Created
June 21, 2019 10:54
-
-
Save chopmann/242e7c7f6225f2b5ac8cd398fb2ca1d4 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| root@controller-0:~# kubectl logs pod/cilium-drq7h -n kube-system --timestamps | |
| 2019-06-21T12:51:36.936351182+02:00 level=info msg="Skipped reading configuration file" reason="Config File \"ciliumd\" Not Found in \"[/root]\"" subsys=daemon | |
| 2019-06-21T12:51:36.936647526+02:00 level=info msg=" --access-log=''" subsys=daemon | |
| 2019-06-21T12:51:36.936659064+02:00 level=info msg=" --agent-labels=''" subsys=daemon | |
| 2019-06-21T12:51:36.936669478+02:00 level=info msg=" --allow-localhost='auto'" subsys=daemon | |
| 2019-06-21T12:51:36.936675704+02:00 level=info msg=" --auto-direct-node-routes='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936680014+02:00 level=info msg=" --bpf-compile-debug='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936683855+02:00 level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon | |
| 2019-06-21T12:51:36.936691346+02:00 level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon | |
| 2019-06-21T12:51:36.936700823+02:00 level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon | |
| 2019-06-21T12:51:36.936704655+02:00 level=info msg=" --bpf-root=''" subsys=daemon | |
| 2019-06-21T12:51:36.936708401+02:00 level=info msg=" --cgroup-root=''" subsys=daemon | |
| 2019-06-21T12:51:36.936716744+02:00 level=info msg=" --cluster-id='0'" subsys=daemon | |
| 2019-06-21T12:51:36.936720862+02:00 level=info msg=" --cluster-name='default'" subsys=daemon | |
| 2019-06-21T12:51:36.936724713+02:00 level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon | |
| 2019-06-21T12:51:36.936739092+02:00 level=info msg=" --cmdref=''" subsys=daemon | |
| 2019-06-21T12:51:36.936743348+02:00 level=info msg=" --config=''" subsys=daemon | |
| 2019-06-21T12:51:36.936747178+02:00 level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon | |
| 2019-06-21T12:51:36.936759254+02:00 level=info msg=" --conntrack-garbage-collector-interval='0'" subsys=daemon | |
| 2019-06-21T12:51:36.936763571+02:00 level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon | |
| 2019-06-21T12:51:36.936772009+02:00 level=info msg=" --container-runtime=''" subsys=daemon | |
| 2019-06-21T12:51:36.936779525+02:00 level=info msg=" --container-runtime-endpoint='map[containerd:/run/k3s/containerd/containerd.sock]'" subsys=daemon | |
| 2019-06-21T12:51:36.936787995+02:00 level=info msg=" --datapath-mode='veth'" subsys=daemon | |
| 2019-06-21T12:51:36.936796554+02:00 level=info msg=" --debug='true'" subsys=daemon | |
| 2019-06-21T12:51:36.936804156+02:00 level=info msg=" --debug-verbose=''" subsys=daemon | |
| 2019-06-21T12:51:36.936811632+02:00 level=info msg=" --device='undefined'" subsys=daemon | |
| 2019-06-21T12:51:36.936822759+02:00 level=info msg=" --disable-conntrack='false'" subsys=daemon | |
| 2019-06-21T12:51:36.93683053+02:00 level=info msg=" --disable-endpoint-crd='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936839497+02:00 level=info msg=" --disable-envoy-version-check='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936847417+02:00 level=info msg=" --disable-ipv4='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936855721+02:00 level=info msg=" --disable-k8s-services='false'" subsys=daemon | |
| 2019-06-21T12:51:36.93686451+02:00 level=info msg=" --docker='unix:///var/run/docker.sock'" subsys=daemon | |
| 2019-06-21T12:51:36.936872642+02:00 level=info msg=" --enable-health-checking='true'" subsys=daemon | |
| 2019-06-21T12:51:36.936880172+02:00 level=info msg=" --enable-ipsec='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936887968+02:00 level=info msg=" --enable-ipv4='true'" subsys=daemon | |
| 2019-06-21T12:51:36.93689551+02:00 level=info msg=" --enable-ipv6='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936902832+02:00 level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936910333+02:00 level=info msg=" --enable-legacy-services='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936917675+02:00 level=info msg=" --enable-policy='default'" subsys=daemon | |
| 2019-06-21T12:51:36.936925001+02:00 level=info msg=" --enable-selective-regeneration='true'" subsys=daemon | |
| 2019-06-21T12:51:36.936938568+02:00 level=info msg=" --enable-tracing='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936942861+02:00 level=info msg=" --encrypt-interface=''" subsys=daemon | |
| 2019-06-21T12:51:36.936949904+02:00 level=info msg=" --endpoint-queue-size='25'" subsys=daemon | |
| 2019-06-21T12:51:36.936954039+02:00 level=info msg=" --envoy-log=''" subsys=daemon | |
| 2019-06-21T12:51:36.936961804+02:00 level=info msg=" --fixed-identity-mapping='map[]'" subsys=daemon | |
| 2019-06-21T12:51:36.936969658+02:00 level=info msg=" --flannel-manage-existing-containers='false'" subsys=daemon | |
| 2019-06-21T12:51:36.936977759+02:00 level=info msg=" --flannel-master-device='cni0'" subsys=daemon | |
| 2019-06-21T12:51:36.936985264+02:00 level=info msg=" --flannel-uninstall-on-exit='true'" subsys=daemon | |
| 2019-06-21T12:51:36.936992584+02:00 level=info msg=" --http-403-msg=''" subsys=daemon | |
| 2019-06-21T12:51:36.937000082+02:00 level=info msg=" --http-idle-timeout='0'" subsys=daemon | |
| 2019-06-21T12:51:36.937007493+02:00 level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon | |
| 2019-06-21T12:51:36.937014959+02:00 level=info msg=" --http-request-timeout='3600'" subsys=daemon | |
| 2019-06-21T12:51:36.937022366+02:00 level=info msg=" --http-retry-count='3'" subsys=daemon | |
| 2019-06-21T12:51:36.93703035+02:00 level=info msg=" --http-retry-timeout='0'" subsys=daemon | |
| 2019-06-21T12:51:36.937037871+02:00 level=info msg=" --identity-change-grace-period='5s'" subsys=daemon | |
| 2019-06-21T12:51:36.937045607+02:00 level=info msg=" --install-iptables-rules='true'" subsys=daemon | |
| 2019-06-21T12:51:36.93705312+02:00 level=info msg=" --ipv4-cluster-cidr-mask-size='8'" subsys=daemon | |
| 2019-06-21T12:51:36.937060676+02:00 level=info msg=" --ipv4-node='auto'" subsys=daemon | |
| 2019-06-21T12:51:36.937068093+02:00 level=info msg=" --ipv4-range='auto'" subsys=daemon | |
| 2019-06-21T12:51:36.937075406+02:00 level=info msg=" --ipv4-service-range='auto'" subsys=daemon | |
| 2019-06-21T12:51:36.937082903+02:00 level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon | |
| 2019-06-21T12:51:36.937090322+02:00 level=info msg=" --ipv6-node='auto'" subsys=daemon | |
| 2019-06-21T12:51:36.93709761+02:00 level=info msg=" --ipv6-range='auto'" subsys=daemon | |
| 2019-06-21T12:51:36.937104887+02:00 level=info msg=" --ipv6-service-range='auto'" subsys=daemon | |
| 2019-06-21T12:51:36.93711219+02:00 level=info msg=" --ipvlan-master-device='undefined'" subsys=daemon | |
| 2019-06-21T12:51:36.937120592+02:00 level=info msg=" --k8s-api-server=''" subsys=daemon | |
| 2019-06-21T12:51:36.937128039+02:00 level=info msg=" --k8s-force-json-patch='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937136298+02:00 level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon | |
| 2019-06-21T12:51:36.937144268+02:00 level=info msg=" --k8s-namespace='kube-system'" subsys=daemon | |
| 2019-06-21T12:51:36.93715199+02:00 level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937159929+02:00 level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937187862+02:00 level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon | |
| 2019-06-21T12:51:36.937194293+02:00 level=info msg=" --k8s-watcher-queue-size='1024'" subsys=daemon | |
| 2019-06-21T12:51:36.937202842+02:00 level=info msg=" --keep-bpf-templates='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937207372+02:00 level=info msg=" --keep-config='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937211235+02:00 level=info msg=" --kvstore='etcd'" subsys=daemon | |
| 2019-06-21T12:51:36.937220788+02:00 level=info msg=" --kvstore-opt='map[etcd.config:/var/lib/etcd-config/etcd.config]'" subsys=daemon | |
| 2019-06-21T12:51:36.937228876+02:00 level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon | |
| 2019-06-21T12:51:36.937232951+02:00 level=info msg=" --label-prefix-file=''" subsys=daemon | |
| 2019-06-21T12:51:36.937240533+02:00 level=info msg=" --labels=''" subsys=daemon | |
| 2019-06-21T12:51:36.937248336+02:00 level=info msg=" --lb=''" subsys=daemon | |
| 2019-06-21T12:51:36.93725606+02:00 level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon | |
| 2019-06-21T12:51:36.937264099+02:00 level=info msg=" --log-driver=''" subsys=daemon | |
| 2019-06-21T12:51:36.937271778+02:00 level=info msg=" --log-opt='map[]'" subsys=daemon | |
| 2019-06-21T12:51:36.937279349+02:00 level=info msg=" --log-system-load='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937286734+02:00 level=info msg=" --masquerade='true'" subsys=daemon | |
| 2019-06-21T12:51:36.937295379+02:00 level=info msg=" --max-controller-interval='0'" subsys=daemon | |
| 2019-06-21T12:51:36.937303249+02:00 level=info msg=" --metrics=''" subsys=daemon | |
| 2019-06-21T12:51:36.937311177+02:00 level=info msg=" --monitor-aggregation='none'" subsys=daemon | |
| 2019-06-21T12:51:36.937318704+02:00 level=info msg=" --monitor-queue-size='32768'" subsys=daemon | |
| 2019-06-21T12:51:36.937326087+02:00 level=info msg=" --mtu='0'" subsys=daemon | |
| 2019-06-21T12:51:36.937333895+02:00 level=info msg=" --nat46-range='0:0:0:0:0:FFFF::/96'" subsys=daemon | |
| 2019-06-21T12:51:36.937343803+02:00 level=info msg=" --policy-queue-size='100'" subsys=daemon | |
| 2019-06-21T12:51:36.937351325+02:00 level=info msg=" --pprof='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937358701+02:00 level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937366162+02:00 level=info msg=" --prefilter-device='undefined'" subsys=daemon | |
| 2019-06-21T12:51:36.937373532+02:00 level=info msg=" --prefilter-mode='native'" subsys=daemon | |
| 2019-06-21T12:51:36.937381018+02:00 level=info msg=" --prepend-iptables-chains='true'" subsys=daemon | |
| 2019-06-21T12:51:36.937389588+02:00 level=info msg=" --prometheus-serve-addr=''" subsys=daemon | |
| 2019-06-21T12:51:36.937397158+02:00 level=info msg=" --proxy-connect-timeout='1'" subsys=daemon | |
| 2019-06-21T12:51:36.937404678+02:00 level=info msg=" --restore='true'" subsys=daemon | |
| 2019-06-21T12:51:36.937412098+02:00 level=info msg=" --sidecar-http-proxy='false'" subsys=daemon | |
| 2019-06-21T12:51:36.93741965+02:00 level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon | |
| 2019-06-21T12:51:36.937427168+02:00 level=info msg=" --single-cluster-route='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937436061+02:00 level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon | |
| 2019-06-21T12:51:36.937443695+02:00 level=info msg=" --sockops-enable='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937451584+02:00 level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon | |
| 2019-06-21T12:51:36.937458994+02:00 level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon | |
| 2019-06-21T12:51:36.937467306+02:00 level=info msg=" --tofqdns-enable-poller='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937474799+02:00 level=info msg=" --tofqdns-enable-poller-events='true'" subsys=daemon | |
| 2019-06-21T12:51:36.937482385+02:00 level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon | |
| 2019-06-21T12:51:36.93749029+02:00 level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon | |
| 2019-06-21T12:51:36.937497744+02:00 level=info msg=" --tofqdns-pre-cache=''" subsys=daemon | |
| 2019-06-21T12:51:36.93750509+02:00 level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon | |
| 2019-06-21T12:51:36.937512889+02:00 level=info msg=" --trace-payloadlen='128'" subsys=daemon | |
| 2019-06-21T12:51:36.937517135+02:00 level=info msg=" --tunnel='vxlan'" subsys=daemon | |
| 2019-06-21T12:51:36.937527849+02:00 level=info msg=" --version='false'" subsys=daemon | |
| 2019-06-21T12:51:36.937535246+02:00 level=info msg=" _ _ _" subsys=daemon | |
| 2019-06-21T12:51:36.93753938+02:00 level=info msg=" ___|_| |_|_ _ _____" subsys=daemon | |
| 2019-06-21T12:51:36.937546291+02:00 level=info msg="| _| | | | | | |" subsys=daemon | |
| 2019-06-21T12:51:36.937549938+02:00 level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon | |
| 2019-06-21T12:51:36.937557334+02:00 level=info msg="Cilium 1.5.3 1de682e16 2019-06-06T11:13:39-07:00 go version go1.12.5 linux/amd64" subsys=daemon | |
| 2019-06-21T12:51:36.948355352+02:00 level=info msg="cilium-envoy version: 68c49eeb8241867829c5eab4dff13a316c71c355/1.11.0-dev/Modified/RELEASE/BoringSSL" subsys=daemon | |
| 2019-06-21T12:51:36.99506331+02:00 level=info msg="clang (7.0.0) and kernel (4.15.0) versions: OK!" subsys=daemon | |
| 2019-06-21T12:51:37.00429453+02:00 level=info msg="linking environment: OK!" subsys=daemon | |
| 2019-06-21T12:51:37.590840483+02:00 level=info msg="bpf_requirements check: OK!" subsys=daemon | |
| 2019-06-21T12:51:37.590860657+02:00 level=debug msg="bpf_features check: Some features may be limited:" subsys=daemon | |
| 2019-06-21T12:51:37.590877494+02:00 level=debug msg="BPF/probes: Kernel config not found." subsys=daemon | |
| 2019-06-21T12:51:37.590882614+02:00 level=debug msg="Detected support for map type Longest prefix match trie" subsys=bpf | |
| 2019-06-21T12:51:37.590892624+02:00 level=debug msg="Detected support for map type LRU hash" subsys=bpf | |
| 2019-06-21T12:51:37.590900199+02:00 level=debug msg="Skipping support detection for map type Hash" subsys=bpf | |
| 2019-06-21T12:51:37.59090407+02:00 level=debug msg="Skipping support detection for map type Array" subsys=bpf | |
| 2019-06-21T12:51:37.590912629+02:00 level=debug msg="Skipping support detection for map type Program array" subsys=bpf | |
| 2019-06-21T12:51:37.590916799+02:00 level=debug msg="Skipping support detection for map type Event array" subsys=bpf | |
| 2019-06-21T12:51:37.590920781+02:00 level=debug msg="Skipping support detection for map type Per-CPU hash" subsys=bpf | |
| 2019-06-21T12:51:37.590924829+02:00 level=debug msg="Skipping support detection for map type Per-CPU array" subsys=bpf | |
| 2019-06-21T12:51:37.590929124+02:00 level=debug msg="Skipping support detection for map type Stack trace" subsys=bpf | |
| 2019-06-21T12:51:37.590932546+02:00 level=debug msg="Skipping support detection for map type Cgroup array" subsys=bpf | |
| 2019-06-21T12:51:37.590944459+02:00 level=debug msg="Skipping support detection for map type LRU per-CPU hash" subsys=bpf | |
| 2019-06-21T12:51:37.590948713+02:00 level=debug msg="Skipping support detection for map type Array of maps" subsys=bpf | |
| 2019-06-21T12:51:37.590957101+02:00 level=debug msg="Skipping support detection for map type Hash of maps" subsys=bpf | |
| 2019-06-21T12:51:37.590961437+02:00 level=debug msg="Skipping support detection for map type Device Map" subsys=bpf | |
| 2019-06-21T12:51:37.590965009+02:00 level=debug msg="Skipping support detection for map type Socket Map" subsys=bpf | |
| 2019-06-21T12:51:37.590968643+02:00 level=debug msg="Skipping support detection for map type CPU Redirect Map" subsys=bpf | |
| 2019-06-21T12:51:37.590974985+02:00 level=debug msg="Skipping support detection for map type Unknown" subsys=bpf | |
| 2019-06-21T12:51:37.590978281+02:00 level=debug msg="Skipping support detection for map type Socket Hash" subsys=bpf | |
| 2019-06-21T12:51:37.591206683+02:00 level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf | |
| 2019-06-21T12:51:37.591545932+02:00 level=info msg="Valid label prefix configuration:" subsys=labels-filter | |
| 2019-06-21T12:51:37.591554131+02:00 level=info msg=" - :io.kubernetes.pod.namespace" subsys=labels-filter | |
| 2019-06-21T12:51:37.591556864+02:00 level=info msg=" - :io.cilium.k8s.namespace.labels" subsys=labels-filter | |
| 2019-06-21T12:51:37.591569017+02:00 level=info msg=" - !:io.kubernetes" subsys=labels-filter | |
| 2019-06-21T12:51:37.591572105+02:00 level=info msg=" - !:.*kubernetes.io" subsys=labels-filter | |
| 2019-06-21T12:51:37.591574411+02:00 level=info msg=" - !:pod-template-generation" subsys=labels-filter | |
| 2019-06-21T12:51:37.591576825+02:00 level=info msg=" - !:pod-template-hash" subsys=labels-filter | |
| 2019-06-21T12:51:37.59157905+02:00 level=info msg=" - !:controller-revision-hash" subsys=labels-filter | |
| 2019-06-21T12:51:37.591584763+02:00 level=info msg=" - !:annotation.*" subsys=labels-filter | |
| 2019-06-21T12:51:37.591587236+02:00 level=info msg=" - !:etcd_node" subsys=labels-filter | |
| 2019-06-21T12:51:37.591614981+02:00 level=warning msg="Running Cilium in flannel mode requires tunnel mode be 'disabled'. Changing tunnel mode to: disabled" subsys=daemon | |
| 2019-06-21T12:51:37.59162599+02:00 level=info msg="Initializing daemon" subsys=daemon | |
| 2019-06-21T12:51:37.591629366+02:00 level=info msg="Waiting for the underlying interface to be initialized with containers" interface=cni0 subsys=daemon | |
| 2019-06-21T12:51:37.591735233+02:00 level=info msg="Underlying interface initialized with containers!" interface=cni0 subsys=daemon | |
| 2019-06-21T12:51:37.591858327+02:00 level=info msg="Detected MTU 1500" subsys=mtu | |
| 2019-06-21T12:51:37.591917671+02:00 level=debug msg="creating new EventQueue" name=repository-change-queue numBufferedEvents=100 subsys=eventqueue | |
| 2019-06-21T12:51:37.591923783+02:00 level=debug msg="creating new EventQueue" name=repository-reaction-queue numBufferedEvents=100 subsys=eventqueue | |
| 2019-06-21T12:51:37.592057317+02:00 level=debug msg="Performing regular background work" subsys=nodemanager syncInterval=1m0s | |
| 2019-06-21T12:51:37.592264696+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_lxc subsys=bpf | |
| 2019-06-21T12:51:37.592283743+02:00 level=debug msg="Opening map in parallel mode" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf | |
| 2019-06-21T12:51:37.592313297+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ipcache subsys=bpf | |
| 2019-06-21T12:51:37.592369237+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:37.592573351+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_tunnel_map subsys=bpf | |
| 2019-06-21T12:51:37.592627907+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_lb4_services_v2 subsys=bpf | |
| 2019-06-21T12:51:37.59268372+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_lb4_backends subsys=bpf | |
| 2019-06-21T12:51:37.592732632+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_lb4_reverse_nat subsys=bpf | |
| 2019-06-21T12:51:37.592796832+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_lb4_rr_seq_v2 subsys=bpf | |
| 2019-06-21T12:51:37.594751735+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_proxy4 subsys=bpf | |
| 2019-06-21T12:51:37.594909323+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{world agent-local}" ipAddr=0.0.0.0/0 key=0 subsys=ipcache | |
| 2019-06-21T12:51:37.594924094+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:37.5949373+02:00 level=debug msg="resource not found" subsys=xds xdsClientNode="<nil>" xdsResourceName=2 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:37.594943081+02:00 level=debug msg="returning 0 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:37.594957523+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=2 | |
| 2019-06-21T12:51:37.594962099+02:00 level=debug msg="inserting resource into cache" subsys=xds xdsResourceName=2 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=2 | |
| 2019-06-21T12:51:37.595002986+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=2 | |
| 2019-06-21T12:51:37.595017799+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=world ipAddr="{0.0.0.0 00000000}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:37.595048162+02:00 level=debug msg="Removed outdated host ip 10.42.0.1 from endpoint map" subsys=daemon | |
| 2019-06-21T12:51:37.595058225+02:00 level=debug msg="Removed outdated host ip 10.0.10.201 from endpoint map" subsys=daemon | |
