io/arch":"amd64","beta.kubernetes.io/instance-type":"t3.medium","beta.kubernetes.io/os":"linux","failure-domain.beta.kubernetes.io/region":"us-west-2","failure-domain.beta.kubernetes.io/zone":"us-west-2c","k8s.io/cloud-provider-aws":"480fc25a68b07748a13498c4eb5a2a07","kubernetes.io/arch":"amd64","kubernetes.io/hostname":"ip-10-0-10-253.us-west-2.compute.internal","kubernetes.io/os":"linux","node-lifecycle":"on-demand","node.kubernetes.io/instance-type":"t3.medium","topology.k8s.aws/zone-id":"usw2-az3","topology.kubernetes.io/region":"us-west-2","topology.kubernetes.io/zone":"us-west-2c"}}
{"process_exec":{"process":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwNDA5NzYzMDc5NTYzMjo2MDQ2MzY=","pid":604636,"uid":0,"cwd":"/","binary":"/bin/sh","arguments":"-lc \"echo late shell Tue Aug 26 21:56:05 UTC 2025\"","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:56:05.098281366Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":9,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","tid":604636,"in_init_tree":true},"parent":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","pid":602726,"uid":0,"cwd":"/","binary":"/bin/sh","arguments":"-lc \"echo \"started\"; sleep 360; /bin/sh -lc \"echo late shell $(date)\"; sleep 5\"","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:50:05.092540977Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":1,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","tid":602726,"in_init_tree":true},"ancestors":[{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","pid":602669,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e -address /run/containerd/containerd.sock","flags":"execve clone","start_time":"2025-08-26T21:50:04.931814297Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","tid":602669,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","pid":602660,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e start","flags":"execve clone","start_time":"2025-08-26T21:50:04.924990706Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","tid":602660,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","pid":2743,"uid":0,"cwd":"/","binary":"/usr/bin/containerd","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:24.667485178Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","tid":2743,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","pid":1,"uid":0,"cwd":"/","binary":"/usr/lib/systemd/systemd","arguments":"--switched-root --system --deserialize 21","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:07.527485203Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTow","tid":1,"in_init_tree":false}]},"node_name":"ip-10-0-10-253.us-west-2.compute.internal","time":"2025-08-26T21:56:05.098281180Z","cluster_name":"isovalent-2","node_labels":{"alpha.eksctl.io/cluster-name":"isovalent-2","alpha.eksctl.io/instance-id":"i-0839d680c54ccef60","alpha.eksctl.io/nodegroup-name":"ng-default","beta.kubernetes.io/arch":"amd64","beta.kubernetes.io/instance-type":"t3.medium","beta.kubernetes.io/os":"linux","failure-domain.beta.kubernetes.io/region":"us-west-2","failure-domain.beta.kubernetes.io/zone":"us-west-2c","k8s.io/cloud-provider-aws":"480fc25a68b07748a13498c4eb5a2a07","kubernetes.io/arch":"amd64","kubernetes.io/hostname":"ip-10-0-10-253.us-west-2.compute.internal","kubernetes.io/os":"linux","node-lifecycle":"on-demand","node.kubernetes.io/instance-type":"t3.medium","topology.k8s.aws/zone-id":"usw2-az3","topology.kubernetes.io/region":"us-west-2","topology.kubernetes.io/zone":"us-west-2c"}}
{"process_exec":{"process":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwNDA5NzYzMDI3NDc0NTo2MDQ2MzU=","pid":604635,"uid":0,"cwd":"/","binary":"/bin/date","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:56:05.097760389Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":8,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","tid":604635,"in_init_tree":true},"parent":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","pid":602726,"uid":0,"cwd":"/","binary":"/bin/sh","arguments":"-lc \"echo \"started\"; sleep 360; /bin/sh -lc \"echo late shell $(date)\"; sleep 