Grading Checklist

• Identifies that the CNI plugin failed to initialize after the node reboot.
• Checks the calico-node DaemonSet pod status on the affected node.
• Inspects kubelet logs for CNI-specific error messages.
• Verifies presence of CNI config files in /etc/cni/net.d/.
• Verifies presence of CNI plugin binaries in /opt/cni/bin/.
• Checks for required kernel modules (vxlan, ip_tables, iptable_filter).
• Examines network interfaces with ip link to check for the VXLAN tunnel device.
• Considers that the kernel upgrade may have removed or changed kernel modules.
• Suggests restarting the calico-node pod on the affected node as a first step.
• Mentions checking calicoctl node status for BGP/VXLAN peer state.
• Recommends verifying that ip route shows pod CIDR routes after CNI recovery.
• Notes the difference between existing pods (stale network config) and new pods (cannot get network config at all).