| 2019-06-21T12:51:37.595272774+02:00 level=debug msg="Starting new controller" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:37.595284733+02:00 level=debug msg="Starting new controller" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:37.595539755+02:00 level=debug msg="created new LBBackend" backend="{1 {127.0.0.1 {NONE 6445}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.595549968+02:00 level=debug msg="created new LBBackend" backend="{15 {10.42.2.3 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.595558184+02:00 level=debug msg="created new LBBackend" backend="{16 {10.42.3.5 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.595565172+02:00 level=debug msg="Controller func execution time: 207.016µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:37.595600405+02:00 level=debug msg="created new LBBackend" backend="{12 {10.42.1.4 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.595628173+02:00 level=debug msg="Restored backend IDs" backendIDs="map[10.42.1.4:2379:12 10.42.2.3:2379:15 10.42.3.5:2379:16 127.0.0.1:6445:1]" subsys=daemon | |
| 2019-06-21T12:51:37.595706276+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:37.595869041+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.229.165:2379" bpfMapValue="15 (5)" subsys=map-lb | |
| 2019-06-21T12:51:37.595887056+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="15 (5)" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.595892526+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.595897253+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {NONE 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.595903545+02:00 level=debug msg="created new LBBackend" backend="{15 {10.42.2.3 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.595911553+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="10.42.2.3:2379, weight: 0" backendIndex=3 frontend="10.43.229.165:2379" subsys=loadbalancer | |
| 2019-06-21T12:51:37.595974661+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:37.595980346+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.0.1:443" bpfMapValue="1 (1)" subsys=map-lb | |
| 2019-06-21T12:51:37.595991897+02:00 level=debug msg="Controller func execution time: 394.07µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:37.596013738+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="1 (1)" serviceID="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:37.596023454+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:37.596026065+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.1 {NONE 443}}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596028327+02:00 level=debug msg="created new LBBackend" backend="{1 {127.0.0.1 {NONE 6445}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596038651+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="127.0.0.1:6445, weight: 0" backendIndex=1 frontend="10.43.0.1:443" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596057334+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.229.165:2379" bpfMapValue="12 (5)" subsys=map-lb | |
| 2019-06-21T12:51:37.596064461+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="12 (5)" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596071578+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596076146+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {NONE 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596083297+02:00 level=debug msg="created new LBBackend" backend="{12 {10.42.1.4 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596087404+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="10.42.1.4:2379, weight: 0" backendIndex=1 frontend="10.43.229.165:2379" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596116315+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.229.165:2379" bpfMapValue="16 (5)" subsys=map-lb | |
| 2019-06-21T12:51:37.596120983+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="16 (5)" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596143746+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596148492+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {NONE 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596152231+02:00 level=debug msg="created new LBBackend" backend="{16 {10.42.3.5 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596162476+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="10.42.3.5:2379, weight: 0" backendIndex=2 frontend="10.43.229.165:2379" subsys=loadbalancer | |
| 2019-06-21T12:51:37.596203272+02:00 level=debug msg="Restoring service" l3n4Addr="{IP:10.43.229.165 L4Addr:{Protocol:NONE Port:2379}}" subsys=service | |
| 2019-06-21T12:51:37.596212221+02:00 level=debug msg="Restored service ID from datapath" serviceID=5 serviceIP="10.43.229.165:2379" subsys=daemon | |
| 2019-06-21T12:51:37.596234289+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service" lbBackend="[{12 {10.42.1.4 {NONE 2379}} 0} {16 {10.42.3.5 {NONE 2379}} 0} {15 {10.42.2.3 {NONE 2379}} 0}]" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596245191+02:00 level=debug msg="converting L3n4Addr to ServiceKey" l3n4AddrID="{{10.43.229.165 {NONE 2379}} 5}" subsys=map-lb | |
| 2019-06-21T12:51:37.59625848+02:00 level=debug msg="associating frontend -> backend" lbBackend="10.42.1.4:2379 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596266393+02:00 level=debug msg="associating frontend -> backend" lbBackend="10.42.3.5:2379 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596282482+02:00 level=debug msg="associating frontend -> backend" lbBackend="10.42.2.3:2379 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596315728+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to Service Key and Value" lbBackend="[{12 {10.42.1.4 {NONE 2379}} 0} {16 {10.42.3.5 {NONE 2379}} 0} {15 {10.42.2.3 {NONE 2379}} 0}]" lbFrontend="10.43.229.165:2379" obj="[10.42.1.4:2379 (5) 10.42.3.5:2379 (5) 10.42.2.3:2379 (5)]" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:37.596337208+02:00 level=debug msg="Restoring service" l3n4Addr="{IP:10.43.0.1 L4Addr:{Protocol:NONE Port:443}}" subsys=service | |
| 2019-06-21T12:51:37.596344846+02:00 level=debug msg="Restored service ID from datapath" serviceID=1 serviceIP="10.43.0.1:443" subsys=daemon | |
| 2019-06-21T12:51:37.596349383+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service" lbBackend="[{1 {127.0.0.1 {NONE 6445}} 0}]" lbFrontend="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:37.596363172+02:00 level=debug msg="converting L3n4Addr to ServiceKey" l3n4AddrID="{{10.43.0.1 {NONE 443}} 1}" subsys=map-lb | |
| 2019-06-21T12:51:37.596371696+02:00 level=debug msg="associating frontend -> backend" lbBackend="127.0.0.1:6445 (1)" lbFrontend="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:37.596378494+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to Service Key and Value" lbBackend="[{1 {127.0.0.1 {NONE 6445}} 0}]" lbFrontend="10.43.0.1:443" obj="[127.0.0.1:6445 (1)]" serviceID="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:37.596398921+02:00 level=info msg="Restore service IDs from BPF maps" duration=1.099963ms failed=0 removed=0 restored=2 skipped=0 subsys=daemon | |
| 2019-06-21T12:51:37.596470834+02:00 level=info msg="Removing stale endpoint interfaces" subsys=daemon | |
| 2019-06-21T12:51:37.597281208+02:00 level=info msg="Establishing connection to apiserver" host="https://10.43.0.1:443" subsys=k8s | |
| 2019-06-21T12:51:37.600941282+02:00 level=info msg="Connected to apiserver" subsys=k8s | |
| 2019-06-21T12:51:37.602616988+02:00 level=debug msg="Add NodeCiliumInternalIP: 10.42.0.215" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:37.602630833+02:00 level=debug msg="Missing io.cilium.network.ipv6-cilium-host. Annotation required when IPSec Enabled" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:37.602635992+02:00 level=debug msg="Empty IPv6 CIDR annotation in node" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:37.602640008+02:00 level=debug msg="Empty IPv6 health endpoint annotation in node" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:37.60264349+02:00 level=info msg="Retrieved node information from kubernetes" nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:37.602656948+02:00 level=info msg="Received own node information from API server" ipAddr.ipv4=10.0.10.201 ipAddr.ipv6="<nil>" nodeName=controller-0 subsys=k8s v4Prefix=10.42.0.0/24 v6Prefix="<nil>" | |
| 2019-06-21T12:51:37.602662814+02:00 level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon | |
| 2019-06-21T12:51:37.602666697+02:00 level=info msg="Initializing node addressing" subsys=daemon | |
| 2019-06-21T12:51:37.602709834+02:00 level=info msg="Restored IPv4 internal node IP: 10.42.0.215" subsys=node | |
| 2019-06-21T12:51:37.602783896+02:00 level=info msg="Initializing IPAM" subsys=daemon v4Prefix=10.42.0.0/24 v6Prefix="<nil>" | |
| 2019-06-21T12:51:37.603055377+02:00 level=debug msg="using CRI endpoint unix:///run/k3s/containerd/containerd.sock" subsys=workload-watcher | |
| 2019-06-21T12:51:37.603085246+02:00 level=info msg="Container runtime options set: endpoint=/run/k3s/containerd/containerd.sock,endpoint=/var/run/crio/crio.sock,datapath-mode=veth,endpoint=unix:///var/run/docker.sock" subsys=daemon | |
| 2019-06-21T12:51:37.603089731+02:00 level=info msg="Restoring endpoints..." subsys=daemon | |
| 2019-06-21T12:51:37.603273431+02:00 level=info msg="No old endpoints found." subsys=daemon | |
| 2019-06-21T12:51:37.60329455+02:00 level=debug msg="Allocated specific IP" ip=10.42.0.215 owner=router subsys=ipam | |
| 2019-06-21T12:51:37.603335086+02:00 level=info msg="Addressing information:" subsys=daemon | |
| 2019-06-21T12:51:37.603343448+02:00 level=info msg=" Cluster-Name: default" subsys=daemon | |
| 2019-06-21T12:51:37.603347553+02:00 level=info msg=" Cluster-ID: 0" subsys=daemon | |
| 2019-06-21T12:51:37.603351648+02:00 level=info msg=" Local node-name: controller-0" subsys=daemon | |
| 2019-06-21T12:51:37.603360339+02:00 level=info msg=" Node-IPv6: <nil>" subsys=daemon | |
| 2019-06-21T12:51:37.603364712+02:00 level=info msg=" External-Node IPv4: 10.0.10.201" subsys=daemon | |
| 2019-06-21T12:51:37.603368497+02:00 level=info msg=" Internal-Node IPv4: 10.42.0.215" subsys=daemon | |
| 2019-06-21T12:51:37.603372283+02:00 level=info msg=" Cluster IPv4 prefix: 10.0.0.0/8" subsys=daemon | |
| 2019-06-21T12:51:37.603382651+02:00 level=info msg=" IPv4 allocation prefix: 10.42.0.0/24" subsys=daemon | |
| 2019-06-21T12:51:37.603393932+02:00 level=debug msg="Allocated random IP" ip=10.42.0.219 owner=loopback subsys=ipam | |
| 2019-06-21T12:51:37.603400905+02:00 level=info msg=" Loopback IPv4: 10.42.0.219" subsys=daemon | |
| 2019-06-21T12:51:37.603404017+02:00 level=debug msg="Allocated random IP" ip=10.42.0.163 owner=health subsys=ipam | |
| 2019-06-21T12:51:37.603406543+02:00 level=debug msg="IPv4 health endpoint address: 10.42.0.163" subsys=daemon | |
| 2019-06-21T12:51:37.603415889+02:00 level=info msg="Annotating k8s node" subsys=daemon v4CiliumHostIP.IPv4=10.42.0.215 v4Prefix=10.42.0.0/24 v4healthIP.IPv4=10.42.0.163 v6CiliumHostIP.IPv6="<nil>" v6Prefix="<nil>" v6healthIP.IPv6="<nil>" | |
| 2019-06-21T12:51:37.603432729+02:00 level=debug msg="Updating node annotations with node CIDRs" nodeName=controller-0 subsys=k8s v4CiliumHostIP.IPv4=10.42.0.215 v4Prefix=10.42.0.0/24 v4healthIP.IPv4=10.42.0.163 v6CiliumHostIP.IPv6="<nil>" v6Prefix="<nil>" v6healthIP.IPv6="<nil>" | |
| 2019-06-21T12:51:37.603444937+02:00 level=debug msg="Starting new controller" name=update-k8s-node-annotations subsys=controller uuid=8b21159d-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:37.60348896+02:00 level=debug msg="Received node update event from local-node: node.Node{Name:\"controller-0\", Cluster:\"default\", IPAddresses:[]node.Address{node.Address{Type:\"InternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x0, 0xa, 0xc9}}, node.Address{Type:\"CiliumInternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x0, 0xd7}}}, IPv4AllocCIDR:(*cidr.CIDR)(0xc000996008), IPv6AllocCIDR:(*cidr.CIDR)(nil), IPv4HealthIP:net.IP{0xa, 0x2a, 0x0, 0xa3}, IPv6HealthIP:net.IP(nil), ClusterID:0, Source:\"local-node\", EncryptionKey:0x0}" subsys=nodemanager | |
| 2019-06-21T12:51:37.603502725+02:00 level=info msg="Cluster-ID is not specified, skipping ClusterMesh initialization" subsys=daemon | |
| 2019-06-21T12:51:37.603527691+02:00 level=debug msg="Detach BPF Object:" args="[cgroup detach /var/run/cilium/cgroupv2 sock_ops pinned /sys/fs/bpf/bpf_sockops]" bpftool=bpftool subsys=sockops | |
| 2019-06-21T12:51:37.603563+02:00 level=info msg="Adding local node to cluster" subsys=nodediscovery | |
| 2019-06-21T12:51:37.603946677+02:00 level=info msg="Initializing identity allocator" subsys=identity-cache | |
| 2019-06-21T12:51:37.605433754+02:00 level=info msg="Sockmap disabled." subsys=sockops | |
| 2019-06-21T12:51:37.605454632+02:00 level=info msg="Sockmsg Disabled." subsys=sockops | |
| 2019-06-21T12:51:37.60548512+02:00 level=debug msg="writing configuration" file-path=netdev_config.h subsys=daemon | |
| 2019-06-21T12:51:37.605575377+02:00 level=debug msg="Starting new controller" name=template-dir-watcher subsys=controller uuid=8b2167f8-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:37.615165066+02:00 level=debug msg="Controller func execution time: 11.522293ms" name=update-k8s-node-annotations subsys=controller uuid=8b21159d-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:37.615274769+02:00 level=debug msg="Controller run succeeded; waiting for next controller update or stop" name=update-k8s-node-annotations subsys=controller uuid=8b21159d-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:38.696772726+02:00 level=debug msg="Considering removing iptables rule" obj="-P PREROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.69679392+02:00 level=debug msg="Considering removing iptables rule" obj="-P INPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.696800277+02:00 level=debug msg="Considering removing iptables rule" obj="-P OUTPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.69680864+02:00 level=debug msg="Considering removing iptables rule" obj="-P POSTROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.696812692+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_POST" subsys=iptables | |
| 2019-06-21T12:51:38.696816229+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_POST_KUBE" subsys=iptables | |
| 2019-06-21T12:51:38.696820106+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-MARK-DROP" subsys=iptables | |
| 2019-06-21T12:51:38.696830358+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-MARK-MASQ" subsys=iptables | |
| 2019-06-21T12:51:38.696843178+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-NODEPORTS" subsys=iptables | |
| 2019-06-21T12:51:38.696848439+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-POSTROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.696853296+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SEP-NBTIU7CHH6PHTWMN" subsys=iptables | |
| 2019-06-21T12:51:38.696857613+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SEP-QUSWRCCKNVSH5RXX" subsys=iptables | |
| 2019-06-21T12:51:38.696861562+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SEP-STNUPOZHCIZ36F3E" subsys=iptables | |
| 2019-06-21T12:51:38.696865497+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SEP-U5G242U5WSOPK3PA" subsys=iptables | |
| 2019-06-21T12:51:38.696869483+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.696873624+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SVC-NPX46M4PTMTKRN6Y" subsys=iptables | |
| 2019-06-21T12:51:38.696877303+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SVC-U7CKLYLSFGCPAKKF" subsys=iptables | |
| 2019-06-21T12:51:38.69688846+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.696892066+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-POSTROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.69689443+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-PREROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.696897083+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-fip-dnat" subsys=iptables | |
| 2019-06-21T12:51:38.696900617+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-fip-snat" subsys=iptables | |
| 2019-06-21T12:51:38.696903067+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-nat-outgoing" subsys=iptables | |
| 2019-06-21T12:51:38.696905503+02:00 level=debug msg="Considering removing iptables rule" obj="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.696909793+02:00 level=debug msg="Considering removing iptables rule" obj="-A PREROUTING -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.696913619+02:00 level=debug msg="Considering removing iptables rule" obj="-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.696925099+02:00 level=debug msg="Considering removing iptables rule" obj="-A OUTPUT -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.6969339+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING -m comment --comment \"cilium-feeder: CILIUM_POST\" -j CILIUM_POST" subsys=iptables | |
| 2019-06-21T12:51:38.696939382+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D POSTROUTING -m comment --comment cilium-feeder: CILIUM_POST -j CILIUM_POST]" subsys=iptables | |
| 2019-06-21T12:51:38.697734499+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.697744197+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING -m comment --comment \"kubernetes postrouting rules\" -j KUBE-POSTROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.697748516+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING -s 10.42.0.0/16 -d 10.42.0.0/16 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.697757452+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING -s 10.42.0.0/16 ! -d 224.0.0.0/4 -j MASQUERADE" subsys=iptables | |
| 2019-06-21T12:51:38.69776203+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING ! -s 10.42.0.0/16 -d 10.42.0.0/24 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.697769928+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING ! -s 10.42.0.0/16 -d 10.42.0.0/16 -j MASQUERADE" subsys=iptables | |
| 2019-06-21T12:51:38.69777377+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING -m comment --comment \"cilium-feeder: CILIUM_POST_KUBE\" -j CILIUM_POST_KUBE" subsys=iptables | |
| 2019-06-21T12:51:38.697810133+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D POSTROUTING -m comment --comment cilium-feeder: CILIUM_POST_KUBE -j CILIUM_POST_KUBE]" subsys=iptables | |
| 2019-06-21T12:51:38.698602549+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST -s 10.42.0.0/24 ! -d 10.0.0.0/8 ! -o cilium_+ -m comment --comment \"cilium masquerade non-cluster\" -j MASQUERADE" subsys=iptables | |
| 2019-06-21T12:51:38.698620811+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST -s 10.42.0.0/24 ! -d 10.0.0.0/8 ! -o cilium_+ -m comment --comment cilium masquerade non-cluster -j MASQUERADE]" subsys=iptables | |
| 2019-06-21T12:51:38.699437931+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST ! -o cni0 -m comment --comment \"exclude non-cni0 traffic from masquerade\" -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.699495572+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST ! -o cni0 -m comment --comment exclude non-cni0 traffic from masquerade -j RETURN]" subsys=iptables | |
| 2019-06-21T12:51:38.700368373+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST -m mark --mark 0xd00/0xf00 -m comment --comment \"exclude encrypt from masquerade\" -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.700388538+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST -m mark --mark 0xd00/0xf00 -m comment --comment exclude encrypt from masquerade -j ACCEPT]" subsys=iptables | |
| 2019-06-21T12:51:38.701293596+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST -m mark --mark 0xe00/0xf00 -m comment --comment \"exclude decrypt from masquerade\" -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.701307875+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST -m mark --mark 0xe00/0xf00 -m comment --comment exclude decrypt from masquerade -j ACCEPT]" subsys=iptables | |
| 2019-06-21T12:51:38.702105504+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST ! -s 10.0.0.0/8 ! -d 10.42.0.0/24 -m comment --comment \"cilium host->cluster masquerade\" -j SNAT --to-source 10.42.0.215" subsys=iptables | |
| 2019-06-21T12:51:38.702136706+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST ! -s 10.0.0.0/8 ! -d 10.42.0.0/24 -m comment --comment cilium host->cluster masquerade -j SNAT --to-source 10.42.0.215]" subsys=iptables | |
| 2019-06-21T12:51:38.702892203+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST -s 127.0.0.1/32 -m comment --comment \"cilium host->cluster from 127.0.0.1 masquerade\" -j SNAT --to-source 10.42.0.215" subsys=iptables | |
| 2019-06-21T12:51:38.702911801+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST -s 127.0.0.1/32 -m comment --comment cilium host->cluster from 127.0.0.1 masquerade -j SNAT --to-source 10.42.0.215]" subsys=iptables | |