5\"","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:50:05.092540977Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":1,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","tid":602726,"in_init_tree":true},"ancestors":[{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","pid":602669,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e -address /run/containerd/containerd.sock","flags":"execve clone","start_time":"2025-08-26T21:50:04.931814297Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","tid":602669,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","pid":602660,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e start","flags":"execve clone","start_time":"2025-08-26T21:50:04.924990706Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","tid":602660,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","pid":2743,"uid":0,"cwd":"/","binary":"/usr/bin/containerd","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:24.667485178Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","tid":2743,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","pid":1,"uid":0,"cwd":"/","binary":"/usr/lib/systemd/systemd","arguments":"--switched-root --system --deserialize 21","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:07.527485203Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTow","tid":1,"in_init_tree":false}]},"node_name":"ip-10-0-10-253.us-west-2.compute.internal","time":"2025-08-26T21:56:05.097759904Z","cluster_name":"isovalent-2","node_labels":{"alpha.eksctl.io/cluster-name":"isovalent-2","alpha.eksctl.io/instance-id":"i-0839d680c54ccef60","alpha.eksctl.io/nodegroup-name":"ng-default","beta.kubernetes.io/arch":"amd64","beta.kubernetes.io/instance-type":"t3.medium","beta.kubernetes.io/os":"linux","failure-domain.beta.kubernetes.io/region":"us-west-2","failure-domain.beta.kubernetes.io/zone":"us-west-2c","k8s.io/cloud-provider-aws":"480fc25a68b07748a13498c4eb5a2a07","kubernetes.io/arch":"amd64","kubernetes.io/hostname":"ip-10-0-10-253.us-west-2.compute.internal","kubernetes.io/os":"linux","node-lifecycle":"on-demand","node.kubernetes.io/instance-type":"t3.medium","topology.k8s.aws/zone-id":"usw2-az3","topology.kubernetes.io/region":"us-west-2","topology.kubernetes.io/zone":"us-west-2c"}}
{"process_exec":{"process":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyOTM2MzY1ODo2MDI3NDA=","pid":602740,"uid":0,"cwd":"/","binary":"/bin/sleep","arguments":"360","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:50:05.096849482Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":7,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","tid":602740,"in_init_tree":true},"parent":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","pid":602726,"uid":0,"cwd":"/","binary":"/bin/sh","arguments":"-lc \"echo \"started\"; sleep 360; /bin/sh -lc \"echo late shell $(date)\"; sleep 5\"","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:50:05.092540977Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":1,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","tid":602726,"in_init_tree":true},"ancestors":[{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","pid":602669,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e -address /run/containerd/containerd.sock","flags":"execve clone","start_time":"2025-08-26T21:50:04.931814297Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","tid":602669,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","pid":602660,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e start","flags":"execve clone","start_time":"2025-08-26T21:50:04.924990706Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","tid":602660,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","pid":2743,"uid":0,"cwd":"/","binary":"/usr/bin/containerd","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:24.667485178Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","tid":2743,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","pid":1,"uid":0,"cwd":"/","binary":"/usr/lib/systemd/systemd","arguments":"--switched-root --system --deserialize 