Three causes, each sufficient on its own: no IAM client credential (so the resolver never made a call), an image below the tag where a machine credential resolves its org from the token subject, and probes aimed at a port this binary does not open. Pin sits under v1.801.487, where the console became a published site and boot starts requiring one. Co-authored-by: Hanzo Dev <[email protected]>