| 2019-06-21T12:51:38.703669745+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST -s 10.42.0.0/24 -m comment --comment \"cilium hostport loopback masquerade\" -j SNAT --to-source 10.42.0.215" subsys=iptables | |
| 2019-06-21T12:51:38.703690465+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST -s 10.42.0.0/24 -m comment --comment cilium hostport loopback masquerade -j SNAT --to-source 10.42.0.215]" subsys=iptables | |
| 2019-06-21T12:51:38.704464047+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST_KUBE -d 10.42.0.0/24 -o cni0 -m comment --comment \"cilium: host->service(cluster ip)->local-endpoint on cni0 src address fix\" -j SNAT --to-source 10.42.0.215" subsys=iptables | |
| 2019-06-21T12:51:38.704494437+02:00 level=debug msg="Removing iptables rule" obj="[-t nat -D CILIUM_POST_KUBE -d 10.42.0.0/24 -o cni0 -m comment --comment cilium: host->service(cluster ip)->local-endpoint on cni0 src address fix -j SNAT --to-source 10.42.0.215]" subsys=iptables | |
| 2019-06-21T12:51:38.70523446+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-MARK-DROP -j MARK --set-xmark 0x8000/0x8000" subsys=iptables | |
| 2019-06-21T12:51:38.705241002+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000" subsys=iptables | |
| 2019-06-21T12:51:38.70524654+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-POSTROUTING -m comment --comment \"kubernetes service traffic requiring SNAT\" -m mark --mark 0x4000/0x4000 -j MASQUERADE" subsys=iptables | |
| 2019-06-21T12:51:38.705256272+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-NBTIU7CHH6PHTWMN -s 10.42.3.5/32 -j KUBE-MARK-MASQ" subsys=iptables | |
| 2019-06-21T12:51:38.705264389+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-NBTIU7CHH6PHTWMN -p tcp -m tcp -j DNAT --to-destination 10.42.3.5:2379" subsys=iptables | |
| 2019-06-21T12:51:38.705269675+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-QUSWRCCKNVSH5RXX -s 127.0.0.1/32 -j KUBE-MARK-MASQ" subsys=iptables | |
| 2019-06-21T12:51:38.70527421+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-QUSWRCCKNVSH5RXX -p tcp -m tcp -j DNAT --to-destination 127.0.0.1:6445" subsys=iptables | |
| 2019-06-21T12:51:38.705289012+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-STNUPOZHCIZ36F3E -s 10.42.1.4/32 -j KUBE-MARK-MASQ" subsys=iptables | |
| 2019-06-21T12:51:38.705298329+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-STNUPOZHCIZ36F3E -p tcp -m tcp -j DNAT --to-destination 10.42.1.4:2379" subsys=iptables | |
| 2019-06-21T12:51:38.705306351+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-U5G242U5WSOPK3PA -s 10.42.2.3/32 -j KUBE-MARK-MASQ" subsys=iptables | |
| 2019-06-21T12:51:38.705310955+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SEP-U5G242U5WSOPK3PA -p tcp -m tcp -j DNAT --to-destination 10.42.2.3:2379" subsys=iptables | |
| 2019-06-21T12:51:38.705323303+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES ! -s 10.42.0.0/16 -d 10.43.229.165/32 -p tcp -m comment --comment \"kube-system/cilium-etcd-client:client cluster IP\" -m tcp --dport 2379 -j KUBE-MARK-MASQ" subsys=iptables | |
| 2019-06-21T12:51:38.705339185+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES -d 10.43.229.165/32 -p tcp -m comment --comment \"kube-system/cilium-etcd-client:client cluster IP\" -m tcp --dport 2379 -j KUBE-SVC-U7CKLYLSFGCPAKKF" subsys=iptables | |
| 2019-06-21T12:51:38.705344566+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES ! -s 10.42.0.0/16 -d 10.43.0.1/32 -p tcp -m comment --comment \"default/kubernetes:https cluster IP\" -m tcp --dport 443 -j KUBE-MARK-MASQ" subsys=iptables | |
| 2019-06-21T12:51:38.705360782+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES -d 10.43.0.1/32 -p tcp -m comment --comment \"default/kubernetes:https cluster IP\" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y" subsys=iptables | |
| 2019-06-21T12:51:38.705374455+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES -m comment --comment \"kubernetes service nodeports; NOTE: this must be the last rule in this chain\" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS" subsys=iptables | |
| 2019-06-21T12:51:38.705379731+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SVC-NPX46M4PTMTKRN6Y -j KUBE-SEP-QUSWRCCKNVSH5RXX" subsys=iptables | |
| 2019-06-21T12:51:38.705388126+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SVC-U7CKLYLSFGCPAKKF -m statistic --mode random --probability 0.33332999982 -j KUBE-SEP-STNUPOZHCIZ36F3E" subsys=iptables | |
| 2019-06-21T12:51:38.70539473+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SVC-U7CKLYLSFGCPAKKF -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-U5G242U5WSOPK3PA" subsys=iptables | |
| 2019-06-21T12:51:38.705409913+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SVC-U7CKLYLSFGCPAKKF -j KUBE-SEP-NBTIU7CHH6PHTWMN" subsys=iptables | |
| 2019-06-21T12:51:38.705418461+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:GBTAv2p5CwevEyJm\" -j cali-fip-dnat" subsys=iptables | |
| 2019-06-21T12:51:38.705426653+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-POSTROUTING -m comment --comment \"cali:Z-c7XtVd2Bq7s_hA\" -j cali-fip-snat" subsys=iptables | |
| 2019-06-21T12:51:38.705433366+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-POSTROUTING -m comment --comment \"cali:nYKhEzDlr11Jccal\" -j cali-nat-outgoing" subsys=iptables | |
| 2019-06-21T12:51:38.705465817+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-POSTROUTING -o tunl0 -m comment --comment \"cali:SXWvdsbh4Mw7wOln\" -m addrtype ! --src-type LOCAL --limit-iface-out -m addrtype --src-type LOCAL -j MASQUERADE" subsys=iptables | |
| 2019-06-21T12:51:38.705470661+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:r6XmIziWUJsdOK6Z\" -j cali-fip-dnat" subsys=iptables | |
| 2019-06-21T12:51:38.70547322+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-nat-outgoing -m comment --comment \"cali:flqWnvo8yq4ULQLa\" -m set --match-set cali40masq-ipam-pools src -m set ! --match-set cali40all-ipam-pools dst -j MASQUERADE" subsys=iptables | |
| 2019-06-21T12:51:38.706540777+02:00 level=debug msg="Considering removing iptables rule" obj="-P PREROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.706555033+02:00 level=debug msg="Considering removing iptables rule" obj="-P INPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.706559042+02:00 level=debug msg="Considering removing iptables rule" obj="-P FORWARD ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.706569135+02:00 level=debug msg="Considering removing iptables rule" obj="-P OUTPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.706584249+02:00 level=debug msg="Considering removing iptables rule" obj="-P POSTROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.706603837+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_POST_mangle" subsys=iptables | |
| 2019-06-21T12:51:38.706621419+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_PRE_mangle" subsys=iptables | |
| 2019-06-21T12:51:38.706629976+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-PREROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.706634633+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-failsafe-in" subsys=iptables | |
| 2019-06-21T12:51:38.706638226+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-from-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.70664451+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pi-_PfqSzIS1AirpjL0oXbg" subsys=iptables | |
| 2019-06-21T12:51:38.706648751+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-po-_PfqSzIS1AirpjL0oXbg" subsys=iptables | |
| 2019-06-21T12:51:38.706654979+02:00 level=debug msg="Considering removing iptables rule" obj="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.706659482+02:00 level=debug msg="Considering removing iptables rule" obj="-A POSTROUTING -m comment --comment \"cilium-feeder: CILIUM_POST_mangle\" -j CILIUM_POST_mangle" subsys=iptables | |
| 2019-06-21T12:51:38.70666679+02:00 level=debug msg="Removing iptables rule" obj="[-t mangle -D POSTROUTING -m comment --comment cilium-feeder: CILIUM_POST_mangle -j CILIUM_POST_mangle]" subsys=iptables | |
| 2019-06-21T12:51:38.707392192+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_POST_mangle -o cni0 -m mark ! --mark 0xe00/0xf00 -m mark ! --mark 0xd00/0xf00 -m comment --comment \"cilium: clear masq bit for pkts to cni0\" -j MARK --set-xmark 0x0/0x4000" subsys=iptables | |
| 2019-06-21T12:51:38.707412394+02:00 level=debug msg="Removing iptables rule" obj="[-t mangle -D CILIUM_POST_mangle -o cni0 -m mark ! --mark 0xe00/0xf00 -m mark ! --mark 0xd00/0xf00 -m comment --comment cilium: clear masq bit for pkts to cni0 -j MARK --set-xmark 0x0/0x4000]" subsys=iptables | |
| 2019-06-21T12:51:38.708196944+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:6BJqBjBC7crtA-7-\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.70821159+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:KX7AGNd6rMcDUai6\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708224598+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:wNH7KsA3ILKJBsY9\" -j cali-from-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.708229945+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:Cg96MgVuoPm7UMRo\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708233621+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:wWFQM43tJU7wwnFZ\" -m multiport --dports 22 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708241751+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p udp -m comment --comment \"cali:LwNV--R8MjeUYacw\" -m multiport --dports 68 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708245818+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:QOO5NUOqOSS1_Iw0\" -m multiport --dports 179 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708263439+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:cwZWoBSwVeIAZmVN\" -m multiport --dports 2379 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708267939+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:7FbNXT91kugE_upR\" -m multiport --dports 2380 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708276489+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:ywE9WYUBEpve70WT\" -m multiport --dports 6666 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708280635+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:l-WQSVBf_lygPR0J\" -m multiport --dports 6667 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.708288425+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pi-_PfqSzIS1AirpjL0oXbg -m comment --comment \"cali:xFmyFVvb0qJ7zrob\" -m set --match-set cali40s:AMAB7BNa5u3MmIiwZrblkWt src -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.708296581+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pi-_PfqSzIS1AirpjL0oXbg -m comment --comment \"cali:TBrqTkT9MAsWmwuV\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.709399603+02:00 level=debug msg="Considering removing iptables rule" obj="-P PREROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.709416359+02:00 level=debug msg="Considering removing iptables rule" obj="-P OUTPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.709421325+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_OUTPUT_raw" subsys=iptables | |
| 2019-06-21T12:51:38.709425279+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_PRE_raw" subsys=iptables | |
| 2019-06-21T12:51:38.70943459+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.709439021+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-PREROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.709442929+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-failsafe-in" subsys=iptables | |
| 2019-06-21T12:51:38.709446553+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-failsafe-out" subsys=iptables | |
| 2019-06-21T12:51:38.709454208+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-from-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.709465115+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pi-_PfqSzIS1AirpjL0oXbg" subsys=iptables | |
| 2019-06-21T12:51:38.709468975+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-po-_PfqSzIS1AirpjL0oXbg" subsys=iptables | |
| 2019-06-21T12:51:38.709472361+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-to-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.709484266+02:00 level=debug msg="Considering removing iptables rule" obj="-A PREROUTING -m comment --comment \"cilium-feeder: CILIUM_PRE_raw\" -j CILIUM_PRE_raw" subsys=iptables | |
| 2019-06-21T12:51:38.709494347+02:00 level=debug msg="Removing iptables rule" obj="[-t raw -D PREROUTING -m comment --comment cilium-feeder: CILIUM_PRE_raw -j CILIUM_PRE_raw]" subsys=iptables | |
| 2019-06-21T12:51:38.71022672+02:00 level=debug msg="Considering removing iptables rule" obj="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" subsys=iptables | |
| 2019-06-21T12:51:38.710235292+02:00 level=debug msg="Considering removing iptables rule" obj="-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.710240208+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_PRE_raw -m mark --mark 0xd00/0xf00 -m comment --comment \"cilium-xfrm-notrack:\" -j NOTRACK" subsys=iptables | |
| 2019-06-21T12:51:38.710261136+02:00 level=debug msg="Removing iptables rule" obj="[-t raw -D CILIUM_PRE_raw -m mark --mark 0xd00/0xf00 -m comment --comment cilium-xfrm-notrack: -j NOTRACK]" subsys=iptables | |
| 2019-06-21T12:51:38.711038927+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_PRE_raw -m mark --mark 0xe00/0xf00 -m comment --comment \"cilium-xfrm-notrack:\" -j NOTRACK" subsys=iptables | |
| 2019-06-21T12:51:38.711052787+02:00 level=debug msg="Removing iptables rule" obj="[-t raw -D CILIUM_PRE_raw -m mark --mark 0xe00/0xf00 -m comment --comment cilium-xfrm-notrack: -j NOTRACK]" subsys=iptables | |
| 2019-06-21T12:51:38.711866685+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:njdnLwYeGqBJyMxW\" -j MARK --set-xmark 0x0/0xf0000" subsys=iptables | |
| 2019-06-21T12:51:38.711879208+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:rz86uTUcEZAfFsh7\" -j cali-to-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.711884256+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:pN0F5zD0b8yf9W1Z\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711893395+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:XFX5xbM8B9qR10JG\" -j MARK --set-xmark 0x0/0xf0000" subsys=iptables | |
| 2019-06-21T12:51:38.711898086+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -i cali+ -m comment --comment \"cali:EWMPb0zVROM-woQp\" -j MARK --set-xmark 0x40000/0x40000" subsys=iptables | |
| 2019-06-21T12:51:38.71190291+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:Ek_rsNpunyDlK3sH\" -m mark --mark 0x0/0x40000 -j cali-from-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.711907254+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-PREROUTING -m comment --comment \"cali:nM-DzTFPwQbQvtRj\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711911317+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:wWFQM43tJU7wwnFZ\" -m multiport --dports 22 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.7119206+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p udp -m comment --comment \"cali:LwNV--R8MjeUYacw\" -m multiport --dports 68 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711928254+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:QOO5NUOqOSS1_Iw0\" -m multiport --dports 179 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711932495+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:cwZWoBSwVeIAZmVN\" -m multiport --dports 2379 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711936209+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:7FbNXT91kugE_upR\" -m multiport --dports 2380 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711943197+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:ywE9WYUBEpve70WT\" -m multiport --dports 6666 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711945924+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:l-WQSVBf_lygPR0J\" -m multiport --dports 6667 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711951116+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p udp -m comment --comment \"cali:k9jPBsnz833bYNtN\" -m multiport --sports 53 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711958661+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p udp -m comment --comment \"cali:h6bDkHXiHjFdQFvi\" -m multiport --sports 67 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71196106+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:ZxyjJQRmKuKXDHob\" -m multiport --sports 179 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711967223+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:simwjHaxrPmaHOEO\" -m multiport --sports 2379 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711969603+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:hvk-Re2iN6cMDIO-\" -m multiport --sports 2380 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.711975961+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:czejYL2nB2RLhrhj\" -m multiport --sports 6666 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.7119805+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:Poam7ro8PATnz_3V\" -m multiport --sports 6667 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712002117+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p udp -m comment --comment \"cali:82hjfji-wChFhAqL\" -m multiport --dports 53 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712013314+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p udp -m comment --comment \"cali:TNM3RfEjbNr72hgH\" -m multiport --dports 67 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712016441+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:ycxKitIl4u3dK0HR\" -m multiport --dports 179 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712024285+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:hxjEWyxdkXXkdvut\" -m multiport --dports 2379 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712028965+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:cA_GLtruuvG88KiO\" -m multiport --dports 2380 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71204367+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:Sb1hkLYFMrKS6r01\" -m multiport --dports 6666 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712048491+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:UwLSebGONJUG4yG-\" -m multiport --dports 6667 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712064387+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:r23CvAiW0ROtMTyk\" -m multiport --sports 22 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712076962+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p udp -m comment --comment \"cali:D9jU-Lf4ZjKkTtdD\" -m multiport --sports 68 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712088989+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:5zDpOHUwMrjzLzZl\" -m multiport --sports 179 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71209996+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:Jq44rynzFYoWGr4q\" -m multiport --sports 2379 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712122122+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:OiGBCpR5GP0HW_y6\" -m multiport --sports 2380 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71213679+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:iwXWeITN771fTZ2N\" -m multiport --sports 6666 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712154318+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:Ot9A94gzys2kTtDj\" -m multiport --sports 6667 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.712159537+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pi-_PfqSzIS1AirpjL0oXbg -m comment --comment \"cali:xFmyFVvb0qJ7zrob\" -m set --match-set cali40s:AMAB7BNa5u3MmIiwZrblkWt src -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.712167054+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pi-_PfqSzIS1AirpjL0oXbg -m comment --comment \"cali:TBrqTkT9MAsWmwuV\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.713645058+02:00 level=debug msg="Considering removing iptables rule" obj="-P INPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.713660103+02:00 level=debug msg="Considering removing iptables rule" obj="-P FORWARD ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.713664644+02:00 level=debug msg="Considering removing iptables rule" obj="-P OUTPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.713668511+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_FORWARD" subsys=iptables | |