21","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:07.527485203Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTow","tid":1,"in_init_tree":false}]},"node_name":"ip-10-0-10-253.us-west-2.compute.internal","time":"2025-08-26T21:50:05.096848913Z","cluster_name":"isovalent-2","node_labels":{"alpha.eksctl.io/cluster-name":"isovalent-2","alpha.eksctl.io/instance-id":"i-0839d680c54ccef60","alpha.eksctl.io/nodegroup-name":"ng-default","beta.kubernetes.io/arch":"amd64","beta.kubernetes.io/instance-type":"t3.medium","beta.kubernetes.io/os":"linux","failure-domain.beta.kubernetes.io/region":"us-west-2","failure-domain.beta.kubernetes.io/zone":"us-west-2c","k8s.io/cloud-provider-aws":"480fc25a68b07748a13498c4eb5a2a07","kubernetes.io/arch":"amd64","kubernetes.io/hostname":"ip-10-0-10-253.us-west-2.compute.internal","kubernetes.io/os":"linux","node-lifecycle":"on-demand","node.kubernetes.io/instance-type":"t3.medium","topology.k8s.aws/zone-id":"usw2-az3","topology.kubernetes.io/region":"us-west-2","topology.kubernetes.io/zone":"us-west-2c"}}
{"process_exec":{"process":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzYyNTA1NDgxMjo2MDI3MjY=","pid":602726,"uid":0,"cwd":"/","binary":"/bin/sh","arguments":"-lc \"echo \"started\"; sleep 360; /bin/sh -lc \"echo late shell $(date)\"; sleep 5\"","flags":"execve rootcwd clone inInitTree","start_time":"2025-08-26T21:50:05.092540977Z","auid":4294967295,"pod":{"namespace":"default","name":"delayed-shell","container":{"id":"containerd://c48fd368771bb4ee42b6c5349e87ff834be06d96452d3b2041a8a000b9d6395f","name":"delayed-shell","image":{"id":"docker.io/library/alpine@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","name":"docker.io/library/alpine:3"},"start_time":"2025-08-26T21:50:05Z","pid":1,"security_context":{}},"pod_labels":{"run":"delayed-shell"},"workload":"delayed-shell","workload_kind":"Pod"},"docker":"c48fd368771bb4ee42b6c5349e87ff8","parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","tid":602726,"in_init_tree":true},"parent":{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ2NDMyODQ0OTo2MDI2Njk=","pid":602669,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e -address /run/containerd/containerd.sock","flags":"execve clone","start_time":"2025-08-26T21:50:04.931814297Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","tid":602669,"in_init_tree":false},"ancestors":[{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MjUwMzczNzQ1NzUwNTUwNTo2MDI2NjA=","pid":602660,"uid":0,"cwd":"/run/containerd/io.containerd.runtime.v2.task/k8s.io/3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e","binary":"/usr/bin/containerd-shim-runc-v2","arguments":"-namespace k8s.io -address /run/containerd/containerd.sock -publish-binary /usr/bin/containerd -id 3489e42874ecaf13fe2908d3ab2a5d0cae7ff7941b97c353285a3fd0b294354e start","flags":"execve clone","start_time":"2025-08-26T21:50:04.924990706Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","tid":602660,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTcyMDAwMDAwMDA6Mjc0Mw==","pid":2743,"uid":0,"cwd":"/","binary":"/usr/bin/containerd","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:24.667485178Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","tid":2743,"in_init_tree":false},{"exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6NjAwMDAwMDA6MQ==","pid":1,"uid":0,"cwd":"/","binary":"/usr/lib/systemd/systemd","arguments":"--switched-root --system --deserialize 21","flags":"procFS auid rootcwd","start_time":"2025-07-28T22:21:07.527485203Z","auid":4294967295,"parent_exec_id":"aXAtMTAtMC0xMC0yNTMudXMtd2VzdC0yLmNvbXB1dGUuaW50ZXJuYWw6MTow","tid":1,"in_init_tree":false}]},"node_name":"ip-10-0-10-253.us-west-2.compute.internal","time":"2025-08-26T21:50:05.092540845Z","cluster_name":"isovalent-2","node_labels":{"alpha.eksctl.io/cluster-name":"isovalent-2","alpha.eksctl.io/instance-id":"i-0839d680c54ccef60","alpha.eksctl.io/nodegroup-name":"ng-default","beta.kubernetes.io/arch":"amd64","beta.kubernetes.io/instance-type":"t3.medium","beta.kubernetes.io/os":"linux","failure-domain.beta.kubernetes.io/region":"us-west-2","failure-domain.beta.kubernetes.io/zone":"us-west-2c","k8s.io/cloud-provider-aws":"480fc25a68b07748a13498c4eb5a2a07","kubernetes.io/arch":"amd64","kubernetes.io/hostname":"ip-10-0-10-253.us-west-2.compute.internal","kubernetes.io/os":"linux","node-lifecycle":"on-demand","node.kubernetes.io/instance-type":"t3.medium","topology.k8s.aws/zone-id":"usw2-az3","topology.kubernetes.io/region":"us-west-2","topology.kubernetes.io/zone":"us-west-2c"}}