| 2019-06-21T12:51:38.713678712+02:00 level=debug msg="Considering removing iptables rule" obj="-N CILIUM_OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.713683043+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-EXTERNAL-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.71368759+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-FIREWALL" subsys=iptables | |
| 2019-06-21T12:51:38.713691404+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-FORWARD" subsys=iptables | |
| 2019-06-21T12:51:38.713695194+02:00 level=debug msg="Considering removing iptables rule" obj="-N KUBE-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.713698839+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-FORWARD" subsys=iptables | |
| 2019-06-21T12:51:38.7137094+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-INPUT" subsys=iptables | |
| 2019-06-21T12:51:38.713713837+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.713717727+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-failsafe-in" subsys=iptables | |
| 2019-06-21T12:51:38.713722647+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-failsafe-out" subsys=iptables | |
| 2019-06-21T12:51:38.713732349+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-from-hep-forward" subsys=iptables | |
| 2019-06-21T12:51:38.713736568+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-from-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.713740465+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-from-wl-dispatch" subsys=iptables | |
| 2019-06-21T12:51:38.713748775+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-fw-cali14c6f7f5d24" subsys=iptables | |
| 2019-06-21T12:51:38.713752968+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-fw-cali50b76bb64d0" subsys=iptables | |
| 2019-06-21T12:51:38.713762001+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-fw-cali66eacc7cfaa" subsys=iptables | |
| 2019-06-21T12:51:38.713766118+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-fw-calib20fb1cc4bf" subsys=iptables | |
| 2019-06-21T12:51:38.713786424+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pi-_PfqSzIS1AirpjL0oXbg" subsys=iptables | |
| 2019-06-21T12:51:38.713794419+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-po-_PfqSzIS1AirpjL0oXbg" subsys=iptables | |
| 2019-06-21T12:51:38.713803175+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pri-_PTRGc0U-L5Kz7V6ERW" subsys=iptables | |
| 2019-06-21T12:51:38.713810045+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pri-_QdhVZ8TmSXm2EvYAKH" subsys=iptables | |
| 2019-06-21T12:51:38.713819136+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pri-_rfesb_Nv6QzsjWHy5M" subsys=iptables | |
| 2019-06-21T12:51:38.713825265+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pri-_u2Tn2rSoAPffvE7JO6" subsys=iptables | |
| 2019-06-21T12:51:38.713832896+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pri-kns.kube-system" subsys=iptables | |
| 2019-06-21T12:51:38.713840422+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pri-kns.metallb-system" subsys=iptables | |
| 2019-06-21T12:51:38.71384786+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pri-kns.policy-demo" subsys=iptables | |
| 2019-06-21T12:51:38.713857691+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pro-_PTRGc0U-L5Kz7V6ERW" subsys=iptables | |
| 2019-06-21T12:51:38.713883327+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pro-_QdhVZ8TmSXm2EvYAKH" subsys=iptables | |
| 2019-06-21T12:51:38.713888057+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pro-_rfesb_Nv6QzsjWHy5M" subsys=iptables | |
| 2019-06-21T12:51:38.713890438+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pro-_u2Tn2rSoAPffvE7JO6" subsys=iptables | |
| 2019-06-21T12:51:38.713892666+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pro-kns.kube-system" subsys=iptables | |
| 2019-06-21T12:51:38.713897449+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pro-kns.metallb-system" subsys=iptables | |
| 2019-06-21T12:51:38.713899777+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-pro-kns.policy-demo" subsys=iptables | |
| 2019-06-21T12:51:38.713903947+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-to-hep-forward" subsys=iptables | |
| 2019-06-21T12:51:38.713914458+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-to-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.713918913+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-to-wl-dispatch" subsys=iptables | |
| 2019-06-21T12:51:38.713932929+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-tw-cali14c6f7f5d24" subsys=iptables | |
| 2019-06-21T12:51:38.713947939+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-tw-cali50b76bb64d0" subsys=iptables | |
| 2019-06-21T12:51:38.713953857+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-tw-cali66eacc7cfaa" subsys=iptables | |
| 2019-06-21T12:51:38.713962499+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-tw-calib20fb1cc4bf" subsys=iptables | |
| 2019-06-21T12:51:38.713969719+02:00 level=debug msg="Considering removing iptables rule" obj="-N cali-wl-to-host" subsys=iptables | |
| 2019-06-21T12:51:38.713976372+02:00 level=debug msg="Considering removing iptables rule" obj="-A INPUT -m comment --comment \"cali:Cz_u1IQiXIMmKD4c\" -j cali-INPUT" subsys=iptables | |
| 2019-06-21T12:51:38.713983499+02:00 level=debug msg="Considering removing iptables rule" obj="-A INPUT -m conntrack --ctstate NEW -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.713991423+02:00 level=debug msg="Considering removing iptables rule" obj="-A INPUT -m conntrack --ctstate NEW -m comment --comment \"kubernetes externally-visible service portals\" -j KUBE-EXTERNAL-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.714007853+02:00 level=debug msg="Considering removing iptables rule" obj="-A INPUT -j KUBE-FIREWALL" subsys=iptables | |
| 2019-06-21T12:51:38.714011781+02:00 level=debug msg="Considering removing iptables rule" obj="-A FORWARD -m comment --comment \"cilium-feeder: CILIUM_FORWARD\" -j CILIUM_FORWARD" subsys=iptables | |
| 2019-06-21T12:51:38.714039957+02:00 level=debug msg="Removing iptables rule" obj="[-t filter -D FORWARD -m comment --comment cilium-feeder: CILIUM_FORWARD -j CILIUM_FORWARD]" subsys=iptables | |
| 2019-06-21T12:51:38.715045626+02:00 level=debug msg="Considering removing iptables rule" obj="-A FORWARD -m comment --comment \"cali:wUHhoiAYhphO9Mso\" -j cali-FORWARD" subsys=iptables | |
| 2019-06-21T12:51:38.715054607+02:00 level=debug msg="Considering removing iptables rule" obj="-A FORWARD -m comment --comment \"kubernetes forwarding rules\" -j KUBE-FORWARD" subsys=iptables | |
| 2019-06-21T12:51:38.715066494+02:00 level=debug msg="Considering removing iptables rule" obj="-A FORWARD -m conntrack --ctstate NEW -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.715071362+02:00 level=debug msg="Considering removing iptables rule" obj="-A FORWARD -s 10.42.0.0/16 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.715075657+02:00 level=debug msg="Considering removing iptables rule" obj="-A FORWARD -d 10.42.0.0/16 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.715082103+02:00 level=debug msg="Considering removing iptables rule" obj="-A OUTPUT -m comment --comment \"cilium-feeder: CILIUM_OUTPUT\" -j CILIUM_OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.715104428+02:00 level=debug msg="Removing iptables rule" obj="[-t filter -D OUTPUT -m comment --comment cilium-feeder: CILIUM_OUTPUT -j CILIUM_OUTPUT]" subsys=iptables | |
| 2019-06-21T12:51:38.716058365+02:00 level=debug msg="Considering removing iptables rule" obj="-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT" subsys=iptables | |
| 2019-06-21T12:51:38.716071778+02:00 level=debug msg="Considering removing iptables rule" obj="-A OUTPUT -m conntrack --ctstate NEW -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES" subsys=iptables | |
| 2019-06-21T12:51:38.716075379+02:00 level=debug msg="Considering removing iptables rule" obj="-A OUTPUT -j KUBE-FIREWALL" subsys=iptables | |
| 2019-06-21T12:51:38.716088417+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_FORWARD -o cni0 -m comment --comment \"cilium: any->cluster on cni0 forward accept\" -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.716092707+02:00 level=debug msg="Removing iptables rule" obj="[-t filter -D CILIUM_FORWARD -o cni0 -m comment --comment cilium: any->cluster on cni0 forward accept -j ACCEPT]" subsys=iptables | |
| 2019-06-21T12:51:38.717032018+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_FORWARD -s 10.42.0.0/24 -m comment --comment \"cilium: cluster->any forward accept\" -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.717050939+02:00 level=debug msg="Removing iptables rule" obj="[-t filter -D CILIUM_FORWARD -s 10.42.0.0/24 -m comment --comment cilium: cluster->any forward accept -j ACCEPT]" subsys=iptables | |
| 2019-06-21T12:51:38.71794642+02:00 level=debug msg="Considering removing iptables rule" obj="-A CILIUM_OUTPUT -m mark ! --mark 0xe00/0xf00 -m mark ! --mark 0xd00/0xf00 -m mark ! --mark 0xa00/0xe00 -m comment --comment \"cilium: host->any mark as from host\" -j MARK --set-xmark 0xc00/0xf00" subsys=iptables | |
| 2019-06-21T12:51:38.7179796+02:00 level=debug msg="Removing iptables rule" obj="[-t filter -D CILIUM_OUTPUT -m mark ! --mark 0xe00/0xf00 -m mark ! --mark 0xd00/0xf00 -m mark ! --mark 0xa00/0xe00 -m comment --comment cilium: host->any mark as from host -j MARK --set-xmark 0xc00/0xf00]" subsys=iptables | |
| 2019-06-21T12:51:38.718942335+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-FIREWALL -m comment --comment \"kubernetes firewall for dropping marked packets\" -m mark --mark 0x8000/0x8000 -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.718953959+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-FORWARD -m comment --comment \"kubernetes forwarding rules\" -m mark --mark 0x4000/0x4000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.718958327+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-FORWARD -s 10.42.0.0/16 -m comment --comment \"kubernetes forwarding conntrack pod source rule\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71897149+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-FORWARD -d 10.42.0.0/16 -m comment --comment \"kubernetes forwarding conntrack pod destination rule\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.718976351+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES -d 10.43.0.10/32 -p udp -m comment --comment \"kube-system/kube-dns:dns has no endpoints\" -m udp --dport 53 -j REJECT --reject-with icmp-port-unreachable" subsys=iptables | |
| 2019-06-21T12:51:38.71898093+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES -d 10.43.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp has no endpoints\" -m tcp --dport 53 -j REJECT --reject-with icmp-port-unreachable" subsys=iptables | |
| 2019-06-21T12:51:38.718984737+02:00 level=debug msg="Considering removing iptables rule" obj="-A KUBE-SERVICES -d 10.43.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:metrics has no endpoints\" -m tcp --dport 9153 -j REJECT --reject-with icmp-port-unreachable" subsys=iptables | |
| 2019-06-21T12:51:38.718992779+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-FORWARD -m comment --comment \"cali:vjrMJCRpqwy5oRoX\" -j MARK --set-xmark 0x0/0xe0000" subsys=iptables | |
| 2019-06-21T12:51:38.719003611+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-FORWARD -m comment --comment \"cali:A_sPAO0mcxbT9mOV\" -m mark --mark 0x0/0x10000 -j cali-from-hep-forward" subsys=iptables | |
| 2019-06-21T12:51:38.719007961+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-FORWARD -i cali+ -m comment --comment \"cali:8ZoYfO5HKXWbB3pk\" -j cali-from-wl-dispatch" subsys=iptables | |
| 2019-06-21T12:51:38.719014483+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-FORWARD -o cali+ -m comment --comment \"cali:jdEuaPBe14V2hutn\" -j cali-to-wl-dispatch" subsys=iptables | |
| 2019-06-21T12:51:38.719018295+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-FORWARD -m comment --comment \"cali:12bc6HljsMKsmfr-\" -j cali-to-hep-forward" subsys=iptables | |
| 2019-06-21T12:51:38.719022916+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-FORWARD -m comment --comment \"cali:MH9kMp5aNICL-Olv\" -m comment --comment \"Policy explicitly accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.7190298+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-INPUT -p 4 -m comment --comment \"cali:PajejrV4aFdkZojI\" -m comment --comment \"Allow IPIP packets from Calico hosts\" -m set --match-set cali40all-hosts-net src -m addrtype --dst-type LOCAL -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719035106+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-INPUT -p 4 -m comment --comment \"cali:_wjq-Yrma8Ly1Svo\" -m comment --comment \"Drop IPIP packets from non-Calico hosts\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.719046243+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-INPUT -i cali+ -m comment --comment \"cali:8TZGxLWh_Eiz66wc\" -g cali-wl-to-host" subsys=iptables | |
| 2019-06-21T12:51:38.719057201+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-INPUT -m comment --comment \"cali:6McIeIDvPdL6PE1T\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719061768+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-INPUT -m comment --comment \"cali:YGPbrUms7NId8xVa\" -j MARK --set-xmark 0x0/0xf0000" subsys=iptables | |
| 2019-06-21T12:51:38.719069465+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-INPUT -m comment --comment \"cali:2gmY7Bg2i0i84Wk_\" -j cali-from-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.719073341+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-INPUT -m comment --comment \"cali:q-Vz2ZT9iGE331LL\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719077681+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:Mq1_rAdXXH3YkrzW\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719083599+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -o cali+ -m comment --comment \"cali:69FkRTJDvD5Vu6Vl\" -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.719087249+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -p 4 -m comment --comment \"cali:AnEsmO6bDZbQntWW\" -m comment --comment \"Allow IPIP packets to other Calico hosts\" -m set --match-set cali40all-hosts-net dst -m addrtype --src-type LOCAL -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719090846+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:9e9Uf3GU5tX--Lxy\" -j MARK --set-xmark 0x0/0xf0000" subsys=iptables | |
| 2019-06-21T12:51:38.719098488+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:OB2pzPrvQn6PC89t\" -j cali-to-host-endpoint" subsys=iptables | |
| 2019-06-21T12:51:38.719102689+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-OUTPUT -m comment --comment \"cali:tvSSMDBWrme3CUqM\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719109088+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:wWFQM43tJU7wwnFZ\" -m multiport --dports 22 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719113488+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p udp -m comment --comment \"cali:LwNV--R8MjeUYacw\" -m multiport --dports 68 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71912296+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:QOO5NUOqOSS1_Iw0\" -m multiport --dports 179 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719127294+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:cwZWoBSwVeIAZmVN\" -m multiport --dports 2379 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71913125+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:7FbNXT91kugE_upR\" -m multiport --dports 2380 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719134895+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:ywE9WYUBEpve70WT\" -m multiport --dports 6666 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719138972+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-in -p tcp -m comment --comment \"cali:l-WQSVBf_lygPR0J\" -m multiport --dports 6667 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719146043+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p udp -m comment --comment \"cali:82hjfji-wChFhAqL\" -m multiport --dports 53 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719153351+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p udp -m comment --comment \"cali:TNM3RfEjbNr72hgH\" -m multiport --dports 67 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.7191568+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:ycxKitIl4u3dK0HR\" -m multiport --dports 179 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719160224+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:hxjEWyxdkXXkdvut\" -m multiport --dports 2379 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719167518+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:cA_GLtruuvG88KiO\" -m multiport --dports 2380 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719171655+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:Sb1hkLYFMrKS6r01\" -m multiport --dports 6666 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719178966+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-failsafe-out -p tcp -m comment --comment \"cali:UwLSebGONJUG4yG-\" -m multiport --dports 6667 -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71918312+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-from-wl-dispatch -i cali14c6f7f5d24 -m comment --comment \"cali:na6vZ-49oP403EF6\" -g cali-fw-cali14c6f7f5d24" subsys=iptables | |
| 2019-06-21T12:51:38.719185568+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-from-wl-dispatch -i cali50b76bb64d0 -m comment --comment \"cali:u2VW36ibGn8Fsy11\" -g cali-fw-cali50b76bb64d0" subsys=iptables | |
| 2019-06-21T12:51:38.719187814+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-from-wl-dispatch -i cali66eacc7cfaa -m comment --comment \"cali:pXY6GvFSRpQHywBx\" -g cali-fw-cali66eacc7cfaa" subsys=iptables | |
| 2019-06-21T12:51:38.719536876+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-from-wl-dispatch -i calib20fb1cc4bf -m comment --comment \"cali:178PoK9iNqWukPEp\" -g cali-fw-calib20fb1cc4bf" subsys=iptables | |
| 2019-06-21T12:51:38.719548533+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-from-wl-dispatch -m comment --comment \"cali:Q5BWS9V6YwOslL-p\" -m comment --comment \"Unknown interface\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.719560217+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:mwuWv47WV355fplJ\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.71958427+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:uoFYP8PvGTl2cuE_\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.719619867+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:7BYIqz6uVOngsOYw\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.719646383+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:LH2Irjzrzmuc1cWw\" -j cali-pro-kns.policy-demo" subsys=iptables | |
| 2019-06-21T12:51:38.719668961+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:DOcbiuCN7_4ndmp_\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.719683403+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:voeaHLb1Nx-HdwWF\" -j cali-pro-_QdhVZ8TmSXm2EvYAKH" subsys=iptables | |
| 2019-06-21T12:51:38.719695139+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:s0Bgw4cKp9dIhz-d\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.719717724+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali14c6f7f5d24 -m comment --comment \"cali:qmapvKYTZc3cbt4e\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.719726712+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:JvH5GT9IxuyMZxNz\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719752793+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:ztsujjrSsnl8L-Id\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.719771027+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:c9WoeAE-SeGp2tzU\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.719803717+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:vKc3axmBPVpb5n4e\" -j cali-pro-kns.metallb-system" subsys=iptables | |
| 2019-06-21T12:51:38.719810797+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:BHi4fjQ8y7_P8r1w\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.71983564+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:esjSGmD7Jbhj6I5F\" -j cali-pro-_rfesb_Nv6QzsjWHy5M" subsys=iptables | |
| 2019-06-21T12:51:38.719845288+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:WDOPgABR2EeDYQsW\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.719856722+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali50b76bb64d0 -m comment --comment \"cali:8cdkvWl1L60_SgB_\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.719877987+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:EA0fRfbWO3zPceXz\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.719886364+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:8Xf31D2bSQetYWxh\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.71989716+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:YwbkqcTQvBHTWq41\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.719906354+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:mWAAGFb4JJIy57_G\" -j cali-pro-kns.kube-system" subsys=iptables | |
| 2019-06-21T12:51:38.719921193+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:QDgpX6yNzmmlM3e4\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.719944805+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:7IQco9HwujJ5LGc0\" -j cali-pro-_u2Tn2rSoAPffvE7JO6" subsys=iptables | |
| 2019-06-21T12:51:38.719953851+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:DzBnz7BstwQwz0wT\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.719962492+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-cali66eacc7cfaa -m comment --comment \"cali:ZmQNNywz9TfTR4J0\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.719977774+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:b_PwTFc4zEClauYx\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.72000415+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:xyEp1TQd-Lt__TLc\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720014076+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:z84AgzUOoQcVJAI0\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720020671+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:b5w43DAV_rkq9dl8\" -j cali-pro-kns.kube-system" subsys=iptables | |
| 2019-06-21T12:51:38.720052376+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:9rRvOFJpef-7HSd6\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720068925+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:pLXCXhhOvynB6uTM\" -j cali-pro-_PTRGc0U-L5Kz7V6ERW" subsys=iptables | |
| 2019-06-21T12:51:38.720093635+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:a0Y8j4bA85hCGmyu\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720098808+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-fw-calib20fb1cc4bf -m comment --comment \"cali:dzhMRy1NP-a0DYHx\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720105224+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pi-_PfqSzIS1AirpjL0oXbg -m comment --comment \"cali:xFmyFVvb0qJ7zrob\" -m set --match-set cali40s:AMAB7BNa5u3MmIiwZrblkWt src -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720112721+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pi-_PfqSzIS1AirpjL0oXbg -m comment --comment \"cali:TBrqTkT9MAsWmwuV\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720142499+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pri-kns.kube-system -m comment --comment \"cali:zoH5gU6U55FKZxEo\" -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720150305+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pri-kns.kube-system -m comment --comment \"cali:bcGRIJcyOS9dgBiB\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720157803+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pri-kns.metallb-system -m comment --comment \"cali:VY7bEc0s87Rz2RVW\" -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720167795+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pri-kns.metallb-system -m comment --comment \"cali:VK8fbRHXbge2yaKF\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720176375+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pri-kns.policy-demo -m comment --comment \"cali:L8A8AETQLbeCA5Pr\" -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720198414+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pri-kns.policy-demo -m comment --comment \"cali:bIbcXhxauHfrsZFr\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720206865+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pro-kns.kube-system -m comment --comment \"cali:-50oJuMfLVO3LkBk\" -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720214863+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pro-kns.kube-system -m comment --comment \"cali:ztVPKv1UYejNzm1g\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720337373+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pro-kns.metallb-system -m comment --comment \"cali:ifACvx0V9WlLsDp1\" -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720357824+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pro-kns.metallb-system -m comment --comment \"cali:6rbJBL1Zy2dfSRJy\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720362134+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pro-kns.policy-demo -m comment --comment \"cali:Z0t6gV8-gJTcslLS\" -j MARK --set-xmark 0x10000/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720369184+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-pro-kns.policy-demo -m comment --comment \"cali:WthpnccY9ON0b1XJ\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720388496+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-to-wl-dispatch -o cali14c6f7f5d24 -m comment --comment \"cali:8-6I-Xk5VfN6tg72\" -g cali-tw-cali14c6f7f5d24" subsys=iptables | |
| 2019-06-21T12:51:38.720398984+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-to-wl-dispatch -o cali50b76bb64d0 -m comment --comment \"cali:-2ltga8r664dVwaP\" -g cali-tw-cali50b76bb64d0" subsys=iptables | |
| 2019-06-21T12:51:38.720422053+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-to-wl-dispatch -o cali66eacc7cfaa -m comment --comment \"cali:1V_swq2purhaRbDE\" -g cali-tw-cali66eacc7cfaa" subsys=iptables | |
| 2019-06-21T12:51:38.720432849+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-to-wl-dispatch -o calib20fb1cc4bf -m comment --comment \"cali:jf8-dK8h1WAJvKhk\" -g cali-tw-calib20fb1cc4bf" subsys=iptables | |
| 2019-06-21T12:51:38.720440068+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-to-wl-dispatch -m comment --comment \"cali:MfLVhEO7Nz9JAEDT\" -m comment --comment \"Unknown interface\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720459553+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:1fsPcYGMeepFAZ3d\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.720470901+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:mnFnAksLrpjJZplr\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720478857+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:sOyDSLvxVik2uFRM\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720503208+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:Bn9vVg6UlBV3mToi\" -m comment --comment \"Start of policies\" -j MARK --set-xmark 0x0/0x20000" subsys=iptables | |
| 2019-06-21T12:51:38.720510565+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:Su0UNkZjtuGhxSyK\" -m mark --mark 0x0/0x20000 -j cali-pi-_PfqSzIS1AirpjL0oXbg" subsys=iptables | |
| 2019-06-21T12:51:38.72052108+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:Qja_Vhw1VImmBeGS\" -m comment --comment \"Return if policy accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720541699+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:3h_ewQyaVQl-2GxH\" -m comment --comment \"Drop if no policies passed packet\" -m mark --mark 0x0/0x20000 -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720549841+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:REfjYLCeEWr21RCw\" -j cali-pri-kns.policy-demo" subsys=iptables | |
| 2019-06-21T12:51:38.720571391+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:03Obn-7BnfTzIyeO\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.72058019+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:NFEC-gCxGwWrftEa\" -j cali-pri-_QdhVZ8TmSXm2EvYAKH" subsys=iptables | |
| 2019-06-21T12:51:38.720588789+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:xsDoRMQlIcpXNK1t\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.72060749+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali14c6f7f5d24 -m comment --comment \"cali:Mh6xpP1O2cZo7tX6\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720616077+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:i70TPpaHrNP6GdGl\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.720624319+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:jClavXYd0QTqvoLk\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720643935+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:6-KxV3cD8CMOF7kP\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.720673312+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:b-rKrGiyEQolXU8M\" -j cali-pri-kns.metallb-system" subsys=iptables | |
| 2019-06-21T12:51:38.720700318+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:YLad8n26YQy1sc1N\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720705278+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:Q78hj75MJM4SO-Zi\" -j cali-pri-_rfesb_Nv6QzsjWHy5M" subsys=iptables | |
| 2019-06-21T12:51:38.7207125+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:zgN28GQmVLje30mi\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720722161+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali50b76bb64d0 -m comment --comment \"cali:FGI30uS6bDTLn9g5\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720743069+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:0dn6ufQsB9RfSKOS\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.720755184+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:C_LwfSzuENDrDim9\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720765438+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:6mzk3WtYFeg0f6t1\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.72077313+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:46JnUD_0Xl35x4kc\" -j cali-pri-kns.kube-system" subsys=iptables | |
| 2019-06-21T12:51:38.720797164+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:OwQkb4HCRutfN5Ow\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720805561+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:5vxPvO2-b7ozoQC4\" -j cali-pri-_u2Tn2rSoAPffvE7JO6" subsys=iptables | |
| 2019-06-21T12:51:38.720822631+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:SWGI2ZEdiqVdm1Hw\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720833417+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-cali66eacc7cfaa -m comment --comment \"cali:p5RoPZazSA1g3GIh\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720855428+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:2hQQKnmGx_CsCDUn\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.720859182+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:ICDzNxz8gnT4EEUG\" -m conntrack --ctstate INVALID -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.720866352+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:YTR4dCJyAWA0tL2X\" -j MARK --set-xmark 0x0/0x10000" subsys=iptables | |
| 2019-06-21T12:51:38.72088863+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:7Sjzx7Ph70cqkhkR\" -j cali-pri-kns.kube-system" subsys=iptables | |
| 2019-06-21T12:51:38.720906957+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:fQSUB9CjGrJCZgYC\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.720915843+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:VcWonrj-aJzyu_iv\" -j cali-pri-_PTRGc0U-L5Kz7V6ERW" subsys=iptables | |
| 2019-06-21T12:51:38.720941484+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:aBDCtwKrVUMdqvZh\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" subsys=iptables | |
| 2019-06-21T12:51:38.721060053+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-tw-calib20fb1cc4bf -m comment --comment \"cali:u1xJSHm7NRrHbe8N\" -m comment --comment \"Drop if no profiles matched\" -j DROP" subsys=iptables | |
| 2019-06-21T12:51:38.721068754+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-wl-to-host -m comment --comment \"cali:Ee9Sbo10IpVujdIY\" -j cali-from-wl-dispatch" subsys=iptables | |
| 2019-06-21T12:51:38.72108443+02:00 level=debug msg="Considering removing iptables rule" obj="-A cali-wl-to-host -m comment --comment \"cali:nSZbcOoG1xPONxb8\" -m comment --comment \"Configured DefaultEndpointToHostAction\" -j ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.722074675+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P PREROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.72208178+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P INPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.72212043+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P OUTPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.722149995+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P POSTROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.724523401+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P PREROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.724538785+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P INPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.724542873+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P FORWARD ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.724546546+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P OUTPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.72455066+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P POSTROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.725073936+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P PREROUTING ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.725079866+02:00 level=debug msg="Considering removing ip6tables rule" obj="-P OUTPUT ACCEPT" subsys=iptables | |
| 2019-06-21T12:51:38.752105193+02:00 level=info msg="Setting sysctl net.core.bpf_jit_enable=1" subsys=daemon | |
| 2019-06-21T12:51:38.752125221+02:00 level=info msg="Setting sysctl net.ipv4.conf.all.rp_filter=0" subsys=daemon | |
| 2019-06-21T12:51:38.752128346+02:00 level=info msg="Setting sysctl net.ipv6.conf.all.disable_ipv6=0" subsys=daemon | |
| 2019-06-21T12:51:38.752208041+02:00 level=info msg="Starting IP identity watcher" subsys=ipcache | |
| 2019-06-21T12:51:38.752343193+02:00 level=debug msg="Starting new controller" name=dns-garbage-collector-job subsys=controller uuid=8bd06371-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:38.752359441+02:00 level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/xds.sock" subsys=envoy-manager | |
| 2019-06-21T12:51:38.752389103+02:00 level=debug msg="DNS Proxy port is configured to 0. A random port will be assigned by the OS." subsys=fqdn/dnsproxy | |
| 2019-06-21T12:51:38.752469019+02:00 level=debug msg="DNS Proxy bound to address" address="[::]:46231" subsys=fqdn/dnsproxy | |
| 2019-06-21T12:51:38.752485416+02:00 level=info msg="Validating configured node address ranges" subsys=daemon | |
| 2019-06-21T12:51:38.752499649+02:00 level=info msg="Starting connection tracking garbage collector" subsys=daemon | |
| 2019-06-21T12:51:38.752568212+02:00 level=debug msg="Skipping CT garbage collection" error="Unable to get object /sys/fs/bpf/tc/globals/cilium_ct4_global: no such file or directory" file-path=/sys/fs/bpf/tc/globals/cilium_ct4_global subsys=endpoint-manager | |
| 2019-06-21T12:51:38.752598132+02:00 level=debug msg="Skipping CT garbage collection" error="Unable to get object /sys/fs/bpf/tc/globals/cilium_ct_any4_global: no such file or directory" file-path=/sys/fs/bpf/tc/globals/cilium_ct_any4_global subsys=endpoint-manager | |
| 2019-06-21T12:51:38.752604115+02:00 level=info msg="Initial scan of connection tracking completed" subsys=endpoint-manager | |
| 2019-06-21T12:51:38.752607805+02:00 level=info msg="Launching node monitor daemon" subsys=daemon | |
| 2019-06-21T12:51:38.752611954+02:00 level=info msg="Enabling k8s event listener" subsys=daemon | |
| 2019-06-21T12:51:38.752627111+02:00 level=debug msg="Controller func execution time: 1.596µs" name=dns-garbage-collector-job subsys=controller uuid=8bd06371-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:38.775556125+02:00 level=debug msg="Checking if CRD (CustomResourceDefinition) needs update..." name=CiliumNetworkPolicy/v2 subsys=k8s | |
| 2019-06-21T12:51:38.77558228+02:00 level=debug msg="Waiting for CRD (CustomResourceDefinition) to be available..." name=CiliumNetworkPolicy/v2 subsys=k8s | |
| 2019-06-21T12:51:38.795026272+02:00 level=info msg="Serving cilium node monitor v1.0 API at unix:///var/run/cilium/monitor.sock" subsys=cilium-node-monitor | |
| 2019-06-21T12:51:38.795067073+02:00 level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=cilium-node-monitor | |
| 2019-06-21T12:51:38.795202732+02:00 level=info msg="Beginning to read cilium agent events" subsys=cilium-node-monitor | |
| 2019-06-21T12:51:39.316373264+02:00 level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=CiliumNetworkPolicy/v2 subsys=k8s | |
| 2019-06-21T12:51:39.317529021+02:00 level=debug msg="Checking if CRD (CustomResourceDefinition) needs update..." name=v2.CiliumEndpoint subsys=k8s | |
| 2019-06-21T12:51:39.317544327+02:00 level=info msg="Updating CRD (CustomResourceDefinition)..." name=v2.CiliumEndpoint subsys=k8s | |
| 2019-06-21T12:51:39.822117004+02:00 level=debug msg="CRD validation is different, updating it..." name=v2.CiliumEndpoint subsys=k8s | |
| 2019-06-21T12:51:39.828098328+02:00 level=debug msg="Waiting for CRD (CustomResourceDefinition) to be available..." name=v2.CiliumEndpoint subsys=k8s | |
| 2019-06-21T12:51:40.332767883+02:00 level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=v2.CiliumEndpoint subsys=k8s | |
| 2019-06-21T12:51:40.333189889+02:00 level=debug msg="waiting for cache to synchronize" kubernetesResource="networking.k8s.io/v1::NetworkPolicy" subsys=daemon | |
| 2019-06-21T12:51:40.335775079+02:00 level=debug msg="waiting for cache to synchronize" kubernetesResource="core/v1::Service" subsys=daemon | |
| 2019-06-21T12:51:40.336275783+02:00 level=debug msg="waiting for cache to synchronize" kubernetesResource="core/v1::Pods" subsys=daemon | |
| 2019-06-21T12:51:40.338281246+02:00 level=debug msg="waiting for cache to synchronize" kubernetesResource="core/v1::Endpoint" subsys=daemon | |
| 2019-06-21T12:51:40.338424759+02:00 level=debug msg="waiting for cache to synchronize" kubernetesResource="cilium/v2::CiliumNetworkPolicy" subsys=daemon | |
| 2019-06-21T12:51:40.339274072+02:00 level=info msg="Waiting until all pre-existing resources related to policy have been received" subsys=daemon | |
| 2019-06-21T12:51:40.339502318+02:00 level=debug msg="waiting for cache to synchronize" kubernetesResource="core/v1::Node" subsys=daemon | |
| 2019-06-21T12:51:40.392443285+02:00 level=debug msg="Kubernetes service definition changed" action=service-updated endpoints="127.0.0.1:6445/TCP" k8sNamespace=default k8sSvcName=kubernetes service="frontend:10.43.0.1/ports=[https]/selector=map[]" subsys=daemon | |
| 2019-06-21T12:51:40.395879937+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.1 {TCP 443}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.395915358+02:00 level=debug msg="Resolving service" l3n4Addr="{IP:10.43.0.1 L4Addr:{Protocol:TCP Port:443}}" subsys=service | |
| 2019-06-21T12:51:40.39603205+02:00 level=debug msg="Got feAddr ID for service" k8sNamespace=default k8sSvcName=kubernetes obj="frontend:10.43.0.1/ports=[https]/selector=map[]" serviceID=1 serviceName=https subsys=daemon | |
| 2019-06-21T12:51:40.396049805+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.1 {TCP 443}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.396062555+02:00 level=debug msg="adding service" obj="[{ID:0 L3n4Addr:{IP:127.0.0.1 L4Addr:{Protocol:TCP Port:6445}} Weight:0}]" serviceID="10.43.0.1:443" subsys=daemon | |
| 2019-06-21T12:51:40.396157202+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service" lbBackend="[{0 {127.0.0.1 {TCP 6445}} 0}]" lbFrontend="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.396226617+02:00 level=debug msg="converting L3n4Addr to ServiceKey" l3n4AddrID="{{10.43.0.1 {TCP 443}} 1}" subsys=map-lb | |
| 2019-06-21T12:51:40.396280493+02:00 level=debug msg="associating frontend -> backend" lbBackend="127.0.0.1:6445 (1)" lbFrontend="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.396356391+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to Service Key and Value" lbBackend="[{0 {127.0.0.1 {TCP 6445}} 0}]" lbFrontend="10.43.0.1:443" obj="[127.0.0.1:6445 (1)]" serviceID="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.396370935+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service v2" lbBackend="[{0 {127.0.0.1 {TCP 6445}} 0}]" lbFrontend="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.39638072+02:00 level=debug msg="converting L3n4Addr to ServiceKeyV2" l3n4AddrID="{{10.43.0.1 {TCP 443}} 1}" subsys=map-lb | |
| 2019-06-21T12:51:40.396390764+02:00 level=debug msg="associating frontend -> backend" lbBackend="0 (1)" lbFrontend="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.396483722+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to ServiceKeyV2, ServiceValueV2 and Backend" lbBackend="[{0 {127.0.0.1 {TCP 6445}} 0}]" lbFrontend="10.43.0.1:443" obj="[0 (1)]" serviceID="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.396512255+02:00 level=debug msg="adding service to BPF maps" serviceName="10.43.0.1:443" subsys=daemon | |
| 2019-06-21T12:51:40.396525457+02:00 level=debug msg="Updating BPF representation of service" backends="map[127.0.0.1:6445:127.0.0.1:6445 (1)]" frontend="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.39661398+02:00 level=debug msg="Upserting service entry" slaveSlot=1 subsys=map-lb svcKey="10.43.0.1:443" svcVal="1 (1)" | |
| 2019-06-21T12:51:40.396627147+02:00 level=debug msg="Upserted service entry" slaveSlot=1 subsys=map-lb svcKey="10.43.0.1:443" svcVal="1 (1)" | |
| 2019-06-21T12:51:40.396728878+02:00 level=debug msg="adding revNat to lbmap" bpfMapKey=1 bpfMapValue="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.396808477+02:00 level=debug msg="Upserting service entry" slaveSlot=0 subsys=map-lb svcKey="10.43.0.1:443" svcVal="0 (1)" | |
| 2019-06-21T12:51:40.396878218+02:00 level=debug msg="adding service to RevNATMap" serviceName="10.43.0.1:443" subsys=daemon | |
| 2019-06-21T12:51:40.396890668+02:00 level=debug msg="adding service to loadbalancer" serviceName="10.43.0.1:443" sha=62cae22a05be582849906ba75ccbd9c98666952768a7a874af1cc30d7cc22809 subsys=loadbalancer | |
| 2019-06-21T12:51:40.397033978+02:00 level=debug msg="Kubernetes service definition changed" action=service-updated endpoints="10.42.1.4:2379/TCP,10.42.1.4:2380/TCP,10.42.2.3:2379/TCP,10.42.2.3:2380/TCP,10.42.3.5:2379/TCP,10.42.3.5:2380/TCP" k8sNamespace=kube-system k8sSvcName=cilium-etcd service="frontend:<nil>/ports=[client peer]/selector=map[app:etcd etcd_cluster:cilium-etcd]" subsys=daemon | |
| 2019-06-21T12:51:40.397065001+02:00 level=debug msg="Kubernetes service definition changed" action=service-updated endpoints="10.42.1.4:2379/TCP,10.42.2.3:2379/TCP,10.42.3.5:2379/TCP" k8sNamespace=kube-system k8sSvcName=cilium-etcd-client service="frontend:10.43.229.165/ports=[client]/selector=map[app:etcd etcd_cluster:cilium-etcd]" subsys=daemon | |
| 2019-06-21T12:51:40.397246057+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.397291491+02:00 level=debug msg="Resolving service" l3n4Addr="{IP:10.43.229.165 L4Addr:{Protocol:TCP Port:2379}}" subsys=service | |
| 2019-06-21T12:51:40.397471493+02:00 level=debug msg="Got feAddr ID for service" k8sNamespace=kube-system k8sSvcName=cilium-etcd-client obj="frontend:10.43.229.165/ports=[client]/selector=map[app:etcd etcd_cluster:cilium-etcd]" serviceID=5 serviceName=client subsys=daemon | |
| 2019-06-21T12:51:40.397500142+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.397708973+02:00 level=debug msg="adding service" obj="[{ID:0 L3n4Addr:{IP:10.42.3.5 L4Addr:{Protocol:TCP Port:2379}} Weight:0} {ID:0 L3n4Addr:{IP:10.42.1.4 L4Addr:{Protocol:TCP Port:2379}} Weight:0} {ID:0 L3n4Addr:{IP:10.42.2.3 L4Addr:{Protocol:TCP Port:2379}} Weight:0}]" serviceID="10.43.229.165:2379" subsys=daemon | |
| 2019-06-21T12:51:40.397843347+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service" lbBackend="[{0 {10.42.3.5 {TCP 2379}} 0} {0 {10.42.1.4 {TCP 2379}} 0} {0 {10.42.2.3 {TCP 2379}} 0}]" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.397972856+02:00 level=debug msg="converting L3n4Addr to ServiceKey" l3n4AddrID="{{10.43.229.165 {TCP 2379}} 5}" subsys=map-lb | |
| 2019-06-21T12:51:40.398178509+02:00 level=debug msg="associating frontend -> backend" lbBackend="10.42.3.5:2379 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.398379237+02:00 level=debug msg="associating frontend -> backend" lbBackend="10.42.1.4:2379 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.398572936+02:00 level=debug msg="associating frontend -> backend" lbBackend="10.42.2.3:2379 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.398813741+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to Service Key and Value" lbBackend="[{0 {10.42.3.5 {TCP 2379}} 0} {0 {10.42.1.4 {TCP 2379}} 0} {0 {10.42.2.3 {TCP 2379}} 0}]" lbFrontend="10.43.229.165:2379" obj="[10.42.3.5:2379 (5) 10.42.1.4:2379 (5) 10.42.2.3:2379 (5)]" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.399038614+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service v2" lbBackend="[{0 {10.42.3.5 {TCP 2379}} 0} {0 {10.42.1.4 {TCP 2379}} 0} {0 {10.42.2.3 {TCP 2379}} 0}]" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.399240845+02:00 level=debug msg="converting L3n4Addr to ServiceKeyV2" l3n4AddrID="{{10.43.229.165 {TCP 2379}} 5}" subsys=map-lb | |
| 2019-06-21T12:51:40.399463844+02:00 level=debug msg="associating frontend -> backend" lbBackend="0 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.399849829+02:00 level=debug msg="associating frontend -> backend" lbBackend="0 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.400040561+02:00 level=debug msg="associating frontend -> backend" lbBackend="0 (5)" lbFrontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.40028818+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to ServiceKeyV2, ServiceValueV2 and Backend" lbBackend="[{0 {10.42.3.5 {TCP 2379}} 0} {0 {10.42.1.4 {TCP 2379}} 0} {0 {10.42.2.3 {TCP 2379}} 0}]" lbFrontend="10.43.229.165:2379" obj="[0 (5) 0 (5) 0 (5)]" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.400475574+02:00 level=debug msg="adding service to BPF maps" serviceName="10.43.229.165:2379" subsys=daemon | |
| 2019-06-21T12:51:40.400747066+02:00 level=debug msg="Updating BPF representation of service" backends="map[10.42.1.4:2379:10.42.1.4:2379 (5) 10.42.2.3:2379:10.42.2.3:2379 (5) 10.42.3.5:2379:10.42.3.5:2379 (5)]" frontend="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.400980348+02:00 level=debug msg="Upserting service entry" slaveSlot=1 subsys=map-lb svcKey="10.43.229.165:2379" svcVal="12 (5)" | |
| 2019-06-21T12:51:40.401193948+02:00 level=debug msg="Upserted service entry" slaveSlot=1 subsys=map-lb svcKey="10.43.229.165:2379" svcVal="12 (5)" | |
| 2019-06-21T12:51:40.401562222+02:00 level=debug msg="Upserting service entry" slaveSlot=2 subsys=map-lb svcKey="10.43.229.165:2379" svcVal="16 (5)" | |
| 2019-06-21T12:51:40.401836463+02:00 level=debug msg="Upserted service entry" slaveSlot=2 subsys=map-lb svcKey="10.43.229.165:2379" svcVal="16 (5)" | |
| 2019-06-21T12:51:40.402045161+02:00 level=debug msg="Upserting service entry" slaveSlot=3 subsys=map-lb svcKey="10.43.229.165:2379" svcVal="15 (5)" | |
| 2019-06-21T12:51:40.402292711+02:00 level=debug msg="Upserted service entry" slaveSlot=3 subsys=map-lb svcKey="10.43.229.165:2379" svcVal="15 (5)" | |
| 2019-06-21T12:51:40.402461423+02:00 level=debug msg="adding revNat to lbmap" bpfMapKey=5 bpfMapValue="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.402596036+02:00 level=debug msg="Upserting service entry" slaveSlot=0 subsys=map-lb svcKey="10.43.229.165:2379" svcVal="0 (5)" | |
| 2019-06-21T12:51:40.402924362+02:00 level=debug msg="adding service to RevNATMap" serviceName="10.43.229.165:2379" subsys=daemon | |
| 2019-06-21T12:51:40.402947643+02:00 level=debug msg="adding service to loadbalancer" serviceName="10.43.229.165:2379" sha=96661c8f9cd0fd4be4c29f907c7820392b451d504d9ca14f6531f06ec22425fe subsys=loadbalancer | |
| 2019-06-21T12:51:40.402971648+02:00 level=debug msg="Kubernetes service definition changed" action=service-updated endpoints= k8sNamespace=kube-system k8sSvcName=kube-dns service="frontend:10.43.0.10/ports=[metrics dns dns-tcp]/selector=map[k8s-app:kube-dns]" subsys=daemon | |
| 2019-06-21T12:51:40.40307471+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.10 {UDP 53}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.403140216+02:00 level=debug msg="Resolving service" l3n4Addr="{IP:10.43.0.10 L4Addr:{Protocol:UDP Port:53}}" subsys=service | |
| 2019-06-21T12:51:40.403239356+02:00 level=debug msg="Got feAddr ID for service" k8sNamespace=kube-system k8sSvcName=kube-dns obj="frontend:10.43.0.10/ports=[dns dns-tcp metrics]/selector=map[k8s-app:kube-dns]" serviceID=2 serviceName=dns subsys=daemon | |
| 2019-06-21T12:51:40.403330737+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.10 {UDP 53}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.403347724+02:00 level=debug msg="adding service" obj="[]" serviceID="10.43.0.10:53" subsys=daemon | |
| 2019-06-21T12:51:40.403358676+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service" lbBackend="[]" lbFrontend="10.43.0.10:53" subsys=map-lb | |
| 2019-06-21T12:51:40.403423733+02:00 level=debug msg="converting L3n4Addr to ServiceKey" l3n4AddrID="{{10.43.0.10 {UDP 53}} 2}" subsys=map-lb | |
| 2019-06-21T12:51:40.403436492+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to Service Key and Value" lbBackend="[]" lbFrontend="10.43.0.10:53" obj="[]" serviceID="10.43.0.10:53" subsys=map-lb | |
| 2019-06-21T12:51:40.403502454+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service v2" lbBackend="[]" lbFrontend="10.43.0.10:53" subsys=map-lb | |
| 2019-06-21T12:51:40.40351512+02:00 level=debug msg="converting L3n4Addr to ServiceKeyV2" l3n4AddrID="{{10.43.0.10 {UDP 53}} 2}" subsys=map-lb | |
| 2019-06-21T12:51:40.403524662+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to ServiceKeyV2, ServiceValueV2 and Backend" lbBackend="[]" lbFrontend="10.43.0.10:53" obj="[]" serviceID="10.43.0.10:53" subsys=map-lb | |
| 2019-06-21T12:51:40.403533952+02:00 level=debug msg="adding service to BPF maps" serviceName="10.43.0.10:53" subsys=daemon | |
| 2019-06-21T12:51:40.403594421+02:00 level=debug msg="Updating BPF representation of service" backends="map[]" frontend="10.43.0.10:53" subsys=map-lb | |
| 2019-06-21T12:51:40.403605222+02:00 level=debug msg="adding revNat to lbmap" bpfMapKey=2 bpfMapValue="10.43.0.10:53" subsys=map-lb | |
| 2019-06-21T12:51:40.403670728+02:00 level=debug msg="Upserting service entry" slaveSlot=0 subsys=map-lb svcKey="10.43.0.10:53" svcVal="0 (2)" | |
| 2019-06-21T12:51:40.403683405+02:00 level=debug msg="adding service to RevNATMap" serviceName="10.43.0.10:53" subsys=daemon | |
| 2019-06-21T12:51:40.403743632+02:00 level=debug msg="adding service to loadbalancer" serviceName="10.43.0.10:53" sha=58cdc4da55800a31e9b32e83953588a010a2415fe1ebbd70d2eabbd7e0af7388 subsys=loadbalancer | |
| 2019-06-21T12:51:40.403770465+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.10 {TCP 9153}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.403786361+02:00 level=debug msg="Resolving service" l3n4Addr="{IP:10.43.0.10 L4Addr:{Protocol:TCP Port:9153}}" subsys=service | |
| 2019-06-21T12:51:40.403847708+02:00 level=debug msg="Got feAddr ID for service" k8sNamespace=kube-system k8sSvcName=kube-dns obj="frontend:10.43.0.10/ports=[metrics dns dns-tcp]/selector=map[k8s-app:kube-dns]" serviceID=3 serviceName=metrics subsys=daemon | |
| 2019-06-21T12:51:40.4038664+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.10 {TCP 9153}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.403875973+02:00 level=debug msg="adding service" obj="[]" serviceID="10.43.0.10:9153" subsys=daemon | |
| 2019-06-21T12:51:40.403896203+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service" lbBackend="[]" lbFrontend="10.43.0.10:9153" subsys=map-lb | |
| 2019-06-21T12:51:40.403955516+02:00 level=debug msg="converting L3n4Addr to ServiceKey" l3n4AddrID="{{10.43.0.10 {TCP 9153}} 3}" subsys=map-lb | |
| 2019-06-21T12:51:40.403966813+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to Service Key and Value" lbBackend="[]" lbFrontend="10.43.0.10:9153" obj="[]" serviceID="10.43.0.10:9153" subsys=map-lb | |
| 2019-06-21T12:51:40.403975733+02:00 level=debug msg="converting Cilium load-balancer service (frontend -> backend(s)) into BPF service v2" lbBackend="[]" lbFrontend="10.43.0.10:9153" subsys=map-lb | |
| 2019-06-21T12:51:40.403984887+02:00 level=debug msg="converting L3n4Addr to ServiceKeyV2" l3n4AddrID="{{10.43.0.10 {TCP 9153}} 3}" subsys=map-lb | |
| 2019-06-21T12:51:40.404045504+02:00 level=debug msg="converted LBSVC (frontend -> backend(s)), to ServiceKeyV2, ServiceValueV2 and Backend" lbBackend="[]" lbFrontend="10.43.0.10:9153" obj="[]" serviceID="10.43.0.10:9153" subsys=map-lb | |
| 2019-06-21T12:51:40.404057933+02:00 level=debug msg="adding service to BPF maps" serviceName="10.43.0.10:9153" subsys=daemon | |
| 2019-06-21T12:51:40.404067397+02:00 level=debug msg="Updating BPF representation of service" backends="map[]" frontend="10.43.0.10:9153" subsys=map-lb | |
| 2019-06-21T12:51:40.404076824+02:00 level=debug msg="adding revNat to lbmap" bpfMapKey=3 bpfMapValue="10.43.0.10:9153" subsys=map-lb | |
| 2019-06-21T12:51:40.404142457+02:00 level=debug msg="Upserting service entry" slaveSlot=0 subsys=map-lb svcKey="10.43.0.10:9153" svcVal="0 (3)" | |
| 2019-06-21T12:51:40.40415454+02:00 level=debug msg="adding service to RevNATMap" serviceName="10.43.0.10:9153" subsys=daemon | |
| 2019-06-21T12:51:40.404164711+02:00 level=debug msg="adding service to loadbalancer" serviceName="10.43.0.10:9153" sha=e086028ed410bd5b0019eddc77fc32ec8dc6b83d91dc4a3b024c68b1f4edaf99 subsys=loadbalancer | |
| 2019-06-21T12:51:40.411642419+02:00 level=debug msg="Add NodeCiliumInternalIP: 10.42.0.215" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:40.411676877+02:00 level=debug msg="Missing io.cilium.network.ipv6-cilium-host. Annotation required when IPSec Enabled" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:40.41168788+02:00 level=debug msg="Empty IPv6 CIDR annotation in node" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:40.411698117+02:00 level=debug msg="Empty IPv6 health endpoint annotation in node" k8sNodeID=213add51-936a-11e9-a1ef-94c691ab270b nodeName=controller-0 subsys=k8s | |
| 2019-06-21T12:51:40.411714742+02:00 level=debug msg="Add NodeCiliumInternalIP: 10.42.1.217" k8sNodeID=8d944534-936b-11e9-a1ef-94c691ab270b nodeName=worker-0 subsys=k8s | |
| 2019-06-21T12:51:40.411725548+02:00 level=debug msg="Missing io.cilium.network.ipv6-cilium-host. Annotation required when IPSec Enabled" k8sNodeID=8d944534-936b-11e9-a1ef-94c691ab270b nodeName=worker-0 subsys=k8s | |
| 2019-06-21T12:51:40.411754917+02:00 level=debug msg="Empty IPv6 CIDR annotation in node" k8sNodeID=8d944534-936b-11e9-a1ef-94c691ab270b nodeName=worker-0 subsys=k8s | |
| 2019-06-21T12:51:40.411764536+02:00 level=debug msg="Empty IPv6 health endpoint annotation in node" k8sNodeID=8d944534-936b-11e9-a1ef-94c691ab270b nodeName=worker-0 subsys=k8s | |
| 2019-06-21T12:51:40.411773991+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{host k8s}" ipAddr=10.42.1.217 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.411783568+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.411792447+02:00 level=debug msg="resource not found" subsys=xds xdsClientNode="<nil>" xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.411801767+02:00 level=debug msg="returning 0 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.411819772+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=3 | |
| 2019-06-21T12:51:40.411828953+02:00 level=debug msg="inserting resource into cache" subsys=xds xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=3 | |
| 2019-06-21T12:51:40.411841726+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=3 | |
| 2019-06-21T12:51:40.411850769+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=host ipAddr="{10.42.1.217 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.411864436+02:00 level=debug msg="Received node update event from k8s: node.Node{Name:\"worker-0\", Cluster:\"default\", IPAddresses:[]node.Address{node.Address{Type:\"InternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x0, 0xa, 0xcb}}, node.Address{Type:\"CiliumInternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x1, 0xd9}}}, IPv4AllocCIDR:(*cidr.CIDR)(0xc0009968a8), IPv6AllocCIDR:(*cidr.CIDR)(nil), IPv4HealthIP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x1, 0xb4}, IPv6HealthIP:net.IP(nil), ClusterID:0, Source:\"k8s\", EncryptionKey:0x0}" subsys=nodemanager | |
| 2019-06-21T12:51:40.411988988+02:00 level=debug msg="Deleting tunnel map entry" allocCIDR=10.42.1.0/24 subsys=linux-datapath | |
| 2019-06-21T12:51:40.412006115+02:00 level=debug msg="Deleting tunnel map entry" prefix=10.42.1.0 subsys=map-tunnel | |
| 2019-06-21T12:51:40.412265948+02:00 level=debug msg="Add NodeCiliumInternalIP: 10.42.2.163" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:40.412284707+02:00 level=debug msg="Missing io.cilium.network.ipv6-cilium-host. Annotation required when IPSec Enabled" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:40.412304363+02:00 level=debug msg="Empty IPv6 CIDR annotation in node" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:40.412314252+02:00 level=debug msg="Empty IPv6 health endpoint annotation in node" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:40.412375698+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{host k8s}" ipAddr=10.42.2.163 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.412417446+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.412481506+02:00 level=debug msg="resource found, last modified in version 3" subsys=xds xdsClientNode="<nil>" xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.412503431+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.412519376+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=4 | |
| 2019-06-21T12:51:40.412584641+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=4 | |
| 2019-06-21T12:51:40.412598975+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=4 | |
| 2019-06-21T12:51:40.412667434+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=host ipAddr="{10.42.2.163 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.412745125+02:00 level=debug msg="Received node update event from k8s: node.Node{Name:\"worker-1\", Cluster:\"default\", IPAddresses:[]node.Address{node.Address{Type:\"InternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x0, 0xa, 0xca}}, node.Address{Type:\"CiliumInternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x2, 0xa3}}}, IPv4AllocCIDR:(*cidr.CIDR)(0xc0009968b0), IPv6AllocCIDR:(*cidr.CIDR)(nil), IPv4HealthIP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x2, 0x29}, IPv6HealthIP:net.IP(nil), ClusterID:0, Source:\"k8s\", EncryptionKey:0x0}" subsys=nodemanager | |
| 2019-06-21T12:51:40.4128116+02:00 level=debug msg="Deleting tunnel map entry" allocCIDR=10.42.2.0/24 subsys=linux-datapath | |
| 2019-06-21T12:51:40.412825843+02:00 level=debug msg="Deleting tunnel map entry" prefix=10.42.2.0 subsys=map-tunnel | |
| 2019-06-21T12:51:40.413101965+02:00 level=debug msg="Add NodeCiliumInternalIP: 10.42.3.89" k8sNodeID=cb9e3dde-936b-11e9-a1ef-94c691ab270b nodeName=worker-2 subsys=k8s | |
| 2019-06-21T12:51:40.413177288+02:00 level=debug msg="Missing io.cilium.network.ipv6-cilium-host. Annotation required when IPSec Enabled" k8sNodeID=cb9e3dde-936b-11e9-a1ef-94c691ab270b nodeName=worker-2 subsys=k8s | |
| 2019-06-21T12:51:40.41319149+02:00 level=debug msg="Empty IPv6 CIDR annotation in node" k8sNodeID=cb9e3dde-936b-11e9-a1ef-94c691ab270b nodeName=worker-2 subsys=k8s | |
| 2019-06-21T12:51:40.413258263+02:00 level=debug msg="Empty IPv6 health endpoint annotation in node" k8sNodeID=cb9e3dde-936b-11e9-a1ef-94c691ab270b nodeName=worker-2 subsys=k8s | |
| 2019-06-21T12:51:40.413271149+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{host k8s}" ipAddr=10.42.3.89 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.413342523+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.413355773+02:00 level=debug msg="resource found, last modified in version 4" subsys=xds xdsClientNode="<nil>" xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.413364909+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.413449219+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=5 | |
| 2019-06-21T12:51:40.413465775+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=5 | |
| 2019-06-21T12:51:40.413495568+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=5 | |
| 2019-06-21T12:51:40.413563521+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=host ipAddr="{10.42.3.89 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.413645958+02:00 level=debug msg="Received node update event from k8s: node.Node{Name:\"worker-2\", Cluster:\"default\", IPAddresses:[]node.Address{node.Address{Type:\"InternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x0, 0xa, 0xd5}}, node.Address{Type:\"CiliumInternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x3, 0x59}}}, IPv4AllocCIDR:(*cidr.CIDR)(0xc0009968b8), IPv6AllocCIDR:(*cidr.CIDR)(nil), IPv4HealthIP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x3, 0x36}, IPv6HealthIP:net.IP(nil), ClusterID:0, Source:\"k8s\", EncryptionKey:0x0}" subsys=nodemanager | |
| 2019-06-21T12:51:40.413662621+02:00 level=debug msg="Deleting tunnel map entry" allocCIDR=10.42.3.0/24 subsys=linux-datapath | |
| 2019-06-21T12:51:40.413727961+02:00 level=debug msg="Deleting tunnel map entry" prefix=10.42.3.0 subsys=map-tunnel | |
| 2019-06-21T12:51:40.413948868+02:00 level=debug msg="Skipped ipcache map update on pod add" error="pod is using host networking" hostIP=10.0.10.213 k8sNamespace=kube-system k8sPodName=cilium-cxk2h podIP=10.0.10.213 subsys=daemon | |
| 2019-06-21T12:51:40.414045266+02:00 level=debug msg="Skipped ipcache map update on pod add" error="pod is using host networking" hostIP=10.0.10.201 k8sNamespace=kube-system k8sPodName=cilium-drq7h podIP=10.0.10.201 subsys=daemon | |
| 2019-06-21T12:51:40.414076715+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{unmanaged k8s}" ipAddr=10.42.2.3 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.414226838+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414244495+02:00 level=debug msg="resource not found" subsys=xds xdsClientNode="<nil>" xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414259745+02:00 level=debug msg="returning 0 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414269495+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=6 | |
| 2019-06-21T12:51:40.414306957+02:00 level=debug msg="inserting resource into cache" subsys=xds xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=6 | |
| 2019-06-21T12:51:40.414318412+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=6 | |
| 2019-06-21T12:51:40.414349997+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=unmanaged ipAddr="{10.42.2.3 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.414431497+02:00 level=debug msg="Updated ipcache map entry on pod add" hostIP=10.0.10.202 k8sNamespace=kube-system k8sPodName=cilium-etcd-gtb4wlzl25 podIP=10.42.2.3 subsys=daemon | |
| 2019-06-21T12:51:40.414446948+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{unmanaged k8s}" ipAddr=10.42.1.4 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.414457757+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414495065+02:00 level=debug msg="resource found, last modified in version 6" subsys=xds xdsClientNode="<nil>" xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414506944+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414516979+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=7 | |
| 2019-06-21T12:51:40.414538333+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=7 | |
| 2019-06-21T12:51:40.414550089+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=7 | |
| 2019-06-21T12:51:40.414627246+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=unmanaged ipAddr="{10.42.1.4 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.414641965+02:00 level=debug msg="Updated ipcache map entry on pod add" hostIP=10.0.10.203 k8sNamespace=kube-system k8sPodName=cilium-etcd-h62ftsprmk podIP=10.42.1.4 subsys=daemon | |
| 2019-06-21T12:51:40.414652587+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{unmanaged k8s}" ipAddr=10.42.3.5 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.414672934+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414691952+02:00 level=debug msg="resource found, last modified in version 7" subsys=xds xdsClientNode="<nil>" xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414790498+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.414814742+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=8 | |
| 2019-06-21T12:51:40.414894575+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=8 | |
| 2019-06-21T12:51:40.414908883+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=8 | |
| 2019-06-21T12:51:40.414919299+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=unmanaged ipAddr="{10.42.3.5 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.414929089+02:00 level=debug msg="Updated ipcache map entry on pod add" hostIP=10.0.10.213 k8sNamespace=kube-system k8sPodName=cilium-etcd-lkmfwc8lww podIP=10.42.3.5 subsys=daemon | |
| 2019-06-21T12:51:40.415005197+02:00 level=debug msg="Skipped ipcache map update on pod add" error="pod is using host networking" hostIP=10.0.10.213 k8sNamespace=kube-system k8sPodName=cilium-etcd-operator-7646c97877-xprjf podIP=10.0.10.213 subsys=daemon | |
| 2019-06-21T12:51:40.415020712+02:00 level=debug msg="Skipped ipcache map update on pod add" error="pod is using host networking" hostIP=10.0.10.202 k8sNamespace=kube-system k8sPodName=cilium-fqqsh podIP=10.0.10.202 subsys=daemon | |
| 2019-06-21T12:51:40.41503101+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{unmanaged k8s}" ipAddr=10.42.0.31 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.415070862+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.41509724+02:00 level=debug msg="resource found, last modified in version 8" subsys=xds xdsClientNode="<nil>" xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.415180409+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.415310373+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=9 | |
| 2019-06-21T12:51:40.415328466+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=9 | |
| 2019-06-21T12:51:40.415427164+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=9 | |
| 2019-06-21T12:51:40.415500622+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=unmanaged ipAddr="{10.42.0.31 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.415575988+02:00 level=debug msg="Updated ipcache map entry on pod add" hostIP=10.0.10.201 k8sNamespace=kube-system k8sPodName=cilium-operator-95ddbb5fc-hh8d7 podIP=10.42.0.31 subsys=daemon | |
| 2019-06-21T12:51:40.415659255+02:00 level=debug msg="Skipped ipcache map update on pod add" error="pod is using host networking" hostIP=10.0.10.203 k8sNamespace=kube-system k8sPodName=cilium-qnpgl podIP=10.0.10.203 subsys=daemon | |
| 2019-06-21T12:51:40.415720612+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{unmanaged k8s}" ipAddr=10.42.2.21 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.415734469+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.415791362+02:00 level=debug msg="resource found, last modified in version 9" subsys=xds xdsClientNode="<nil>" xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.415805808+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.415816516+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=10 | |
| 2019-06-21T12:51:40.415874206+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=10 | |
| 2019-06-21T12:51:40.415887988+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=10 | |
| 2019-06-21T12:51:40.415898213+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=unmanaged ipAddr="{10.42.2.21 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.415969486+02:00 level=debug msg="Updated ipcache map entry on pod add" hostIP=10.0.10.202 k8sNamespace=kube-system k8sPodName=coredns-695688789-fbvrc podIP=10.42.2.21 subsys=daemon | |
| 2019-06-21T12:51:40.415992911+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{unmanaged k8s}" ipAddr=10.42.1.23 key=0 subsys=ipcache | |
| 2019-06-21T12:51:40.41602526+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.416052984+02:00 level=debug msg="resource found, last modified in version 10" subsys=xds xdsClientNode="<nil>" xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.416063852+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:40.416102706+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=11 | |
| 2019-06-21T12:51:40.416125932+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=3 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=11 | |
| 2019-06-21T12:51:40.416136203+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=11 | |
| 2019-06-21T12:51:40.416207694+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=unmanaged ipAddr="{10.42.1.23 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:40.416223059+02:00 level=debug msg="Updated ipcache map entry on pod add" hostIP=10.0.10.203 k8sNamespace=kube-system k8sPodName=etcd-operator-797978964-xthd8 podIP=10.42.1.23 subsys=daemon | |
| 2019-06-21T12:51:40.433282705+02:00 level=debug msg="cache synced" kubernetesResource="networking.k8s.io/v1::NetworkPolicy" subsys=daemon | |
| 2019-06-21T12:51:40.434688669+02:00 level=debug msg="cache synced" kubernetesResource="core/v1::Service" subsys=daemon | |
| 2019-06-21T12:51:40.438250323+02:00 level=debug msg="cache synced" kubernetesResource="core/v1::Pods" subsys=daemon | |
| 2019-06-21T12:51:40.438437751+02:00 level=debug msg="cache synced" kubernetesResource="core/v1::Endpoint" subsys=daemon | |
| 2019-06-21T12:51:40.439449228+02:00 level=info msg="Connecting to etcd server..." config=/var/lib/etcd-config/etcd.config endpoints="[https://cilium-etcd-client.kube-system.svc:2379]" subsys=kvstore | |
| 2019-06-21T12:51:40.439480293+02:00 level=debug msg="Starting new controller" name=kvstore-etcd-session-renew subsys=controller uuid=8cd1d1d1-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:40.439663905+02:00 level=debug msg="Starting watcher..." config=/var/lib/etcd-config/etcd.config endpoints="[https://cilium-etcd-client.kube-system.svc:2379]" subsys=kvstore watcher=store-cilium/state/nodes/v1-watcher | |
| 2019-06-21T12:51:40.439691061+02:00 level=debug msg="cache synced" kubernetesResource="core/v1::Node" subsys=daemon | |
| 2019-06-21T12:51:40.439777917+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.439794134+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:40.439879381+02:00 level=debug msg="Starting watcher..." config=/var/lib/etcd-config/etcd.config endpoints="[https://cilium-etcd-client.kube-system.svc:2379]" subsys=kvstore watcher=endpointIPWatcher | |
| 2019-06-21T12:51:40.439893526+02:00 level=debug msg="cache synced" kubernetesResource="cilium/v2::CiliumNetworkPolicy" subsys=daemon | |
| 2019-06-21T12:51:40.440000888+02:00 level=info msg="All pre-existing resources related to policy have been received; continuing" subsys=daemon | |
| 2019-06-21T12:51:40.440015331+02:00 level=info msg="Regenerating 0 restored endpoints" subsys=daemon | |
| 2019-06-21T12:51:40.440088657+02:00 level=debug msg="Couldn't open CT map for upgrade" error="Unable to get object /sys/fs/bpf/tc/globals/cilium_ct4_global: no such file or directory" file-path=/sys/fs/bpf/tc/globals/cilium_ct4_global subsys=map-ct | |
| 2019-06-21T12:51:40.440101805+02:00 level=debug msg="Couldn't open CT map for upgrade" error="Unable to get object /sys/fs/bpf/tc/globals/cilium_ct_any4_global: no such file or directory" file-path=/sys/fs/bpf/tc/globals/cilium_ct_any4_global subsys=map-ct | |
| 2019-06-21T12:51:40.440200518+02:00 level=debug msg="Couldn't open CT map for upgrade" error="Unable to get object /sys/fs/bpf/tc/globals/cilium_ct6_global: no such file or directory" file-path=/sys/fs/bpf/tc/globals/cilium_ct6_global subsys=map-ct | |
| 2019-06-21T12:51:40.440215409+02:00 level=debug msg="Couldn't open CT map for upgrade" error="Unable to get object /sys/fs/bpf/tc/globals/cilium_ct_any6_global: no such file or directory" file-path=/sys/fs/bpf/tc/globals/cilium_ct_any6_global subsys=map-ct | |
| 2019-06-21T12:51:40.440412396+02:00 level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 | |
| 2019-06-21T12:51:40.440580336+02:00 level=info msg="Enabling containerD event listener" subsys=workload-watcher | |
| 2019-06-21T12:51:40.440822487+02:00 level=debug msg="End of parallel mode" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf | |
| 2019-06-21T12:51:40.440962513+02:00 level=debug msg="Starting new controller" name=sync-lb-maps-with-k8s-services subsys=controller uuid=8cd1f97b-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:40.441127879+02:00 level=debug msg="dumping BPF service maps to userspace" subsys=daemon | |
| 2019-06-21T12:51:40.441589789+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.229.165:2379" bpfMapValue="15 (5)" subsys=map-lb | |
| 2019-06-21T12:51:40.441605753+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="15 (5)" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.441680681+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.44169183+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {NONE 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.441750906+02:00 level=debug msg="created new LBBackend" backend="{15 {10.42.2.3 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.441806762+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="10.42.2.3:2379, weight: 0" backendIndex=3 frontend="10.43.229.165:2379" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443178506+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.0.1:443" bpfMapValue="1 (1)" subsys=map-lb | |
| 2019-06-21T12:51:40.443197973+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="1 (1)" serviceID="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.443208127+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.443216468+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.1 {NONE 443}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443224209+02:00 level=debug msg="created new LBBackend" backend="{1 {127.0.0.1 {NONE 6445}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443231893+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="127.0.0.1:6445, weight: 0" backendIndex=1 frontend="10.43.0.1:443" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443240106+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.229.165:2379" bpfMapValue="12 (5)" subsys=map-lb | |
| 2019-06-21T12:51:40.443247532+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="12 (5)" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.443254836+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.443262558+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {NONE 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443270679+02:00 level=debug msg="created new LBBackend" backend="{12 {10.42.1.4 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443292742+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="10.42.1.4:2379, weight: 0" backendIndex=1 frontend="10.43.229.165:2379" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443323378+02:00 level=debug msg="parsing service mapping v2" bpfMapKey="10.43.229.165:2379" bpfMapValue="16 (5)" subsys=map-lb | |
| 2019-06-21T12:51:40.443335352+02:00 level=debug msg="converting ServiceKey, ServiceValue and Backend to frontend and backend v2" obj="16 (5)" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.443344435+02:00 level=debug msg="creating L3n4Addr for ServiceKeyV2" serviceID="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.443353817+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {NONE 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443373225+02:00 level=debug msg="created new LBBackend" backend="{16 {10.42.3.5 {NONE 2379}} 0}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.44338505+02:00 level=debug msg="adding frontend and backend to SVCMap" backend="10.42.3.5:2379, weight: 0" backendIndex=2 frontend="10.43.229.165:2379" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443393049+02:00 level=debug msg="parsing BPF revNAT mapping" bpfMapKey=1 bpfMapValue="10.43.0.1:443" subsys=map-lb | |
| 2019-06-21T12:51:40.443400609+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.1 {NONE 443}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443407908+02:00 level=debug msg="parsing BPF revNAT mapping" bpfMapKey=2 bpfMapValue="10.43.0.10:53" subsys=map-lb | |
| 2019-06-21T12:51:40.443416072+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.10 {NONE 53}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443423641+02:00 level=debug msg="parsing BPF revNAT mapping" bpfMapKey=3 bpfMapValue="10.43.0.10:9153" subsys=map-lb | |
| 2019-06-21T12:51:40.443435179+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.0.10 {NONE 9153}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443442931+02:00 level=debug msg="parsing BPF revNAT mapping" bpfMapKey=5 bpfMapValue="10.43.229.165:2379" subsys=map-lb | |
| 2019-06-21T12:51:40.44345032+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {NONE 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:40.443457665+02:00 level=debug msg="Found matching k8s service for service in BPF map" l3n4Addr="{IP:10.43.229.165 L4Addr:{Protocol:NONE Port:2379}}" serviceID=5 subsys=daemon | |
| 2019-06-21T12:51:40.443465071+02:00 level=debug msg="Found matching k8s service for service in BPF map" l3n4Addr="{IP:10.43.0.1 L4Addr:{Protocol:NONE Port:443}}" serviceID=1 subsys=daemon | |
| 2019-06-21T12:51:40.443472791+02:00 level=debug msg="successfully synced BPF loadbalancer and revNAT maps with in-memory Kubernetes service maps" subsys=daemon | |
| 2019-06-21T12:51:40.443480819+02:00 level=debug msg="Controller func execution time: 2.115635ms" name=sync-lb-maps-with-k8s-services subsys=controller uuid=8cd1f97b-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:40.44348848+02:00 level=debug msg="Controller run succeeded; waiting for next controller update or stop" name=sync-lb-maps-with-k8s-services subsys=controller uuid=8cd1f97b-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:40.530949931+02:00 level=info msg="Initializing Cilium API" subsys=daemon | |
| 2019-06-21T12:51:40.539291559+02:00 level=info msg="Daemon initialization completed" bootstrapTime=3.603903572s subsys=daemon | |
| 2019-06-21T12:51:40.539530272+02:00 level=info msg="Serving cilium at unix:///var/run/cilium/cilium.sock" subsys=daemon | |
| 2019-06-21T12:51:41.440029825+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:41.440082119+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:42.596810473+02:00 level=debug msg="Added local ip to endpoint map" ipAddr=10.42.0.1 subsys=daemon | |
| 2019-06-21T12:51:42.596876059+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{host agent-local}" ipAddr=10.42.0.1 key=0 subsys=ipcache | |
| 2019-06-21T12:51:42.596890572+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:42.596901891+02:00 level=debug msg="resource found, last modified in version 5" subsys=xds xdsClientNode="<nil>" xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:42.596913073+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:42.596923246+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=12 | |
| 2019-06-21T12:51:42.596930607+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=12 | |
| 2019-06-21T12:51:42.596937782+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=12 | |
| 2019-06-21T12:51:42.596944207+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=host ipAddr="{10.42.0.1 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:42.596951528+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:42.596962111+02:00 level=debug msg="Added local ip to endpoint map" ipAddr=10.0.10.201 subsys=daemon | |
| 2019-06-21T12:51:42.59697132+02:00 level=debug msg="Upserting IP into ipcache layer" identity="{host agent-local}" ipAddr=10.0.10.201 key=0 subsys=ipcache | |
| 2019-06-21T12:51:42.596979176+02:00 level=debug msg="1 resource names requested, filtering resources" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:42.596988811+02:00 level=debug msg="resource found, last modified in version 12" subsys=xds xdsClientNode="<nil>" xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:42.596998627+02:00 level=debug msg="returning 1 resources out of 1 requested" subsys=xds xdsClientNode="<nil>" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=0 | |
| 2019-06-21T12:51:42.597007375+02:00 level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=13 | |
| 2019-06-21T12:51:42.59701381+02:00 level=debug msg="updating resource in cache" subsys=xds xdsResourceName=1 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=13 | |
| 2019-06-21T12:51:42.597030922+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:42.597070029+02:00 level=debug msg="Controller func execution time: 617.339µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:42.59711661+02:00 level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsTypeURL=type.googleapis.com/cilium.NetworkPolicyHosts xdsVersionInfo=13 | |
| 2019-06-21T12:51:42.597131365+02:00 level=debug msg="Daemon notified of IP-Identity cache state change" identity=host ipAddr="{10.0.10.201 ffffffff}" modification=Upsert subsys=datapath-ipcache | |
| 2019-06-21T12:51:42.597140428+02:00 level=debug msg="Controller func execution time: 1.19908ms" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:43.119885824+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:43.119927121+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:43.439797226+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:43.439830959+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:43.512752218+02:00 level=debug msg="Add NodeCiliumInternalIP: 10.42.2.163" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512790214+02:00 level=debug msg="Missing io.cilium.network.ipv6-cilium-host. Annotation required when IPSec Enabled" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512804067+02:00 level=debug msg="Empty IPv6 CIDR annotation in node" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512813601+02:00 level=debug msg="Empty IPv6 health endpoint annotation in node" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512824037+02:00 level=debug msg="Add NodeCiliumInternalIP: 10.42.2.163" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512833622+02:00 level=debug msg="Missing io.cilium.network.ipv6-cilium-host. Annotation required when IPSec Enabled" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512843516+02:00 level=debug msg="Empty IPv6 CIDR annotation in node" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512853318+02:00 level=debug msg="Empty IPv6 health endpoint annotation in node" k8sNodeID=c5b47251-936b-11e9-a1ef-94c691ab270b nodeName=worker-1 subsys=k8s | |
| 2019-06-21T12:51:43.512862482+02:00 level=debug msg="Received node update event from k8s: node.Node{Name:\"worker-1\", Cluster:\"default\", IPAddresses:[]node.Address{node.Address{Type:\"InternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x0, 0xa, 0xca}}, node.Address{Type:\"CiliumInternalIP\", IP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x2, 0xa3}}}, IPv4AllocCIDR:(*cidr.CIDR)(0xc000010040), IPv6AllocCIDR:(*cidr.CIDR)(nil), IPv4HealthIP:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xa, 0x2a, 0x2, 0x7d}, IPv6HealthIP:net.IP(nil), ClusterID:0, Source:\"k8s\", EncryptionKey:0x0}" subsys=nodemanager | |
| 2019-06-21T12:51:44.439891673+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:44.439914179+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:45.44008495+02:00 level=debug msg="Checking status to etcd endpoint https://cilium-etcd-client.kube-system.svc:2379" config=/var/lib/etcd-config/etcd.config endpoints="[https://cilium-etcd-client.kube-system.svc:2379]" subsys=kvstore | |
| 2019-06-21T12:51:45.440407445+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:45.44043647+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:46.348174144+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:46.348286361+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:46.440156255+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:46.440244756+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:46.440489878+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:46.440520227+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:47.440252248+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:47.440302627+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:47.597717898+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:47.597780444+02:00 level=debug msg="Controller func execution time: 344.86µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:47.598028454+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:47.598065309+02:00 level=debug msg="Controller func execution time: 671.666µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:48.133333189+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:48.1334292+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:48.863077053+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:48.863165201+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:49.440264862+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:49.440312991+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:50.440278985+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:50.440322823+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:52.158833575+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:52.158915832+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:52.440782525+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:52.440995904+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:52.598572738+02:00 level=debug msg="Controller func execution time: 452.258µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:52.59864093+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:52.598944491+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:52.599000414+02:00 level=debug msg="Controller func execution time: 670.268µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:53.441040052+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:53.441105587+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:55.02064445+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:55.020715232+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:55.441250973+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:55.441373398+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:56.441306052+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:56.441366517+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:57.599732483+02:00 level=debug msg="Controller func execution time: 519.782µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:57.599816716+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:57.600217839+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:51:57.600258805+02:00 level=debug msg="Controller func execution time: 989.613µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:51:58.259228515+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:58.25926423+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:58.441353293+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:58.441413953+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:51:59.441588127+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:51:59.441641598+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:00.798006538+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:00.798092077+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:01.441673251+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:01.441736731+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:02.441818339+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:02.441890553+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:02.600610342+02:00 level=debug msg="Controller func execution time: 458.706µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:02.601003343+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:02.601337465+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:02.601374367+02:00 level=debug msg="Controller func execution time: 930.202µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:03.488154937+02:00 level=debug msg="Checking status to etcd endpoint https://cilium-etcd-client.kube-system.svc:2379" config=/var/lib/etcd-config/etcd.config endpoints="[https://cilium-etcd-client.kube-system.svc:2379]" subsys=kvstore | |
| 2019-06-21T12:52:03.48850178+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:03.488543638+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:04.331645067+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:04.331691952+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:04.441983792+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:04.442050692+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:04.488568363+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:04.488603227+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:05.441895962+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:05.441946394+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:05.930986529+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:05.931098565+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:06.947825133+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:06.947895109+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:07.442125714+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:07.442198051+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:07.601483273+02:00 level=debug msg="Controller func execution time: 370.119µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:07.602072187+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:07.602453101+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:07.602502712+02:00 level=debug msg="Controller func execution time: 781.419µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:08.44222282+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:08.442277599+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:10.358250026+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:10.358315616+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:10.442036001+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:10.442072724+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:11.44269738+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:11.442802445+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:11.73490635+02:00 level=debug msg="Processing event for Container" containerID=296353e6b2 subsys=workload-watcher | |
| 2019-06-21T12:52:12.602170773+02:00 level=debug msg="Controller func execution time: 470.591µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:12.603150462+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:12.60354514+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:12.603590836+02:00 level=debug msg="Controller func execution time: 777.633µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:12.865453703+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:12.865518059+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:13.442448953+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:13.442519716+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:14.442593901+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:14.442654923+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:15.965367252+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:15.965414714+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:16.442866423+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:16.442937592+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:17.442962806+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:17.443019734+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:17.603142348+02:00 level=debug msg="Controller func execution time: 419.811µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:17.60424163+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:17.604545402+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:17.604582966+02:00 level=debug msg="Controller func execution time: 767.975µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:19.118922895+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:19.118960375+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:19.44314045+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:19.443194471+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:20.443058551+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:20.443106962+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:20.531121505+02:00 level=debug msg="Processing event for Container" containerID=003bdcef4f subsys=workload-watcher | |
| 2019-06-21T12:52:21.535988693+02:00 level=debug msg="Checking status to etcd endpoint https://cilium-etcd-client.kube-system.svc:2379" config=/var/lib/etcd-config/etcd.config endpoints="[https://cilium-etcd-client.kube-system.svc:2379]" subsys=kvstore | |
| 2019-06-21T12:52:21.536491317+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:21.536552171+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:22.171688668+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:22.171728009+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:22.443237483+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:22.443294629+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:22.536533341+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:22.536586856+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:22.603716133+02:00 level=debug msg="Controller func execution time: 337.231µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:22.604992942+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:22.605284063+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:22.605313046+02:00 level=debug msg="Controller func execution time: 540.702µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:23.443660713+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:23.443731724+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:23.851518863+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:23.851598757+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:25.339022826+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:25.339087242+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:25.443669371+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:25.443733755+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:26.443617823+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:26.443663533+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:27.604312844+02:00 level=debug msg="Controller func execution time: 273.234µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:27.605868109+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:27.606146242+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:27.606188314+02:00 level=debug msg="Controller func execution time: 595.239µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:27.792639292+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:27.792690936+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:28.443728319+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:28.443793724+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:29.443656921+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:29.443678756+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:30.922337183+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:30.922427111+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:31.443855771+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:31.443905577+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:32.444039391+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:32.444090113+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:32.604837888+02:00 level=debug msg="Controller func execution time: 274.473µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:32.606531+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:32.606786278+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:32.606804857+02:00 level=debug msg="Controller func execution time: 482.85µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:34.261096811+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:34.26955378+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:34.443969171+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:34.443999369+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:35.444110508+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:35.444163038+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:36.868200383+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:36.868286117+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:37.444446681+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:37.444508221+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:37.59239356+02:00 level=debug msg="Performing regular background work" subsys=nodemanager syncInterval=1m36.566274746s | |
| 2019-06-21T12:52:37.605541736+02:00 level=debug msg="Controller func execution time: 303.664µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:37.607249061+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:37.607543028+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:37.607566687+02:00 level=debug msg="Controller func execution time: 555.824µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:38.444504146+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:38.44456503+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:38.75301018+02:00 level=debug msg="Controller func execution time: 4.358µs" name=dns-garbage-collector-job subsys=controller uuid=8bd06371-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:39.583694718+02:00 level=debug msg="Checking status to etcd endpoint https://cilium-etcd-client.kube-system.svc:2379" config=/var/lib/etcd-config/etcd.config endpoints="[https://cilium-etcd-client.kube-system.svc:2379]" subsys=kvstore | |
| 2019-06-21T12:52:39.583948142+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:39.583967944+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:40.050487454+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:40.050578953+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:40.444780793+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:40.444837863+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:40.584172067+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:40.584223377+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:41.445064668+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:41.445137791+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:42.473765084+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:42.473823752+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:42.605882688+02:00 level=debug msg="Controller func execution time: 244.466µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:42.608344725+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:42.608405643+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:42.608423609+02:00 level=debug msg="Controller func execution time: 586.548µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:42.95812159+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:42.958171762+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:43.445226545+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:43.445314346+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:44.445193109+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:44.445244951+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:44.573381267+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:44.573405976+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:46.203776306+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:46.203842213+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:46.444914645+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:46.444966683+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:47.445313955+02:00 level=debug msg="created new L3n4Addr" ipAddr="{10.43.229.165 {TCP 2379}}" subsys=loadbalancer | |
| 2019-06-21T12:52:47.445378+02:00 level=debug msg="custom dialer based on k8s service backend is dialing to \"10.43.229.165:2379\"" subsys=etcd | |
| 2019-06-21T12:52:47.606531167+02:00 level=debug msg="Controller func execution time: 309.334µs" name=lxcmap-bpf-host-sync subsys=controller uuid=8b1fd5e6-9412-11e9-a299-94c691ab270b | |
| 2019-06-21T12:52:47.609071401+02:00 level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:47.609106204+02:00 level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_metrics subsys=bpf | |
| 2019-06-21T12:52:47.609118309+02:00 level=debug msg="Controller func execution time: 488.035µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=8b1fd6d0-9412-11e9-a299-94c691ab270b |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment