Created
December 7, 2021 00:28
-
-
Save thomaspurchas/40361d289857b05acb3562959106aeac to your computer and use it in GitHub Desktop.
Crashlooping calico-node debug logs
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2021-12-07 00:26:09.917 [INFO][11] startup/startup.go 396: Early log level set to info | |
2021-12-07 00:26:09.917 [INFO][11] startup/utils.go 126: Using NODENAME environment for node name node3.tpurchas.gmail.com.beta.tailscale.net | |
2021-12-07 00:26:09.917 [INFO][11] startup/utils.go 138: Determined node name: node3.tpurchas.gmail.com.beta.tailscale.net | |
2021-12-07 00:26:09.917 [INFO][11] startup/startup.go 98: Starting node node3.tpurchas.gmail.com.beta.tailscale.net with version v3.21.1 | |
2021-12-07 00:26:09.918 [INFO][11] startup/startup.go 401: Checking datastore connection | |
2021-12-07 00:26:09.937 [INFO][11] startup/startup.go 425: Datastore connection verified | |
2021-12-07 00:26:09.937 [INFO][11] startup/startup.go 108: Datastore is ready | |
2021-12-07 00:26:09.953 [INFO][11] startup/startup.go 727: Using autodetected IPv4 address 100.91.105.84/32 on matching interface tailscale0 | |
2021-12-07 00:26:09.953 [INFO][11] startup/startup.go 790: No AS number configured on node resource, using global value | |
2021-12-07 00:26:09.962 [INFO][11] startup/startup.go 835: found v4=172.16.0.0/16 in the kubeadm config map | |
2021-12-07 00:26:09.962 [INFO][11] startup/startup.go 839: found v6= in the kubeadm config map | |
2021-12-07 00:26:09.965 [INFO][11] startup/startup.go 645: FELIX_IPV6SUPPORT is false through environment variable | |
2021-12-07 00:26:09.969 [INFO][11] startup/startup.go 208: Using node name: node3.tpurchas.gmail.com.beta.tailscale.net | |
2021-12-07 00:26:09.969 [INFO][11] startup/utils.go 190: Setting NetworkUnavailable to false | |
2021-12-07 00:26:10.080 [INFO][18] tunnel-ip-allocator/allocateip.go 303: Current address is still valid, do nothing currentAddr="172.16.98.192" type="vxlanTunnelAddress" | |
CALICO_NETWORKING_BACKEND is vxlan - no need to run a BGP daemon | |
Calico node started successfully | |
2021-12-07 00:26:11.254 [INFO][62] tunnel-ip-allocator/watchersyncer.go 89: Start called | |
2021-12-07 00:26:11.255 [INFO][62] tunnel-ip-allocator/watchersyncer.go 127: Sending status update Status=wait-for-ready | |
2021-12-07 00:26:11.255 [INFO][62] tunnel-ip-allocator/watchersyncer.go 147: Starting main event processing loop | |
2021-12-07 00:26:11.255 [INFO][62] tunnel-ip-allocator/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/ippools" | |
2021-12-07 00:26:11.256 [INFO][62] tunnel-ip-allocator/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/nodes/node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.260 [INFO][59] status-reporter/startup.go 396: Early log level set to info | |
2021-12-07 00:26:11.261 [INFO][60] monitor-addresses/startup.go 396: Early log level set to info | |
2021-12-07 00:26:11.267 [INFO][60] monitor-addresses/utils.go 126: Using NODENAME environment for node name node3.tpurchas.gmail.com.beta.tailscale.net | |
2021-12-07 00:26:11.267 [INFO][60] monitor-addresses/utils.go 138: Determined node name: node3.tpurchas.gmail.com.beta.tailscale.net | |
2021-12-07 00:26:11.269 [INFO][62] tunnel-ip-allocator/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/ippools" | |
2021-12-07 00:26:11.272 [INFO][62] tunnel-ip-allocator/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/nodes/node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.272 [INFO][62] tunnel-ip-allocator/watchersyncer.go 127: Sending status update Status=resync | |
2021-12-07 00:26:11.272 [INFO][62] tunnel-ip-allocator/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.272 [INFO][62] tunnel-ip-allocator/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.272 [INFO][62] tunnel-ip-allocator/watchersyncer.go 221: All watchers have sync'd data - sending data and final sync | |
2021-12-07 00:26:11.272 [INFO][62] tunnel-ip-allocator/watchersyncer.go 127: Sending status update Status=in-sync | |
2021-12-07 00:26:11.275 [INFO][59] status-reporter/watchersyncer.go 89: Start called | |
2021-12-07 00:26:11.276 [INFO][59] status-reporter/watchersyncer.go 127: Sending status update Status=wait-for-ready | |
2021-12-07 00:26:11.276 [INFO][59] status-reporter/watchersyncer.go 147: Starting main event processing loop | |
2021-12-07 00:26:11.276 [INFO][59] status-reporter/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/caliconodestatuses" | |
2021-12-07 00:26:11.286 [INFO][61] cni-config-monitor/token_watch.go 40: Watching contents for changes. directory="/var/run/secrets/kubernetes.io/serviceaccount/" | |
2021-12-07 00:26:11.288 [INFO][59] status-reporter/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/caliconodestatuses" | |
2021-12-07 00:26:11.288 [INFO][59] status-reporter/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.289 [INFO][59] status-reporter/watchersyncer.go 127: Sending status update Status=resync | |
2021-12-07 00:26:11.289 [INFO][59] status-reporter/watchersyncer.go 221: All watchers have sync'd data - sending data and final sync | |
2021-12-07 00:26:11.289 [INFO][59] status-reporter/watchersyncer.go 127: Sending status update Status=in-sync | |
2021-12-07 00:26:11.323 [INFO][63] felix/daemon.go 358: Successfully loaded configuration. GOMAXPROCS=2 builddate="2021-11-22T23:43:14+0000" config=&config.Config{UseInternalDataplaneDriver:true, DataplaneDriver:"calico-iptables-plugin", WireguardEnabled:false, WireguardListeningPort:51820, WireguardRoutingRulePriority:99, WireguardInterfaceName:"wireguard.cali", WireguardMTU:1210, WireguardHostEncryptionEnabled:false, BPFEnabled:false, BPFDisableUnprivileged:true, BPFLogLevel:"off", BPFDataIfacePattern:(*regexp.Regexp)(0xc000457d60), BPFConnectTimeLoadBalancingEnabled:true, BPFExternalServiceMode:"tunnel", BPFKubeProxyIptablesCleanupEnabled:true, BPFKubeProxyMinSyncPeriod:1000000000, BPFKubeProxyEndpointSlicesEnabled:false, BPFExtToServiceConnmark:0, BPFPSNATPorts:numorstring.Port{MinPort:0x4e20, MaxPort:0x752f, PortName:""}, DebugBPFCgroupV2:"", DebugBPFMapRepinEnabled:false, DatastoreType:"kubernetes", FelixHostname:"node3.tpurchas.gmail.com.beta.tailscale.net", EtcdAddr:"127.0.0.1:2379", EtcdScheme:"http", EtcdKeyFile:"", EtcdCertFile:"", EtcdCaFile:"", EtcdEndpoints:[]string(nil), TyphaAddr:"", TyphaK8sServiceName:"", TyphaK8sNamespace:"kube-system", TyphaReadTimeout:30000000000, TyphaWriteTimeout:10000000000, TyphaKeyFile:"", TyphaCertFile:"", TyphaCAFile:"", TyphaCN:"", TyphaURISAN:"", Ipv6Support:false, IptablesBackend:"auto", RouteRefreshInterval:90000000000, InterfaceRefreshInterval:90000000000, DeviceRouteSourceAddress:net.IP(nil), DeviceRouteProtocol:3, RemoveExternalRoutes:true, IptablesRefreshInterval:90000000000, IptablesPostWriteCheckIntervalSecs:1000000000, IptablesLockFilePath:"/run/xtables.lock", IptablesLockTimeoutSecs:0, IptablesLockProbeIntervalMillis:50000000, FeatureDetectOverride:map[string]string(nil), IpsetsRefreshInterval:10000000000, MaxIpsetSize:1048576, XDPRefreshInterval:90000000000, PolicySyncPathPrefix:"", NetlinkTimeoutSecs:10000000000, MetadataAddr:"", MetadataPort:8775, OpenstackRegion:"", InterfacePrefix:"cali", InterfaceExclude:[]*regexp.Regexp{(*regexp.Regexp)(0xc000457ea0)}, ChainInsertMode:"insert", DefaultEndpointToHostAction:"ACCEPT", IptablesFilterAllowAction:"ACCEPT", IptablesMangleAllowAction:"ACCEPT", LogPrefix:"calico-packet", LogFilePath:"", LogSeverityFile:"", LogSeverityScreen:"DEBUG", LogSeveritySys:"", VXLANEnabled:true, VXLANPort:4789, VXLANVNI:4096, VXLANMTU:1210, IPv4VXLANTunnelAddr:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xac, 0x10, 0x62, 0xc0}, VXLANTunnelMACAddr:"", IpInIpEnabled:true, IpInIpMtu:1210, IpInIpTunnelAddr:net.IP(nil), AllowVXLANPacketsFromWorkloads:false, AllowIPIPPacketsFromWorkloads:false, AWSSrcDstCheck:"DoNothing", ServiceLoopPrevention:"Drop", ReportingIntervalSecs:0, ReportingTTLSecs:90000000000, EndpointReportingEnabled:false, EndpointReportingDelaySecs:1000000000, IptablesMarkMask:0xffff0000, DisableConntrackInvalidCheck:false, HealthEnabled:true, HealthPort:9099, HealthHost:"localhost", PrometheusMetricsEnabled:false, PrometheusMetricsHost:"", PrometheusMetricsPort:9091, PrometheusGoMetricsEnabled:true, PrometheusProcessMetricsEnabled:true, PrometheusWireGuardMetricsEnabled:true, FailsafeInboundHostPorts:[]config.ProtoPort{config.ProtoPort{Net:"", Protocol:"tcp", Port:0x16}, config.ProtoPort{Net:"", Protocol:"udp", Port:0x44}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0xb3}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94c}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1561}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x192b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0a}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0b}}, FailsafeOutboundHostPorts:[]config.ProtoPort{config.ProtoPort{Net:"", Protocol:"udp", Port:0x35}, config.ProtoPort{Net:"", Protocol:"udp", Port:0x43}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0xb3}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94c}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1561}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x192b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0a}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0b}}, KubeNodePortRanges:[]numorstring.Port{numorstring.Port{MinPort:0x7530, MaxPort:0x7fff, PortName:""}}, NATPortRange:numorstring.Port{MinPort:0x0, MaxPort:0x0, PortName:""}, NATOutgoingAddress:net.IP(nil), UsageReportingEnabled:true, UsageReportingInitialDelaySecs:300000000000, UsageReportingIntervalSecs:86400000000000, ClusterGUID:"96a762c646134e919aef229e6713a6c9", ClusterType:"k8s,bgp,kubeadm,kdd", CalicoVersion:"v3.21.1", ExternalNodesCIDRList:[]string(nil), DebugMemoryProfilePath:"", DebugCPUProfilePath:"/tmp/felix-cpu-<timestamp>.pprof", DebugDisableLogDropping:false, DebugSimulateCalcGraphHangAfter:0, DebugSimulateDataplaneHangAfter:0, DebugPanicAfter:0, DebugSimulateDataRace:false, RouteSource:"CalicoIPAM", RouteTableRange:idalloc.IndexRange{Min:1, Max:250}, IptablesNATOutgoingInterfaceFilter:"", SidecarAccelerationEnabled:false, XDPEnabled:true, GenericXDPEnabled:false, Variant:"Calico", MTUIfacePattern:(*regexp.Regexp)(0xc0009f6dc0), internalOverrides:map[string]string{}, sourceToRawConfig:map[config.Source]map[string]string{0x1:map[string]string{"CalicoVersion":"v3.21.1", "ClusterGUID":"96a762c646134e919aef229e6713a6c9", "ClusterType":"k8s,bgp,kubeadm,kdd", "IpInIpEnabled":"true", "LogSeverityScreen":"Info", "ReportingIntervalSecs":"0", "VXLANEnabled":"true"}, 0x2:map[string]string{"IPv4VXLANTunnelAddr":"172.16.98.192", "LogSeverityScreen":"Debug"}, 0x3:map[string]string{"LogFilePath":"None", "LogSeverityFile":"None", "LogSeveritySys":"None", "MetadataAddr":"None"}, 0x4:map[string]string{"datastoretype":"kubernetes", "defaultendpointtohostaction":"ACCEPT", "felixhostname":"node3.tpurchas.gmail.com.beta.tailscale.net", "healthenabled":"true", "ipinipmtu":"1210", "ipv6support":"false", "vxlanmtu":"1210", "wireguardmtu":"1210"}}, rawValues:map[string]string{"CalicoVersion":"v3.21.1", "ClusterGUID":"96a762c646134e919aef229e6713a6c9", "ClusterType":"k8s,bgp,kubeadm,kdd", "DatastoreType":"kubernetes", "DefaultEndpointToHostAction":"ACCEPT", "FelixHostname":"node3.tpurchas.gmail.com.beta.tailscale.net", "HealthEnabled":"true", "IPv4VXLANTunnelAddr":"172.16.98.192", "IpInIpEnabled":"true", "IpInIpMtu":"1210", "Ipv6Support":"false", "LogFilePath":"None", "LogSeverityFile":"None", "LogSeverityScreen":"Debug", "LogSeveritySys":"None", "MetadataAddr":"None", "ReportingIntervalSecs":"0", "VXLANEnabled":"true", "VXLANMTU":"1210", "WireguardMTU":"1210"}, Err:error(nil), loadClientConfigFromEnvironment:(func() (*apiconfig.CalicoAPIConfig, error))(0x1597ec0), useNodeResourceUpdates:false} gitcommit="3e32265796166bc84373e5c1df6e81e044412182" version="v3.21.1" | |
2021-12-07 00:26:11.324 [INFO][63] felix/driver.go 69: Using internal (linux) dataplane driver. | |
2021-12-07 00:26:11.324 [INFO][63] felix/driver.go 154: Calculated iptables mark bits acceptMark=0x10000 endpointMark=0xfff00000 endpointMarkNonCali=0x0 passMark=0x20000 scratch0Mark=0x40000 scratch1Mark=0x80000 | |
2021-12-07 00:26:11.325 [DEBUG][63] felix/driver.go 165: Assigned wireguard table index: 1 | |
2021-12-07 00:26:11.325 [DEBUG][63] felix/ipset_defs.go 298: Calculated IP set name regexp. regexp="^(cali4|felix-4|cali4|felix-masq-ipam-pools|felix-all-ipam-pools)" | |
2021-12-07 00:26:11.325 [DEBUG][63] felix/ipset_defs.go 298: Calculated IP set name regexp. regexp="^(cali6|felix-6|cali6)" | |
2021-12-07 00:26:11.325 [DEBUG][63] felix/config_params.go 449: No evidence this is an OpenStack deployment; disabling OpenStack special-cases | |
2021-12-07 00:26:11.325 [DEBUG][63] felix/config_params.go 466: failed to detect a known kubernetes provider, defaulting to none clusterType="k8s,bgp,kubeadm,kdd" | |
2021-12-07 00:26:11.325 [INFO][63] felix/int_dataplane.go 307: Creating internal dataplane driver. config=intdataplane.Config{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", IPv6Enabled:false, RuleRendererOverride:rules.RuleRenderer(nil), IPIPMTU:1210, VXLANMTU:1210, VXLANPort:4789, MaxIPSetSize:1048576, IptablesBackend:"auto", IPSetsRefreshInterval:10000000000, RouteRefreshInterval:90000000000, DeviceRouteSourceAddress:net.IP(nil), DeviceRouteProtocol:3, RemoveExternalRoutes:true, IptablesRefreshInterval:90000000000, IptablesPostWriteCheckInterval:1000000000, IptablesInsertMode:"insert", IptablesLockFilePath:"/run/xtables.lock", IptablesLockTimeout:0, IptablesLockProbeInterval:50000000, XDPRefreshInterval:90000000000, Wireguard:wireguard.Config{Enabled:false, ListeningPort:51820, FirewallMark:0, RoutingRulePriority:99, RoutingTableIndex:1, InterfaceName:"wireguard.cali", MTU:1210, RouteSource:"CalicoIPAM", EncryptHostTraffic:false}, NetlinkTimeout:10000000000, RulesConfig:rules.Config{IPSetConfigV4:(*ipsets.IPVersionConfig)(0xc000601450), IPSetConfigV6:(*ipsets.IPVersionConfig)(0xc000601590), WorkloadIfacePrefixes:[]string{"cali"}, IptablesMarkAccept:0x10000, IptablesMarkPass:0x20000, IptablesMarkScratch0:0x40000, IptablesMarkScratch1:0x80000, IptablesMarkEndpoint:0xfff00000, IptablesMarkNonCaliEndpoint:0x0, KubeNodePortRanges:[]numorstring.Port{numorstring.Port{MinPort:0x7530, MaxPort:0x7fff, PortName:""}}, KubeIPVSSupportEnabled:false, OpenStackMetadataIP:net.IP(nil), OpenStackMetadataPort:0x2247, OpenStackSpecialCasesEnabled:false, VXLANEnabled:true, VXLANPort:4789, VXLANVNI:4096, IPIPEnabled:true, IPIPTunnelAddress:net.IP(nil), VXLANTunnelAddress:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xac, 0x10, 0x62, 0xc0}, AllowVXLANPacketsFromWorkloads:false, AllowIPIPPacketsFromWorkloads:false, WireguardEnabled:false, WireguardInterfaceName:"wireguard.cali", WireguardIptablesMark:0x0, WireguardListeningPort:51820, WireguardEncryptHostTraffic:false, RouteSource:"CalicoIPAM", IptablesLogPrefix:"calico-packet", EndpointToHostAction:"ACCEPT", IptablesFilterAllowAction:"ACCEPT", IptablesMangleAllowAction:"ACCEPT", FailsafeInboundHostPorts:[]config.ProtoPort{config.ProtoPort{Net:"", Protocol:"tcp", Port:0x16}, config.ProtoPort{Net:"", Protocol:"udp", Port:0x44}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0xb3}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94c}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1561}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x192b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0a}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0b}}, FailsafeOutboundHostPorts:[]config.ProtoPort{config.ProtoPort{Net:"", Protocol:"udp", Port:0x35}, config.ProtoPort{Net:"", Protocol:"udp", Port:0x43}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0xb3}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94c}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1561}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x192b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0a}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0b}}, DisableConntrackInvalid:false, NATPortRange:numorstring.Port{MinPort:0x0, MaxPort:0x0, PortName:""}, IptablesNATOutgoingInterfaceFilter:"", NATOutgoingAddress:net.IP(nil), BPFEnabled:false, ServiceLoopPrevention:"Drop"}, IfaceMonitorConfig:ifacemonitor.Config{InterfaceExcludes:[]*regexp.Regexp{(*regexp.Regexp)(0xc000457ea0)}, ResyncInterval:90000000000}, StatusReportingInterval:0, ConfigChangedRestartCallback:(func())(0x28b7b80), FatalErrorRestartCallback:(func(error))(0x28b7c40), PostInSyncCallback:(func())(0x289f340), HealthAggregator:(*health.HealthAggregator)(0xc000496cc0), RouteTableManager:(*idalloc.IndexAllocator)(0xc000121e18), DebugSimulateDataplaneHangAfter:0, ExternalNodesCidrs:[]string(nil), BPFEnabled:false, BPFDisableUnprivileged:true, BPFKubeProxyIptablesCleanupEnabled:true, BPFLogLevel:"off", BPFExtToServiceConnmark:0, BPFDataIfacePattern:(*regexp.Regexp)(0xc000457d60), XDPEnabled:true, XDPAllowGeneric:false, BPFConntrackTimeouts:conntrack.Timeouts{CreationGracePeriod:10000000000, TCPPreEstablished:20000000000, TCPEstablished:3600000000000, TCPFinsSeen:30000000000, TCPResetSeen:40000000000, UDPLastSeen:60000000000, GenericIPLastSeen:600000000000, ICMPLastSeen:5000000000}, BPFCgroupV2:"", BPFConnTimeLBEnabled:true, BPFMapRepin:false, BPFNodePortDSREnabled:false, BPFPSNATPorts:numorstring.Port{MinPort:0x4e20, MaxPort:0x752f, PortName:""}, KubeProxyMinSyncPeriod:1000000000, KubeProxyEndpointSlicesEnabled:false, SidecarAccelerationEnabled:false, LookPathOverride:(func(string) (string, error))(nil), KubeClientSet:(*kubernetes.Clientset)(0xc00048adc0), FeatureDetectOverrides:map[string]string(nil), hostMTU:0, MTUIfacePattern:(*regexp.Regexp)(0xc0009f6dc0), RouteSource:"CalicoIPAM", KubernetesProvider:0x0} | |
2021-12-07 00:26:11.325 [INFO][63] felix/rule_defs.go 358: Creating rule renderer. config=rules.Config{IPSetConfigV4:(*ipsets.IPVersionConfig)(0xc000601450), IPSetConfigV6:(*ipsets.IPVersionConfig)(0xc000601590), WorkloadIfacePrefixes:[]string{"cali"}, IptablesMarkAccept:0x10000, IptablesMarkPass:0x20000, IptablesMarkScratch0:0x40000, IptablesMarkScratch1:0x80000, IptablesMarkEndpoint:0xfff00000, IptablesMarkNonCaliEndpoint:0x0, KubeNodePortRanges:[]numorstring.Port{numorstring.Port{MinPort:0x7530, MaxPort:0x7fff, PortName:""}}, KubeIPVSSupportEnabled:false, OpenStackMetadataIP:net.IP(nil), OpenStackMetadataPort:0x2247, OpenStackSpecialCasesEnabled:false, VXLANEnabled:true, VXLANPort:4789, VXLANVNI:4096, IPIPEnabled:true, IPIPTunnelAddress:net.IP(nil), VXLANTunnelAddress:net.IP{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xac, 0x10, 0x62, 0xc0}, AllowVXLANPacketsFromWorkloads:false, AllowIPIPPacketsFromWorkloads:false, WireguardEnabled:false, WireguardInterfaceName:"wireguard.cali", WireguardIptablesMark:0x0, WireguardListeningPort:51820, WireguardEncryptHostTraffic:false, RouteSource:"CalicoIPAM", IptablesLogPrefix:"calico-packet", EndpointToHostAction:"ACCEPT", IptablesFilterAllowAction:"ACCEPT", IptablesMangleAllowAction:"ACCEPT", FailsafeInboundHostPorts:[]config.ProtoPort{config.ProtoPort{Net:"", Protocol:"tcp", Port:0x16}, config.ProtoPort{Net:"", Protocol:"udp", Port:0x44}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0xb3}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94c}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1561}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x192b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0a}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0b}}, FailsafeOutboundHostPorts:[]config.ProtoPort{config.ProtoPort{Net:"", Protocol:"udp", Port:0x35}, config.ProtoPort{Net:"", Protocol:"udp", Port:0x43}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0xb3}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x94c}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1561}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x192b}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0a}, config.ProtoPort{Net:"", Protocol:"tcp", Port:0x1a0b}}, DisableConntrackInvalid:false, NATPortRange:numorstring.Port{MinPort:0x0, MaxPort:0x0, PortName:""}, IptablesNATOutgoingInterfaceFilter:"", NATOutgoingAddress:net.IP(nil), BPFEnabled:false, ServiceLoopPrevention:"Drop"} | |
2021-12-07 00:26:11.328 [INFO][63] felix/rule_defs.go 368: Workload to host packets will be accepted. | |
2021-12-07 00:26:11.328 [INFO][63] felix/rule_defs.go 382: filter table allowed packets will be accepted immediately. | |
2021-12-07 00:26:11.328 [INFO][63] felix/rule_defs.go 390: mangle table allowed packets will be accepted immediately. | |
2021-12-07 00:26:11.328 [INFO][63] felix/rule_defs.go 398: Packets to unknown service IPs will be dropped | |
2021-12-07 00:26:11.328 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=65536 name="lo" | |
2021-12-07 00:26:11.328 [DEBUG][63] felix/int_dataplane.go 872: Examining link for MTU calculation mtu=1500 name="eth0" | |
2021-12-07 00:26:11.328 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=1280 name="tailscale0" | |
2021-12-07 00:26:11.328 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=1210 name="tunl0" | |
2021-12-07 00:26:11.328 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=1210 name="vxlan.calico" | |
2021-12-07 00:26:11.328 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=1210 name="cali3879dac72fe" | |
2021-12-07 00:26:11.328 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=1210 name="cali96535058867" | |
2021-12-07 00:26:11.329 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=1210 name="caliac313fa0db4" | |
2021-12-07 00:26:11.329 [DEBUG][63] felix/int_dataplane.go 869: Skipping interface for MTU detection mtu=1210 name="cali380a5b9c304" | |
2021-12-07 00:26:11.329 [INFO][63] felix/int_dataplane.go 932: Determined pod MTU mtu=1210 | |
2021-12-07 00:26:11.329 [DEBUG][63] felix/int_dataplane.go 897: Writing 1210 to /var/lib/calico/mtu | |
2021-12-07 00:26:11.329 [INFO][63] felix/iface_monitor.go 74: configured to periodically rescan interfaces. interval=1m30s | |
2021-12-07 00:26:11.329 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="legacy" candidates=[]string{"ip6tables-legacy-save", "ip6tables-save"} command="ip6tables-legacy-save" ipVersion=0x6 saveOrRestore="save" | |
2021-12-07 00:26:11.329 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="legacy" candidates=[]string{"iptables-legacy-save", "iptables-save"} command="iptables-legacy-save" ipVersion=0x4 saveOrRestore="save" | |
2021-12-07 00:26:11.334 [DEBUG][63] felix/feature_detect.go 217: Ip6tables legacy save out ip6l="" | |
2021-12-07 00:26:11.334 [DEBUG][63] felix/feature_detect.go 218: Iptables legacy save out ip4l="" | |
2021-12-07 00:26:11.335 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"ip6tables-nft-save", "ip6tables-save"} command="ip6tables-nft-save" ipVersion=0x6 saveOrRestore="save" | |
2021-12-07 00:26:11.335 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-save", "iptables-save"} command="iptables-nft-save" ipVersion=0x4 saveOrRestore="save" | |
2021-12-07 00:26:11.339 [INFO][62] tunnel-ip-allocator/allocateip.go 303: Current address is still valid, do nothing currentAddr="172.16.98.192" type="vxlanTunnelAddress" | |
2021-12-07 00:26:11.339 [DEBUG][63] felix/feature_detect.go 227: Ip6tables save out ip6n="# Generated by ip6tables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021\n*filter\n:ts-input - [0:0]\n:ts-forward - [0:0]\n:INPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]\n:KUBE-FIREWALL - [0:0]\n:OUTPUT ACCEPT [0:0]\n:KUBE-KUBELET-CANARY - [0:0]\n:KUBE-PROXY-CANARY - [0:0]\n:KUBE-EXTERNAL-SERVICES - [0:0]\n:KUBE-NODEPORTS - [0:0]\n:KUBE-SERVICES - [0:0]\n:KUBE-FORWARD - [0:0]\n-A ts-input -s fd7a:115c:a1e0:ab12:4843:cd96:625b:6954/128 -i lo -j ACCEPT\n-A ts-forward -i tailscale0 -j MARK --set-xmark 0x40000/0xffffffff\n-A ts-forward -m mark --mark 0x40000 -j ACCEPT\n-A ts-forward -o tailscale0 -j ACCEPT\n-A INPUT -m comment --comment \"kubernetes health check service ports\" -j KUBE-NODEPORTS\n-A INPUT -m conntrack --ctstate NEW -m comment --comment \"kubernetes externally-visible service portals\" -j KUBE-EXTERNAL-SERVICES\n-A INPUT -j KUBE-FIREWALL\n-A INPUT -j ts-input\n-A FORWARD -m comment --comment \"kubernetes forwarding rules\" -j KUBE-FORWARD\n-A FORWARD -m conntrack --ctstate NEW -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A FORWARD -m conntrack --ctstate NEW -m comment --comment \"kubernetes externally-visible service portals\" -j KUBE-EXTERNAL-SERVICES\n-A FORWARD -j ts-forward\n-A KUBE-FIREWALL -m comment --comment \"kubernetes firewall for dropping marked packets\" -m mark --mark 0x8000/0x8000 -j DROP\n-A OUTPUT -m conntrack --ctstate NEW -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A OUTPUT -j KUBE-FIREWALL\n-A KUBE-FORWARD -m conntrack --ctstate INVALID -j DROP\n-A KUBE-FORWARD -m comment --comment \"kubernetes forwarding rules\" -m mark --mark 0x4000/0x4000 -j ACCEPT\n-A KUBE-FORWARD -m comment --comment \"kubernetes forwarding conntrack pod source rule\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A KUBE-FORWARD -m comment --comment \"kubernetes forwarding conntrack pod destination rule\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nCOMMIT\n# Completed on Tue Dec 7 00:26:11 2021\n# Generated by ip6tables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021\n*nat\n:ts-postrouting - [0:0]\n:POSTROUTING ACCEPT [0:0]\n:KUBE-MARK-DROP - [0:0]\n:KUBE-MARK-MASQ - [0:0]\n:KUBE-POSTROUTING - [0:0]\n:KUBE-KUBELET-CANARY - [0:0]\n:PREROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:KUBE-PROXY-CANARY - [0:0]\n:KUBE-SERVICES - [0:0]\n:KUBE-NODEPORTS - [0:0]\n-A ts-postrouting -m mark --mark 0x40000 -j MASQUERADE\n-A POSTROUTING -m comment --comment \"kubernetes postrouting rules\" -j KUBE-POSTROUTING\n-A POSTROUTING -j ts-postrouting\n-A KUBE-MARK-DROP -j MARK --set-xmark 0x8000/0x8000\n-A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000\n-A KUBE-POSTROUTING -m mark ! --mark 0x4000/0x4000 -j RETURN\n-A KUBE-POSTROUTING -j MARK --set-xmark 0x4000/0x0\n-A KUBE-POSTROUTING -m comment --comment \"kubernetes service traffic requiring SNAT\" -j MASQUERADE --random-fully\n-A PREROUTING -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A OUTPUT -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A KUBE-SERVICES -m comment --comment \"kubernetes service nodeports; NOTE: this must be the last rule in this chain\" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS\nCOMMIT\n# Completed on Tue Dec 7 00:26:11 2021\n# Generated by ip6tables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021\n*mangle\n:KUBE-KUBELET-CANARY - [0:0]\n:PREROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:KUBE-PROXY-CANARY - [0:0]\nCOMMIT\n# Completed on Tue Dec 7 00:26:11 2021\n" | |
2021-12-07 00:26:11.347 [DEBUG][63] felix/feature_detect.go 229: Iptables save out ip4n="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021\n*filter\n:ts-input - [0:0]\n:ts-forward - [0:0]\n:INPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]\n:KUBE-FIREWALL - [0:0]\n:OUTPUT ACCEPT [0:0]\n:KUBE-KUBELET-CANARY - [0:0]\n:KUBE-PROXY-CANARY - [0:0]\n:KUBE-EXTERNAL-SERVICES - [0:0]\n:KUBE-NODEPORTS - [0:0]\n:KUBE-SERVICES - [0:0]\n:KUBE-FORWARD - [0:0]\n:cali-from-wl-dispatch - [0:0]\n:cali-to-hep-forward - [0:0]\n:cali-cidr-block - [0:0]\n:cali-wl-to-host - [0:0]\n:cali-from-host-endpoint - [0:0]\n:cali-FORWARD - [0:0]\n:cali-from-hep-forward - [0:0]\n:cali-to-wl-dispatch - [0:0]\n:cali-to-host-endpoint - [0:0]\n:cali-INPUT - [0:0]\n:cali-OUTPUT - [0:0]\n:cali-pro-ksa.default.default - [0:0]\n:cali-fw-cali380a5b9c304 - [0:0]\n:cali-tw-cali380a5b9c304 - [0:0]\n:cali-pri-kns.default - [0:0]\n:cali-pri-ksa.default.default - [0:0]\n:cali-pro-kns.default - [0:0]\n:cali-tw-cali96535058867 - [0:0]\n:cali-fw-cali96535058867 - [0:0]\n:cali-fw-cali3879dac72fe - [0:0]\n:cali-from-wl-dispatch-3 - [0:0]\n:cali-tw-cali3879dac72fe - [0:0]\n:cali-to-wl-dispatch-3 - [0:0]\n:cali-tw-caliac313fa0db4 - [0:0]\n:cali-fw-caliac313fa0db4 - [0:0]\n-A ts-input -s 100.91.105.84/32 -i lo -j ACCEPT\n-A ts-input -s 100.115.92.0/23 ! -i tailscale0 -j RETURN\n-A ts-input -s 100.64.0.0/10 ! -i tailscale0 -j DROP\n-A ts-forward -i tailscale0 -j MARK --set-xmark 0x40000/0xffffffff\n-A ts-forward -m mark --mark 0x40000 -j ACCEPT\n-A ts-forward -s 100.64.0.0/10 -o tailscale0 -j DROP\n-A ts-forward -o tailscale0 -j ACCEPT\n-A INPUT -m comment --comment \"cali:Cz_u1IQiXIMmKD4c\" -j cali-INPUT\n-A INPUT -m comment --comment \"kubernetes health check service ports\" -j KUBE-NODEPORTS\n-A INPUT -m conntrack --ctstate NEW -m comment --comment \"kubernetes externally-visible service portals\" -j KUBE-EXTERNAL-SERVICES\n-A INPUT -j KUBE-FIREWALL\n-A INPUT -j ts-input\n-A FORWARD -m comment --comment \"cali:wUHhoiAYhphO9Mso\" -j cali-FORWARD\n-A FORWARD -m comment --comment \"kubernetes forwarding rules\" -j KUBE-FORWARD\n-A FORWARD -m conntrack --ctstate NEW -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A FORWARD -m conntrack --ctstate NEW -m comment --comment \"kubernetes externally-visible service portals\" -j KUBE-EXTERNAL-SERVICES\n-A FORWARD -j ts-forward\n-A FORWARD -m comment --comment \"cali:S93hcgKJrXEqnTfs\" -m comment --comment \"Policy explicitly accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A FORWARD -m comment --comment \"cali:mp77cMpurHhyjLrM\" -j MARK --set-xmark 0x10000/0x10000\n-A KUBE-FIREWALL -m comment --comment \"kubernetes firewall for dropping marked packets\" -m mark --mark 0x8000/0x8000 -j DROP\n-A KUBE-FIREWALL ! -s 127.0.0.0/8 -d 127.0.0.0/8 -m comment --comment \"block incoming localnet connections\" -m conntrack ! --ctstate RELATED,ESTABLISHED,DNAT -j DROP\n-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT\n-A OUTPUT -m conntrack --ctstate NEW -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A OUTPUT -j KUBE-FIREWALL\n-A KUBE-EXTERNAL-SERVICES -p tcp -m comment --comment \"default/hello-minikube has no endpoints\" -m addrtype --dst-type LOCAL -m tcp --dport 31215 -j REJECT --reject-with icmp-port-unreachable\n-A KUBE-SERVICES -d 10.100.40.38/32 -p tcp -m comment --comment \"kube-system/metrics-server:https has no endpoints\" -m tcp --dport 443 -j REJECT --reject-with icmp-port-unreachable\n-A KUBE-SERVICES -d 10.102.17.163/32 -p tcp -m comment --comment \"default/hello-minikube has no endpoints\" -m tcp --dport 8080 -j REJECT --reject-with icmp-port-unreachable\n-A KUBE-FORWARD -m conntrack --ctstate INVALID -j DROP\n-A KUBE-FORWARD -m comment --comment \"kubernetes forwarding rules\" -m mark --mark 0x4000/0x4000 -j ACCEPT\n-A KUBE-FORWARD -m comment --comment \"kubernetes forwarding conntrack pod source rule\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A KUBE-FORWARD -m comment --comment \"kubernetes forwarding conntrack pod destination rule\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-from-wl-dispatch -i cali3+ -m comment --comment \"cali:eRB5fFi8houtUdAx\" -g cali-from-wl-dispatch-3\n-A cali-from-wl-dispatch -i cali96535058867 -m comment --comment \"cali:9iH_GTJnH_yfNaMX\" -g cali-fw-cali96535058867\n-A cali-from-wl-dispatch -i caliac313fa0db4 -m comment --comment \"cali:herF7CS4PvuOQZbD\" -g cali-fw-caliac313fa0db4\n-A cali-from-wl-dispatch -m comment --comment \"cali:BwTanwKLQwL1erKn\" -m comment --comment \"Unknown interface\" -j DROP\n-A cali-wl-to-host -m comment --comment \"cali:Ee9Sbo10IpVujdIY\" -j cali-from-wl-dispatch\n-A cali-wl-to-host -m comment --comment \"cali:nSZbcOoG1xPONxb8\" -m comment --comment \"Configured DefaultEndpointToHostAction\" -j ACCEPT\n-A cali-FORWARD -m comment --comment \"cali:vjrMJCRpqwy5oRoX\" -j MARK --set-xmark 0x0/0xe0000\n-A cali-FORWARD -m comment --comment \"cali:A_sPAO0mcxbT9mOV\" -m mark --mark 0x0/0x10000 -j cali-from-hep-forward\n-A cali-FORWARD -i cali+ -m comment --comment \"cali:8ZoYfO5HKXWbB3pk\" -j cali-from-wl-dispatch\n-A cali-FORWARD -o cali+ -m comment --comment \"cali:jdEuaPBe14V2hutn\" -j cali-to-wl-dispatch\n-A cali-FORWARD -m comment --comment \"cali:12bc6HljsMKsmfr-\" -j cali-to-hep-forward\n-A cali-FORWARD -m comment --comment \"cali:NOSxoaGx8OIstr1z\" -j cali-cidr-block\n-A cali-to-wl-dispatch -o cali3+ -m comment --comment \"cali:zaG4MAX3T6tQxdJK\" -g cali-to-wl-dispatch-3\n-A cali-to-wl-dispatch -o cali96535058867 -m comment --comment \"cali:0zQEmQMO1u2UWbBS\" -g cali-tw-cali96535058867\n-A cali-to-wl-dispatch -o caliac313fa0db4 -m comment --comment \"cali:xupTX44vjg-JmnxK\" -g cali-tw-caliac313fa0db4\n-A cali-to-wl-dispatch -m comment --comment \"cali:SZ28KbAE4c38Mup4\" -m comment --comment \"Unknown interface\" -j DROP\n-A cali-INPUT -p ipv4 -m comment --comment \"cali:PajejrV4aFdkZojI\" -m comment --comment \"Allow IPIP packets from Calico hosts\" -m set --match-set cali40all-hosts-net src -m addrtype --dst-type LOCAL -j ACCEPT\n-A cali-INPUT -p ipv4 -m comment --comment \"cali:_wjq-Yrma8Ly1Svo\" -m comment --comment \"Drop IPIP packets from non-Calico hosts\" -j DROP\n-A cali-INPUT -p udp -m comment --comment \"cali:bEXIy9HGobub81S5\" -m comment --comment \"Allow VXLAN packets from whitelisted hosts\" -m multiport --dports 4789 -m set --match-set cali40all-vxlan-net src -m addrtype --dst-type LOCAL -j ACCEPT\n-A cali-INPUT -p udp -m comment --comment \"cali:WgvDubTjwGCAFMhq\" -m comment --comment \"Drop VXLAN packets from non-whitelisted hosts\" -m multiport --dports 4789 -m addrtype --dst-type LOCAL -j DROP\n-A cali-INPUT -i cali+ -m comment --comment \"cali:eJqDet8w3uw3n7v8\" -g cali-wl-to-host\n-A cali-INPUT -m comment --comment \"cali:jAZk5tuaEgvaGKg2\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A cali-INPUT -m comment --comment \"cali:irH2n0qinmm5iBC0\" -j MARK --set-xmark 0x0/0xf0000\n-A cali-INPUT -m comment --comment \"cali:AjS7Pk-bcYrHA5OA\" -j cali-from-host-endpoint\n-A cali-INPUT -m comment --comment \"cali:3B0MCg-r2mG2kBHO\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A cali-OUTPUT -m comment --comment \"cali:Mq1_rAdXXH3YkrzW\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A cali-OUTPUT -o cali+ -m comment --comment \"cali:69FkRTJDvD5Vu6Vl\" -j RETURN\n-A cali-OUTPUT -p ipv4 -m comment --comment \"cali:AnEsmO6bDZbQntWW\" -m comment --comment \"Allow IPIP packets to other Calico hosts\" -m set --match-set cali40all-hosts-net dst -m addrtype --src-type LOCAL -j ACCEPT\n-A cali-OUTPUT -p udp -m comment --comment \"cali:_ERUSSyRmRrgn7QU\" -m comment --comment \"Allow VXLAN packets to other whitelisted hosts\" -m multiport --dports 4789 -m addrtype --src-type LOCAL -m set --match-set cali40all-vxlan-net dst -j ACCEPT\n-A cali-OUTPUT -m comment --comment \"cali:eCYBJT1-FpELHZDd\" -j MARK --set-xmark 0x0/0xf0000\n-A cali-OUTPUT -m comment --comment \"cali:sIhcfHOWqix-aPJD\" -m conntrack ! --ctstate DNAT -j cali-to-host-endpoint\n-A cali-OUTPUT -m comment --comment \"cali:fjDrV50eZGEkqJOS\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:to_U5MRNQBvUy4B9\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:aK0NOQuy7aAFnyrr\" -m conntrack --ctstate INVALID -j DROP\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:UhtbszqRYg1mEzvq\" -j MARK --set-xmark 0x0/0x10000\n-A cali-fw-cali380a5b9c304 -p udp -m comment --comment \"cali:7k1M2f3fgloNu7dQ\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP\n-A cali-fw-cali380a5b9c304 -p ipv4 -m comment --comment \"cali:ipHuIPxIJ7aHdsA8\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:uapGCMLMKh_glv6Z\" -j cali-pro-kns.default\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:2y6zrwJ_yIuu_qmu\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:4dBp90X5BSyot8-k\" -j cali-pro-ksa.default.default\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:u7ZhiOzK5dbOdwqu\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:-6p7DZWMHTXH-spx\" -m comment --comment \"Drop if no profiles matched\" -j DROP\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:KtHVR6oLwqTEmTGw\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:IABPGKWqiA8K1Jgv\" -m conntrack --ctstate INVALID -j DROP\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:SN7mBRuyhTD6GPFJ\" -j MARK --set-xmark 0x0/0x10000\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:iau3JIxYqu-Qn8pK\" -j cali-pri-kns.default\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:D5Vv4enoeIk4u9FM\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:I2DMECw7j757iYgz\" -j cali-pri-ksa.default.default\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:7Q3T_hHPiBHjk_fH\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:1ajIY4MsDMHaCg90\" -m comment --comment \"Drop if no profiles matched\" -j DROP\n-A cali-pri-kns.default -m comment --comment \"cali:7Fnh7Pv3_98FtLW7\" -j MARK --set-xmark 0x10000/0x10000\n-A cali-pri-kns.default -m comment --comment \"cali:ZbV6bJXWSRefjK0u\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-pro-kns.default -m comment --comment \"cali:oLzzje5WExbgfib5\" -j MARK --set-xmark 0x10000/0x10000\n-A cali-pro-kns.default -m comment --comment \"cali:4goskqvxh5xcGw3s\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-cali96535058867 -m comment --comment \"cali:92gMBnyeX4blswt-\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-tw-cali96535058867 -m comment --comment \"cali:MEQe6VwyiVjJ7zOQ\" -m conntrack --ctstate INVALID -j DROP\n-A cali-tw-cali96535058867 -m comment --comment \"cali:6RMLYKiKJuWjVHc1\" -j MARK --set-xmark 0x0/0x10000\n-A cali-tw-cali96535058867 -m comment --comment \"cali:vMoxb9R22fb4pyO6\" -j cali-pri-kns.default\n-A cali-tw-cali96535058867 -m comment --comment \"cali:Rdo_H23VME-niwtb\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-cali96535058867 -m comment --comment \"cali:Y3QkVEqR8kbuRYGQ\" -j cali-pri-ksa.default.default\n-A cali-tw-cali96535058867 -m comment --comment \"cali:eVvCFgdoo8bZX3qa\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-cali96535058867 -m comment --comment \"cali:llNznSFv3JOEywzH\" -m comment --comment \"Drop if no profiles matched\" -j DROP\n-A cali-fw-cali96535058867 -m comment --comment \"cali:Fyoi4yV22Of9mnu8\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-fw-cali96535058867 -m comment --comment \"cali:5y1jArt4yAPKlMJD\" -m conntrack --ctstate INVALID -j DROP\n-A cali-fw-cali96535058867 -m comment --comment \"cali:dNaRpiI2rslUI3R7\" -j MARK --set-xmark 0x0/0x10000\n-A cali-fw-cali96535058867 -p udp -m comment --comment \"cali:48WcKqGDEskiYB-G\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP\n-A cali-fw-cali96535058867 -p ipv4 -m comment --comment \"cali:bUIiE3hlfIbKs0dW\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP\n-A cali-fw-cali96535058867 -m comment --comment \"cali:H_NjIGtf-sOdBvlb\" -j cali-pro-kns.default\n-A cali-fw-cali96535058867 -m comment --comment \"cali:oMazAYWlFV9yCPu5\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-cali96535058867 -m comment --comment \"cali:R4nhIYtMbJZ6qgn-\" -j cali-pro-ksa.default.default\n-A cali-fw-cali96535058867 -m comment --comment \"cali:-euph1MnULvtPbAg\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-cali96535058867 -m comment --comment \"cali:8ZzXifIxmAtohKeq\" -m comment --comment \"Drop if no profiles matched\" -j DROP\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:TO8KrBS_umiWYfxP\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:DkpFMyO2CUKHAkc5\" -m conntrack --ctstate INVALID -j DROP\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:fkBo6tFmCuuzHCVo\" -j MARK --set-xmark 0x0/0x10000\n-A cali-fw-cali3879dac72fe -p udp -m comment --comment \"cali:MqYzY3XoFul7pmkS\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP\n-A cali-fw-cali3879dac72fe -p ipv4 -m comment --comment \"cali:JOjxsxnvCysL_hXk\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:-FIwspAq1YkJutW1\" -j cali-pro-kns.default\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:JXwvsUUiJo7rOlV9\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:vlQdcnjk40ZU0FfF\" -j cali-pro-ksa.default.default\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:1XQGzrAc9ZMPhIAg\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-cali3879dac72fe -m comment --comment \"cali:dxv-NeIr5ezwGz7c\" -m comment --comment \"Drop if no profiles matched\" -j DROP\n-A cali-from-wl-dispatch-3 -i cali380a5b9c304 -m comment --comment \"cali:L4qzE_ySOcJdXqgK\" -g cali-fw-cali380a5b9c304\n-A cali-from-wl-dispatch-3 -i cali3879dac72fe -m comment --comment \"cali:XkRVdmM842r9y4R7\" -g cali-fw-cali3879dac72fe\n-A cali-from-wl-dispatch-3 -m comment --comment \"cali:MbTDhndkkG6UhRUf\" -m comment --comment \"Unknown interface\" -j DROP\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:5efI9PQwltLgTRZ1\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:MTaGKsFUi4C47F9h\" -m conntrack --ctstate INVALID -j DROP\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:W6ClaKJaLgdlWZ6Q\" -j MARK --set-xmark 0x0/0x10000\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:ptC23oyyiQx8dxtx\" -j cali-pri-kns.default\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:rIFTEeEgU33XvwKo\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:zRm24h2G-aFMoMK2\" -j cali-pri-ksa.default.default\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:vyH0XLZyqagFHVmO\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-cali3879dac72fe -m comment --comment \"cali:AQBMgeYcIEzPGedN\" -m comment --comment \"Drop if no profiles matched\" -j DROP\n-A cali-to-wl-dispatch-3 -o cali380a5b9c304 -m comment --comment \"cali:Rn37b3cubtzKzfnd\" -g cali-tw-cali380a5b9c304\n-A cali-to-wl-dispatch-3 -o cali3879dac72fe -m comment --comment \"cali:VL7JiWBjlz1V5eAH\" -g cali-tw-cali3879dac72fe\n-A cali-to-wl-dispatch-3 -m comment --comment \"cali:ETD-fogba0GcunQk\" -m comment --comment \"Unknown interface\" -j DROP\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:EXxS2fVbqPA2WdA5\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:2FJIaFYxK-mfp0Ju\" -m conntrack --ctstate INVALID -j DROP\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:-oOBaU-zMAmpYGjx\" -j MARK --set-xmark 0x0/0x10000\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:NGn-m_7dX0F9SEbR\" -j cali-pri-kns.default\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:IUpjN0k279GyBTrx\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:sgd6W0jXko2WtEcK\" -j cali-pri-ksa.default.default\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:ymhOdnBikNqH_xNK\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:4rOLOy_dR0KcbmNW\" -m comment --comment \"Drop if no profiles matched\" -j DROP\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:2VGTOFjJFFE7beN4\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:3fvIzaPgF0gh48BI\" -m conntrack --ctstate INVALID -j DROP\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:DCkm8PB93Qde9X7p\" -j MARK --set-xmark 0x0/0x10000\n-A cali-fw-caliac313fa0db4 -p udp -m comment --comment \"cali:5mjBGJHbl2l35TBM\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP\n-A cali-fw-caliac313fa0db4 -p ipv4 -m comment --comment \"cali:yBstb-wDZZHyG6aP\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:FAyXS2_E5uipX5OP\" -j cali-pro-kns.default\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:-anPErB_gIP3Azh1\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:63cdwn1FznYwH10k\" -j cali-pro-ksa.default.default\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:C1WdN0BPvIkMFr8q\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:2eK8jGEskMW4-Lfl\" -m comment --comment \"Drop if no profiles matched\" -j DROP\nCOMMIT\n# Completed on Tue Dec 7 00:26:11 2021\n# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021\n*nat\n:ts-postrouting - [0:0]\n:POSTROUTING ACCEPT [0:0]\n:KUBE-MARK-DROP - [0:0]\n:KUBE-MARK-MASQ - [0:0]\n:KUBE-POSTROUTING - [0:0]\n:KUBE-KUBELET-CANARY - [0:0]\n:PREROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:KUBE-PROXY-CANARY - [0:0]\n:KUBE-SERVICES - [0:0]\n:KUBE-NODEPORTS - [0:0]\n:KUBE-SEP-5PDW6RWLUIURNUGN - [0:0]\n:KUBE-SVC-Z6GDYMWE5TV2NNJN - [0:0]\n:KUBE-SEP-ANOK6XLR4NI3BVA6 - [0:0]\n:KUBE-SVC-CEZPIJSAUFW5MYPQ - [0:0]\n:KUBE-SEP-VO6WBFOXZK72F3MS - [0:0]\n:KUBE-SVC-NPX46M4PTMTKRN6Y - [0:0]\n:KUBE-SEP-VS2VAMUJFU64R4TD - [0:0]\n:KUBE-SEP-PR4QUMNIVHIYNCCF - [0:0]\n:KUBE-SVC-TCOU7JCQXEZGVUNU - [0:0]\n:KUBE-SEP-3MTAHZI7XXDUHRZ2 - [0:0]\n:KUBE-SEP-TQ7D7CZQ6BXZ4KLJ - [0:0]\n:KUBE-SVC-ERIFXISQEP7F7OF4 - [0:0]\n:KUBE-SEP-DMDL3HZEFUJQK5GE - [0:0]\n:KUBE-SEP-TW56RVGOAZFJLYSK - [0:0]\n:KUBE-SVC-JD5MR3NA4I4DYORP - [0:0]\n:cali-fip-dnat - [0:0]\n:cali-fip-snat - [0:0]\n:cali-nat-outgoing - [0:0]\n:cali-PREROUTING - [0:0]\n:cali-POSTROUTING - [0:0]\n:cali-OUTPUT - [0:0]\n-A ts-postrouting -m mark --mark 0x40000 -j MASQUERADE\n-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING\n-A POSTROUTING -m comment --comment \"kubernetes postrouting rules\" -j KUBE-POSTROUTING\n-A POSTROUTING -j ts-postrouting\n-A KUBE-MARK-DROP -j MARK --set-xmark 0x8000/0x8000\n-A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000\n-A KUBE-POSTROUTING -m mark ! --mark 0x4000/0x4000 -j RETURN\n-A KUBE-POSTROUTING -j MARK --set-xmark 0x4000/0x0\n-A KUBE-POSTROUTING -m comment --comment \"kubernetes service traffic requiring SNAT\" -j MASQUERADE --random-fully\n-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING\n-A PREROUTING -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT\n-A OUTPUT -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES\n-A KUBE-SERVICES -d 10.96.0.1/32 -p tcp -m comment --comment \"default/kubernetes:https cluster IP\" -m tcp --dport 443 -j KUBE-SVC-NPX46M4PTMTKRN6Y\n-A KUBE-SERVICES -d 10.96.0.10/32 -p udp -m comment --comment \"kube-system/kube-dns:dns cluster IP\" -m udp --dport 53 -j KUBE-SVC-TCOU7JCQXEZGVUNU\n-A KUBE-SERVICES -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp cluster IP\" -m tcp --dport 53 -j KUBE-SVC-ERIFXISQEP7F7OF4\n-A KUBE-SERVICES -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:metrics cluster IP\" -m tcp --dport 9153 -j KUBE-SVC-JD5MR3NA4I4DYORP\n-A KUBE-SERVICES -d 10.96.176.188/32 -p tcp -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper cluster IP\" -m tcp --dport 8000 -j KUBE-SVC-Z6GDYMWE5TV2NNJN\n-A KUBE-SERVICES -d 10.105.55.115/32 -p tcp -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard cluster IP\" -m tcp --dport 443 -j KUBE-SVC-CEZPIJSAUFW5MYPQ\n-A KUBE-SERVICES -m comment --comment \"kubernetes service nodeports; NOTE: this must be the last rule in this chain\" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS\n-A KUBE-SEP-5PDW6RWLUIURNUGN -s 172.16.117.131/32 -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-5PDW6RWLUIURNUGN -p tcp -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper\" -m tcp -j DNAT --to-destination 172.16.117.131:8000\n-A KUBE-SVC-Z6GDYMWE5TV2NNJN ! -s 172.16.0.0/16 -d 10.96.176.188/32 -p tcp -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper cluster IP\" -m tcp --dport 8000 -j KUBE-MARK-MASQ\n-A KUBE-SVC-Z6GDYMWE5TV2NNJN -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper\" -j KUBE-SEP-5PDW6RWLUIURNUGN\n-A KUBE-SEP-ANOK6XLR4NI3BVA6 -s 172.16.117.133/32 -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-ANOK6XLR4NI3BVA6 -p tcp -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard\" -m tcp -j DNAT --to-destination 172.16.117.133:8443\n-A KUBE-SVC-CEZPIJSAUFW5MYPQ ! -s 172.16.0.0/16 -d 10.105.55.115/32 -p tcp -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard cluster IP\" -m tcp --dport 443 -j KUBE-MARK-MASQ\n-A KUBE-SVC-CEZPIJSAUFW5MYPQ -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard\" -j KUBE-SEP-ANOK6XLR4NI3BVA6\n-A KUBE-SEP-VO6WBFOXZK72F3MS -s 100.64.226.74/32 -m comment --comment \"default/kubernetes:https\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-VO6WBFOXZK72F3MS -p tcp -m comment --comment \"default/kubernetes:https\" -m tcp -j DNAT --to-destination 100.64.226.74:6443\n-A KUBE-SVC-NPX46M4PTMTKRN6Y ! -s 172.16.0.0/16 -d 10.96.0.1/32 -p tcp -m comment --comment \"default/kubernetes:https cluster IP\" -m tcp --dport 443 -j KUBE-MARK-MASQ\n-A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment \"default/kubernetes:https\" -j KUBE-SEP-VO6WBFOXZK72F3MS\n-A KUBE-SEP-VS2VAMUJFU64R4TD -s 172.16.117.196/32 -m comment --comment \"kube-system/kube-dns:dns\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-VS2VAMUJFU64R4TD -p udp -m comment --comment \"kube-system/kube-dns:dns\" -m udp -j DNAT --to-destination 172.16.117.196:53\n-A KUBE-SEP-PR4QUMNIVHIYNCCF -s 172.16.117.197/32 -m comment --comment \"kube-system/kube-dns:dns\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-PR4QUMNIVHIYNCCF -p udp -m comment --comment \"kube-system/kube-dns:dns\" -m udp -j DNAT --to-destination 172.16.117.197:53\n-A KUBE-SVC-TCOU7JCQXEZGVUNU ! -s 172.16.0.0/16 -d 10.96.0.10/32 -p udp -m comment --comment \"kube-system/kube-dns:dns cluster IP\" -m udp --dport 53 -j KUBE-MARK-MASQ\n-A KUBE-SVC-TCOU7JCQXEZGVUNU -m comment --comment \"kube-system/kube-dns:dns\" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-VS2VAMUJFU64R4TD\n-A KUBE-SVC-TCOU7JCQXEZGVUNU -m comment --comment \"kube-system/kube-dns:dns\" -j KUBE-SEP-PR4QUMNIVHIYNCCF\n-A KUBE-SEP-3MTAHZI7XXDUHRZ2 -s 172.16.117.196/32 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-3MTAHZI7XXDUHRZ2 -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp\" -m tcp -j DNAT --to-destination 172.16.117.196:53\n-A KUBE-SEP-TQ7D7CZQ6BXZ4KLJ -s 172.16.117.197/32 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-TQ7D7CZQ6BXZ4KLJ -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp\" -m tcp -j DNAT --to-destination 172.16.117.197:53\n-A KUBE-SVC-ERIFXISQEP7F7OF4 ! -s 172.16.0.0/16 -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp cluster IP\" -m tcp --dport 53 -j KUBE-MARK-MASQ\n-A KUBE-SVC-ERIFXISQEP7F7OF4 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-3MTAHZI7XXDUHRZ2\n-A KUBE-SVC-ERIFXISQEP7F7OF4 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -j KUBE-SEP-TQ7D7CZQ6BXZ4KLJ\n-A KUBE-SEP-DMDL3HZEFUJQK5GE -s 172.16.117.196/32 -m comment --comment \"kube-system/kube-dns:metrics\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-DMDL3HZEFUJQK5GE -p tcp -m comment --comment \"kube-system/kube-dns:metrics\" -m tcp -j DNAT --to-destination 172.16.117.196:9153\n-A KUBE-SEP-TW56RVGOAZFJLYSK -s 172.16.117.197/32 -m comment --comment \"kube-system/kube-dns:metrics\" -j KUBE-MARK-MASQ\n-A KUBE-SEP-TW56RVGOAZFJLYSK -p tcp -m comment --comment \"kube-system/kube-dns:metrics\" -m tcp -j DNAT --to-destination 172.16.117.197:9153\n-A KUBE-SVC-JD5MR3NA4I4DYORP ! -s 172.16.0.0/16 -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:metrics cluster IP\" -m tcp --dport 9153 -j KUBE-MARK-MASQ\n-A KUBE-SVC-JD5MR3NA4I4DYORP -m comment --comment \"kube-system/kube-dns:metrics\" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-DMDL3HZEFUJQK5GE\n-A KUBE-SVC-JD5MR3NA4I4DYORP -m comment --comment \"kube-system/kube-dns:metrics\" -j KUBE-SEP-TW56RVGOAZFJLYSK\n-A cali-nat-outgoing -m comment --comment \"cali:flqWnvo8yq4ULQLa\" -m set --match-set cali40masq-ipam-pools src -m set ! --match-set cali40all-ipam-pools dst -j MASQUERADE --random-fully\n-A cali-PREROUTING -m comment --comment \"cali:r6XmIziWUJsdOK6Z\" -j cali-fip-dnat\n-A cali-POSTROUTING -m comment --comment \"cali:Z-c7XtVd2Bq7s_hA\" -j cali-fip-snat\n-A cali-POSTROUTING -m comment --comment \"cali:nYKhEzDlr11Jccal\" -j cali-nat-outgoing\n-A cali-POSTROUTING -o vxlan.calico -m comment --comment \"cali:e9dnSgSVNmIcpVhP\" -m addrtype ! --src-type LOCAL --limit-iface-out -m addrtype --src-type LOCAL -j MASQUERADE --random-fully\n-A cali-OUTPUT -m comment --comment \"cali:GBTAv2p5CwevEyJm\" -j cali-fip-dnat\nCOMMIT\n# Completed on Tue Dec 7 00:26:11 2021\n# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021\n*mangle\n:KUBE-KUBELET-CANARY - [0:0]\n:PREROUTING ACCEPT [0:0]\n:INPUT ACCEPT [0:0]\n:FORWARD ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:POSTROUTING ACCEPT [0:0]\n:KUBE-PROXY-CANARY - [0:0]\n:cali-from-host-endpoint - [0:0]\n:cali-to-host-endpoint - [0:0]\n:cali-PREROUTING - [0:0]\n:cali-POSTROUTING - [0:0]\n-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING\n-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING\n-A cali-PREROUTING -m comment --comment \"cali:6BJqBjBC7crtA-7-\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\n-A cali-PREROUTING -m comment --comment \"cali:KX7AGNd6rMcDUai6\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A cali-PREROUTING -m comment --comment \"cali:wNH7KsA3ILKJBsY9\" -j cali-from-host-endpoint\n-A cali-PREROUTING -m comment --comment \"cali:Cg96MgVuoPm7UMRo\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A cali-POSTROUTING -m comment --comment \"cali:NX-7roTexQ3fGRfU\" -m mark --mark 0x10000/0x10000 -j RETURN\n-A cali-POSTROUTING -m comment --comment \"cali:nnqPh8lh2VOogSzX\" -j MARK --set-xmark 0x0/0xf0000\n-A cali-POSTROUTING -m comment --comment \"cali:nquN8Jw8Tz72pcBW\" -m conntrack --ctstate DNAT -j cali-to-host-endpoint\n-A cali-POSTROUTING -m comment --comment \"cali:jWrgvDQ0xEZHmta3\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j RETURN\nCOMMIT\n# Completed on Tue Dec 7 00:26:11 2021\n# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021\n*raw\n:PREROUTING ACCEPT [0:0]\n:OUTPUT ACCEPT [0:0]\n:cali-to-host-endpoint - [0:0]\n:cali-PREROUTING - [0:0]\n:cali-OUTPUT - [0:0]\n:cali-from-host-endpoint - [0:0]\n-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING\n-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT\n-A cali-PREROUTING -m comment --comment \"cali:XFX5xbM8B9qR10JG\" -j MARK --set-xmark 0x0/0xf0000\n-A cali-PREROUTING -i cali+ -m comment --comment \"cali:EWMPb0zVROM-woQp\" -j MARK --set-xmark 0x40000/0x40000\n-A cali-PREROUTING -m comment --comment \"cali:mPIOOWmbH3iO0R90\" -m mark --mark 0x40000/0x40000 -m rpfilter --validmark --invert -j DROP\n-A cali-PREROUTING -m comment --comment \"cali:8eOxmFpkWr0RjKXR\" -m mark --mark 0x0/0x40000 -j cali-from-host-endpoint\n-A cali-PREROUTING -m comment --comment \"cali:F-nExspj_POyei0v\" -m mark --mark 0x10000/0x10000 -j ACCEPT\n-A cali-OUTPUT -m comment --comment \"cali:njdnLwYeGqBJyMxW\" -j MARK --set-xmark 0x0/0xf0000\n-A cali-OUTPUT -m comment --comment \"cali:rz86uTUcEZAfFsh7\" -j cali-to-host-endpoint\n-A cali-OUTPUT -m comment --comment \"cali:pN0F5zD0b8yf9W1Z\" -m mark --mark 0x10000/0x10000 -j ACCEPT\nCOMMIT\n# Completed on Tue Dec 7 00:26:11 2021\n" | |
2021-12-07 00:26:11.348 [DEBUG][63] felix/feature_detect.go 237: Detected Iptables backend detectedBackend="nft" | |
2021-12-07 00:26:11.348 [DEBUG][63] felix/feature_detect.go 106: Refreshing detected iptables features | |
2021-12-07 00:26:11.349 [DEBUG][63] felix/feature_detect.go 166: Ran iptables --version rawVersion="iptables v1.8.4 (legacy)\n" | |
2021-12-07 00:26:11.349 [DEBUG][63] felix/feature_detect.go 179: Parsed iptables version version=1.8.4 | |
2021-12-07 00:26:11.350 [DEBUG][63] felix/lib.go 105: Raw kernel version rawVersion="Linux version 5.10.0-8-amd64 ([email protected]) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.46-4 (2021-08-03)\n" | |
2021-12-07 00:26:11.350 [DEBUG][63] felix/lib.go 113: Parsed kernel version version=5.10.0-8 | |
2021-12-07 00:26:11.350 [INFO][63] felix/feature_detect.go 153: Updating detected iptables features features=iptables.Features{SNATFullyRandom:true, MASQFullyRandom:true, RestoreSupportsLock:true, ChecksumOffloadBroken:false} iptablesVersion=1.8.4 kernelVersion=5.10.0-8 | |
2021-12-07 00:26:11.350 [DEBUG][63] felix/int_dataplane.go 379: Calico implementation of iptables lock disabled (because detected version of iptables-restore will use its own implementation). | |
2021-12-07 00:26:11.350 [INFO][63] felix/table.go 334: Calculated old-insert detection regex. pattern="(?:-j|--jump) cali-|(?:-j|--jump) califw-|(?:-j|--jump) calitw-|(?:-j|--jump) califh-|(?:-j|--jump) calith-|(?:-j|--jump) calipi-|(?:-j|--jump) calipo-|(?:-j|--jump) felix-" | |
2021-12-07 00:26:11.350 [INFO][63] felix/table.go 447: Enabling iptables-in-nftables-mode workarounds. | |
2021-12-07 00:26:11.350 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-restore", "iptables-restore"} command="iptables-nft-restore" ipVersion=0x4 saveOrRestore="restore" | |
2021-12-07 00:26:11.351 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-save", "iptables-save"} command="iptables-nft-save" ipVersion=0x4 saveOrRestore="save" | |
2021-12-07 00:26:11.351 [INFO][63] felix/table.go 334: Calculated old-insert detection regex. pattern="(?:-j|--jump) cali-|(?:-j|--jump) califw-|(?:-j|--jump) calitw-|(?:-j|--jump) califh-|(?:-j|--jump) calith-|(?:-j|--jump) calipi-|(?:-j|--jump) calipo-|(?:-j|--jump) felix-|-A POSTROUTING .* felix-masq-ipam-pools .*|-A POSTROUTING -o tunl0 -m addrtype ! --src-type LOCAL --limit-iface-out -m addrtype --src-type LOCAL -j MASQUERADE" | |
2021-12-07 00:26:11.351 [INFO][63] felix/table.go 447: Enabling iptables-in-nftables-mode workarounds. | |
2021-12-07 00:26:11.351 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-restore", "iptables-restore"} command="iptables-nft-restore" ipVersion=0x4 saveOrRestore="restore" | |
2021-12-07 00:26:11.351 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-save", "iptables-save"} command="iptables-nft-save" ipVersion=0x4 saveOrRestore="save" | |
2021-12-07 00:26:11.351 [INFO][63] felix/table.go 334: Calculated old-insert detection regex. pattern="(?:-j|--jump) cali-|(?:-j|--jump) califw-|(?:-j|--jump) calitw-|(?:-j|--jump) califh-|(?:-j|--jump) calith-|(?:-j|--jump) calipi-|(?:-j|--jump) calipo-|(?:-j|--jump) felix-" | |
2021-12-07 00:26:11.351 [INFO][63] felix/table.go 447: Enabling iptables-in-nftables-mode workarounds. | |
2021-12-07 00:26:11.351 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-restore", "iptables-restore"} command="iptables-nft-restore" ipVersion=0x4 saveOrRestore="restore" | |
2021-12-07 00:26:11.352 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-save", "iptables-save"} command="iptables-nft-save" ipVersion=0x4 saveOrRestore="save" | |
2021-12-07 00:26:11.352 [INFO][63] felix/table.go 334: Calculated old-insert detection regex. pattern="(?:-j|--jump) cali-|(?:-j|--jump) califw-|(?:-j|--jump) calitw-|(?:-j|--jump) califh-|(?:-j|--jump) calith-|(?:-j|--jump) calipi-|(?:-j|--jump) calipo-|(?:-j|--jump) felix-" | |
2021-12-07 00:26:11.352 [INFO][63] felix/table.go 447: Enabling iptables-in-nftables-mode workarounds. | |
2021-12-07 00:26:11.352 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-restore", "iptables-restore"} command="iptables-nft-restore" ipVersion=0x4 saveOrRestore="restore" | |
2021-12-07 00:26:11.352 [INFO][63] felix/feature_detect.go 275: Looked up iptables command backendMode="nft" candidates=[]string{"iptables-nft-save", "iptables-save"} command="iptables-nft-save" ipVersion=0x4 saveOrRestore="save" | |
2021-12-07 00:26:11.352 [INFO][63] felix/route_table.go 266: Calculated interface name regexp ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.352 [INFO][63] felix/route_table.go 259: No interface matches required for routetable ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.352 [DEBUG][63] felix/int_dataplane.go 1013: registering ManagerWithRouteTables manager="" | |
2021-12-07 00:26:11.353 [DEBUG][63] felix/lib.go 105: Raw kernel version rawVersion="Linux version 5.10.0-8-amd64 ([email protected]) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.46-4 (2021-08-03)\n" | |
2021-12-07 00:26:11.353 [DEBUG][63] felix/lib.go 113: Parsed kernel version version=5.10.0-8 | |
2021-12-07 00:26:11.353 [INFO][63] felix/vxlan_mgr.go 439: VXLAN tunnel device thread started. mtu=1210 wait=10s xsumBroken=false | |
2021-12-07 00:26:11.353 [DEBUG][63] felix/vxlan_mgr.go 444: Missing local VTEP information, retrying... | |
2021-12-07 00:26:11.353 [DEBUG][63] felix/xdp_state.go 112: Created new xdpState. | |
2021-12-07 00:26:11.353 [INFO][63] felix/int_dataplane.go 469: XDP acceleration enabled. | |
2021-12-07 00:26:11.354 [DEBUG][63] felix/sockmap_state.go 38: Created new Sockmap state. | |
2021-12-07 00:26:11.354 [DEBUG][63] felix/sockmap_state.go 192: Wiping old sockmap state. | |
2021-12-07 00:26:11.354 [DEBUG][63] felix/bpf.go 154: running: bpftool prog detach pinned /sys/fs/bpf/calico/sockmap/calico_sk_msg_v1 msg_verdict pinned /sys/fs/bpf/calico/sockmap/calico_sock_map_v1 | |
2021-12-07 00:26:11.355 [DEBUG][63] felix/sockmap_state.go 195: Failed to detach sk_msg program from sockmap. error=failed to detach sk_msg prog from sockmap: exit status 255 | |
Error: bpf obj get (/sys/fs/bpf/calico/sockmap/calico_sk_msg_v1): No such file or directory | |
2021-12-07 00:26:11.355 [DEBUG][63] felix/bpf.go 154: running: bpftool cgroup detach /run/calico/cgroup sock_ops pinned /sys/fs/bpf/calico/sockmap/calico_sockops_v1 | |
2021-12-07 00:26:11.357 [DEBUG][63] felix/sockmap_state.go 199: Failed to detach sockops program from cgroup. error=failed to detach sockops prog from cgroup: exit status 255 | |
Error: bpf obj get (/sys/fs/bpf/calico/sockmap/calico_sockops_v1): No such file or directory | |
2021-12-07 00:26:11.357 [DEBUG][63] felix/sockmap_state.go 203: Failed to remove sockops program. error=remove /sys/fs/bpf/calico/sockmap/calico_sockops_v1: no such file or directory | |
2021-12-07 00:26:11.357 [DEBUG][63] felix/sockmap_state.go 207: Failed to remove sk_msg program. error=remove /sys/fs/bpf/calico/sockmap/calico_sk_msg_v1: no such file or directory | |
2021-12-07 00:26:11.357 [DEBUG][63] felix/sockmap_state.go 211: Failed to remove sockmap endpoints map. error=remove /sys/fs/bpf/calico/sockmap/calico_sk_endpoints_v1: no such file or directory | |
2021-12-07 00:26:11.358 [DEBUG][63] felix/bpf.go 154: running: bpftool map --json getnext pinned /sys/fs/bpf/calico/sockmap/calico_sock_map_v1 | |
2021-12-07 00:26:11.358 [DEBUG][63] felix/sockmap_state.go 215: Failed to remove sockmap program. error=failed to clear sock map: bpf obj get (/sys/fs/bpf/calico/sockmap/calico_sock_map_v1): No such file or directory | |
2021-12-07 00:26:11.359 [INFO][63] felix/connecttime.go 51: Running bpftool to look up programs attached to cgroup args=[]string{"bpftool", "-j", "-p", "cgroup", "show", "/run/calico/cgroup"} | |
2021-12-07 00:26:11.359 [DEBUG][63] felix/cleanup.go 33: Trying to clean up any left-over BPF state from a previous run. | |
2021-12-07 00:26:11.360 [DEBUG][63] felix/cleanup.go 53: Found calico map name="calico_failsafe" | |
2021-12-07 00:26:11.364 [INFO][63] felix/route_table.go 266: Calculated interface name regexp ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.364 [DEBUG][63] felix/int_dataplane.go 1013: registering ManagerWithRouteTables manager="" | |
2021-12-07 00:26:11.364 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="all-ipam-pools" setType="hash:net" | |
2021-12-07 00:26:11.364 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="masq-ipam-pools" setType="hash:net" | |
2021-12-07 00:26:11.364 [INFO][63] felix/route_table.go 266: Calculated interface name regexp ifaceRegex="^wireguard.cali$" ipVersion=0x4 tableIndex=1 | |
2021-12-07 00:26:11.364 [DEBUG][63] felix/int_dataplane.go 1013: registering ManagerWithRouteTables manager="" | |
2021-12-07 00:26:11.364 [INFO][63] felix/int_dataplane.go 837: Registering to report health. | |
2021-12-07 00:26:11.365 [INFO][63] felix/int_dataplane.go 1682: attempted to modprobe nf_conntrack_proto_sctp error=exit status 1 output="" | |
2021-12-07 00:26:11.365 [INFO][63] felix/int_dataplane.go 1684: Making sure IPv4 forwarding is enabled. | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-failsafe-in" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="raw" | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-failsafe-out" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="raw" | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-PREROUTING" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-from-host-endpoint" | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-from-host-endpoint" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="raw" | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-wireguard-incoming-mark" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="raw" | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-to-host-endpoint" | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-to-host-endpoint" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="PREROUTING" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-PREROUTING" | |
2021-12-07 00:26:11.366 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-PREROUTING" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="raw" | |
2021-12-07 00:26:11.366 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="OUTPUT" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-OUTPUT" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-OUTPUT" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="raw" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/static.go 558: Adding workload match rules ifacePrefix="cali" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/static.go 274: Adding workload match rules ifacePrefix="cali" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/static.go 655: Adding workload match rules ifacePrefix="cali" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-FORWARD" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-from-hep-forward" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-from-hep-forward" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-from-wl-dispatch" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-from-wl-dispatch" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-to-wl-dispatch" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-to-wl-dispatch" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-to-hep-forward" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-to-hep-forward" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-cidr-block" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-cidr-block" | |
2021-12-07 00:26:11.367 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.367 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-INPUT" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.368 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-wl-to-host" | |
2021-12-07 00:26:11.368 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-wl-to-host" | |
2021-12-07 00:26:11.368 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-from-host-endpoint" | |
2021-12-07 00:26:11.368 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-from-host-endpoint" | |
2021-12-07 00:26:11.368 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.368 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-wl-to-host" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.368 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-from-wl-dispatch" | |
2021-12-07 00:26:11.368 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.368 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-failsafe-in" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.368 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.368 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.368 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-to-host-endpoint" | |
2021-12-07 00:26:11.369 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-to-host-endpoint" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.369 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-failsafe-out" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="FORWARD" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-FORWARD" | |
2021-12-07 00:26:11.369 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-FORWARD" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="INPUT" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-INPUT" | |
2021-12-07 00:26:11.369 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-INPUT" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="OUTPUT" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-OUTPUT" | |
2021-12-07 00:26:11.369 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-OUTPUT" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 480: Updating rule appends chainName="FORWARD" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.369 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="filter" | |
2021-12-07 00:26:11.369 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-PREROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-fip-dnat" | |
2021-12-07 00:26:11.370 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-fip-dnat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="nat" | |
2021-12-07 00:26:11.370 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-POSTROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-fip-snat" | |
2021-12-07 00:26:11.370 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-fip-snat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-nat-outgoing" | |
2021-12-07 00:26:11.370 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-nat-outgoing" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="nat" | |
2021-12-07 00:26:11.370 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-OUTPUT" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-fip-dnat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="nat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="PREROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-PREROUTING" | |
2021-12-07 00:26:11.370 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-PREROUTING" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="nat" | |
2021-12-07 00:26:11.370 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="POSTROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-POSTROUTING" | |
2021-12-07 00:26:11.371 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-POSTROUTING" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="nat" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="OUTPUT" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-OUTPUT" | |
2021-12-07 00:26:11.371 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-OUTPUT" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="nat" | |
2021-12-07 00:26:11.371 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-failsafe-in" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="mangle" | |
2021-12-07 00:26:11.371 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-failsafe-out" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="mangle" | |
2021-12-07 00:26:11.371 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-PREROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-from-host-endpoint" | |
2021-12-07 00:26:11.371 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-from-host-endpoint" | |
2021-12-07 00:26:11.371 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="mangle" | |
2021-12-07 00:26:11.372 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-POSTROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-to-host-endpoint" | |
2021-12-07 00:26:11.372 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-to-host-endpoint" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="mangle" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="PREROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-PREROUTING" | |
2021-12-07 00:26:11.372 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-PREROUTING" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="mangle" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 459: Updating rule insertions chainName="POSTROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-POSTROUTING" | |
2021-12-07 00:26:11.372 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-POSTROUTING" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="insertion" table="mangle" | |
2021-12-07 00:26:11.372 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 16 00 value 1 | |
2021-12-07 00:26:11.373 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 11 00 44 00 value 1 | |
2021-12-07 00:26:11.374 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 b3 00 value 1 | |
2021-12-07 00:26:11.374 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 4b 09 value 1 | |
2021-12-07 00:26:11.375 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 4c 09 value 1 | |
2021-12-07 00:26:11.383 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 61 15 value 1 | |
2021-12-07 00:26:11.383 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 2b 19 value 1 | |
2021-12-07 00:26:11.384 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 0a 1a value 1 | |
2021-12-07 00:26:11.385 [DEBUG][63] felix/bpf.go 154: running: bpftool map update pinned /sys/fs/bpf/calico/calico_failsafe_ports_v1 key hex 06 00 0b 1a value 1 | |
2021-12-07 00:26:11.386 [INFO][63] felix/int_dataplane.go 1431: Set XDP failsafe ports: [{Net: Protocol:tcp Port:22} {Net: Protocol:udp Port:68} {Net: Protocol:tcp Port:179} {Net: Protocol:tcp Port:2379} {Net: Protocol:tcp Port:2380} {Net: Protocol:tcp Port:5473} {Net: Protocol:tcp Port:6443} {Net: Protocol:tcp Port:6666} {Net: Protocol:tcp Port:6667}] | |
2021-12-07 00:26:11.386 [INFO][63] felix/int_dataplane.go 1121: IPIP enabled, starting thread to keep tunnel configuration in sync. | |
2021-12-07 00:26:11.386 [INFO][63] felix/int_dataplane.go 1460: Started internal iptables dataplane driver loop | |
2021-12-07 00:26:11.386 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.386 [INFO][63] felix/int_dataplane.go 1470: Will refresh IP sets on timer interval=1m30s | |
2021-12-07 00:26:11.386 [INFO][63] felix/int_dataplane.go 1480: Will refresh routes on timer interval=1m30s | |
2021-12-07 00:26:11.386 [INFO][63] felix/int_dataplane.go 1490: Will refresh XDP on timer interval=1m30s | |
2021-12-07 00:26:11.386 [INFO][63] felix/ipip_mgr.go 84: IPIP thread started. | |
2021-12-07 00:26:11.386 [DEBUG][63] felix/ipip_mgr.go 102: Configuring IPIP tunnel mtu=1210 tunnelAddr=<nil> | |
2021-12-07 00:26:11.386 [DEBUG][63] felix/ipip_mgr.go 154: Setting local IPv4 address on link. addr=<nil> link="tunl0" | |
2021-12-07 00:26:11.386 [DEBUG][63] felix/ipip_mgr.go 196: Address set. addr=<nil> link="tunl0" | |
2021-12-07 00:26:11.387 [INFO][63] felix/int_dataplane.go 1913: Started internal status report thread | |
2021-12-07 00:26:11.387 [INFO][63] felix/int_dataplane.go 1915: Process status reports disabled | |
2021-12-07 00:26:11.387 [INFO][63] felix/iface_monitor.go 100: Interface monitoring thread started. | |
2021-12-07 00:26:11.387 [INFO][63] felix/iface_monitor.go 118: Subscribed to netlink updates. | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 356: Resyncing interface state. | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 255: storeAndNotifyLink called ifaceExists=true link=&netlink.Device{LinkAttrs:netlink.LinkAttrs{Index:1, MTU:65536, TxQLen:1000, Name:"lo", HardwareAddr:net.HardwareAddr(nil), Flags:0x5, RawFlags:0x10049, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cc840), Promisc:0, Allmulti:0, Multi:0, Xdp:(*netlink.LinkXdp)(0xc000760498), EncapType:"loopback", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}} | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 287: storeAndNotifyLinkInner called ifaceExists=true ifaceName="lo" link=&netlink.Device{LinkAttrs:netlink.LinkAttrs{Index:1, MTU:65536, TxQLen:1000, Name:"lo", HardwareAddr:net.HardwareAddr(nil), Flags:0x5, RawFlags:0x10049, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cc840), Promisc:0, Allmulti:0, Multi:0, Xdp:(*netlink.LinkXdp)(0xc000760498), EncapType:"loopback", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}} | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 311: Interface now up ifaceName="lo" | |
2021-12-07 00:26:11.387 [INFO][63] felix/int_dataplane.go 1036: Linux interface state changed. ifIndex=1 ifaceName="lo" state="up" | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 337: Ignoring non-local route. route={Ifindex: 1 Dst: 127.0.0.0/32 Src: 127.0.0.1 Gw: <nil> Flags: [] Table: 255} | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 337: Ignoring non-local route. route={Ifindex: 1 Dst: 127.255.255.255/32 Src: 127.0.0.1 Gw: <nil> Flags: [] Table: 255} | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 347: Detected interface address change while notifying link new=set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}} old=<nil> | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 235: notifyIfaceAddrs ifIndex=1 | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 237: Known interface ifIndex=1 | |
2021-12-07 00:26:11.387 [INFO][63] felix/int_dataplane.go 1071: Linux interface addrs changed. addrs=set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}} ifaceName="lo" | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 255: storeAndNotifyLink called ifaceExists=true link=&netlink.Device{LinkAttrs:netlink.LinkAttrs{Index:2, MTU:1500, TxQLen:1000, Name:"eth0", HardwareAddr:net.HardwareAddr{0x0, 0x16, 0x3e, 0xff, 0x4f, 0x4d}, Flags:0x13, RawFlags:0x11043, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cc9c0), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc0007604b0), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x6, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}} | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 287: storeAndNotifyLinkInner called ifaceExists=true ifaceName="eth0" link=&netlink.Device{LinkAttrs:netlink.LinkAttrs{Index:2, MTU:1500, TxQLen:1000, Name:"eth0", HardwareAddr:net.HardwareAddr{0x0, 0x16, 0x3e, 0xff, 0x4f, 0x4d}, Flags:0x13, RawFlags:0x11043, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cc9c0), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc0007604b0), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x6, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}} | |
2021-12-07 00:26:11.387 [DEBUG][63] felix/iface_monitor.go 311: Interface now up ifaceName="eth0" | |
2021-12-07 00:26:11.387 [INFO][63] felix/int_dataplane.go 1036: Linux interface state changed. ifIndex=2 ifaceName="eth0" state="up" | |
2021-12-07 00:26:11.386 [INFO][63] felix/daemon.go 397: Connect to the dataplane driver. | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 337: Ignoring non-local route. route={Ifindex: 2 Dst: 103.175.234.128/32 Src: 103.175.234.131 Gw: <nil> Flags: [] Table: 255} | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 337: Ignoring non-local route. route={Ifindex: 2 Dst: 103.175.234.255/32 Src: 103.175.234.131 Gw: <nil> Flags: [] Table: 255} | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 337: Ignoring non-local route. route={Ifindex: 2 Dst: ff00::/8 Src: <nil> Gw: <nil> Flags: [] Table: 255} | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 347: Detected interface address change while notifying link new=set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}} old=<nil> | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 235: notifyIfaceAddrs ifIndex=2 | |
2021-12-07 00:26:11.388 [INFO][63] felix/daemon.go 475: using resource updates where applicable | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 237: Known interface ifIndex=2 | |
2021-12-07 00:26:11.388 [INFO][63] felix/int_dataplane.go 1071: Linux interface addrs changed. addrs=set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}} ifaceName="eth0" | |
2021-12-07 00:26:11.388 [INFO][63] felix/daemon.go 478: Created Syncer syncer=&watchersyncer.watcherSyncer{status:0x0, watcherCaches:[]*watchersyncer.watcherCache{(*watchersyncer.watcherCache)(0xc0007ac100), (*watchersyncer.watcherCache)(0xc0007ac180), (*watchersyncer.watcherCache)(0xc0007ac200), (*watchersyncer.watcherCache)(0xc0007ac280), (*watchersyncer.watcherCache)(0xc0007ac300), (*watchersyncer.watcherCache)(0xc0007ac380), (*watchersyncer.watcherCache)(0xc0007ac400), (*watchersyncer.watcherCache)(0xc0007ac480), (*watchersyncer.watcherCache)(0xc0007ac500), (*watchersyncer.watcherCache)(0xc0007ac580), (*watchersyncer.watcherCache)(0xc0007ac600), (*watchersyncer.watcherCache)(0xc0007ac680), (*watchersyncer.watcherCache)(0xc0007ac700), (*watchersyncer.watcherCache)(0xc0007ac780), (*watchersyncer.watcherCache)(0xc0007ac800)}, results:(chan interface {})(0xc000136360), numSynced:0, callbacks:(*calc.SyncerCallbacksDecoupler)(0xc0007260c8), wgwc:(*sync.WaitGroup)(nil), wgws:(*sync.WaitGroup)(nil), cancel:(context.CancelFunc)(nil)} | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 255: storeAndNotifyLink called ifaceExists=true link=&netlink.Tuntap{LinkAttrs:netlink.LinkAttrs{Index:3, MTU:1280, TxQLen:500, Name:"tailscale0", HardwareAddr:net.HardwareAddr(nil), Flags:0x19, RawFlags:0x110d1, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004ccb40), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc0007604c8), EncapType:"none", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, Mode:0x1, Flags:0x0, NonPersist:true, Queues:0, Fds:[]*os.File(nil), Owner:0x0, Group:0x0} | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 287: storeAndNotifyLinkInner called ifaceExists=true ifaceName="tailscale0" link=&netlink.Tuntap{LinkAttrs:netlink.LinkAttrs{Index:3, MTU:1280, TxQLen:500, Name:"tailscale0", HardwareAddr:net.HardwareAddr(nil), Flags:0x19, RawFlags:0x110d1, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004ccb40), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc0007604c8), EncapType:"none", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, Mode:0x1, Flags:0x0, NonPersist:true, Queues:0, Fds:[]*os.File(nil), Owner:0x0, Group:0x0} | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 311: Interface now up ifaceName="tailscale0" | |
2021-12-07 00:26:11.388 [INFO][63] felix/daemon.go 482: Starting the datastore Syncer | |
2021-12-07 00:26:11.388 [INFO][63] felix/int_dataplane.go 1036: Linux interface state changed. ifIndex=3 ifaceName="tailscale0" state="up" | |
2021-12-07 00:26:11.388 [INFO][63] felix/watchersyncer.go 89: Start called | |
2021-12-07 00:26:11.388 [INFO][63] felix/calc_graph.go 115: Creating calculation graph, filtered to hostname node3.tpurchas.gmail.com.beta.tailscale.net | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 337: Ignoring non-local route. route={Ifindex: 3 Dst: ff00::/8 Src: <nil> Gw: <nil> Flags: [] Table: 255} | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x1a9c9a0) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 347: Detected interface address change while notifying link new=set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}} old=<nil> | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x1a9c9a0) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 235: notifyIfaceAddrs ifIndex=3 | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x1a9caa0) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 237: Known interface ifIndex=3 | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x1a9caa0) | |
2021-12-07 00:26:11.388 [INFO][63] felix/int_dataplane.go 1071: Linux interface addrs changed. addrs=set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}} ifaceName="tailscale0" | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x1a9c820) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x1a9c820) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 255: storeAndNotifyLink called ifaceExists=true link=&netlink.Iptun{LinkAttrs:netlink.LinkAttrs{Index:4, MTU:1210, TxQLen:1000, Name:"tunl0", HardwareAddr:net.HardwareAddr(nil), Flags:0x1, RawFlags:0x100c1, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cccc0), Promisc:0, Allmulti:0, Multi:0, Xdp:(*netlink.LinkXdp)(0xc0007604e0), EncapType:"ipip", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, Ttl:0x0, Tos:0x0, PMtuDisc:0x0, Link:0x0, Local:net.IP{0x0, 0x0, 0x0, 0x0}, Remote:net.IP{0x0, 0x0, 0x0, 0x0}, EncapSport:0x0, EncapDport:0x0, EncapType:0x0, EncapFlags:0x0, FlowBased:false} | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.PolicyKey: (dispatcher.UpdateHandler)(0x1a9c820) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ProfileRulesKey: (dispatcher.UpdateHandler)(0x1a9c820) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 287: storeAndNotifyLinkInner called ifaceExists=true ifaceName="tunl0" link=&netlink.Iptun{LinkAttrs:netlink.LinkAttrs{Index:4, MTU:1210, TxQLen:1000, Name:"tunl0", HardwareAddr:net.HardwareAddr(nil), Flags:0x1, RawFlags:0x100c1, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cccc0), Promisc:0, Allmulti:0, Multi:0, Xdp:(*netlink.LinkXdp)(0xc0007604e0), EncapType:"ipip", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, Ttl:0x0, Tos:0x0, PMtuDisc:0x0, Link:0x0, Local:net.IP{0x0, 0x0, 0x0, 0x0}, Remote:net.IP{0x0, 0x0, 0x0, 0x0}, EncapSport:0x0, EncapDport:0x0, EncapType:0x0, EncapFlags:0x0, FlowBased:false} | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ProfileLabelsKey: (dispatcher.UpdateHandler)(0x1a9c820) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ProfileTagsKey: (dispatcher.UpdateHandler)(0x1a9c820) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 311: Interface now up ifaceName="tunl0" | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ResourceKey: (dispatcher.UpdateHandler)(0x1a61360) | |
2021-12-07 00:26:11.388 [INFO][63] felix/int_dataplane.go 1036: Linux interface state changed. ifIndex=4 ifaceName="tunl0" state="up" | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ProfileTagsKey: (dispatcher.UpdateHandler)(0x19ddc60) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ProfileLabelsKey: (dispatcher.UpdateHandler)(0x19ddc60) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x19ddc60) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x19ddc60) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.NetworkSetKey: (dispatcher.UpdateHandler)(0x19ddc60) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 347: Detected interface address change while notifying link new=set.mapSet{} old=<nil> | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.PolicyKey: (dispatcher.UpdateHandler)(0x1a9d080) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 235: notifyIfaceAddrs ifIndex=4 | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x1a9d080) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 237: Known interface ifIndex=4 | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostEndpointKey: (dispatcher.UpdateHandler)(0x1a9d080) | |
2021-12-07 00:26:11.388 [INFO][63] felix/int_dataplane.go 1071: Linux interface addrs changed. addrs=set.mapSet{} ifaceName="tunl0" | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostIPKey: (dispatcher.UpdateHandler)(0x1a9cc40) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 255: storeAndNotifyLink called ifaceExists=true link=&netlink.Vxlan{LinkAttrs:netlink.LinkAttrs{Index:7, MTU:1210, TxQLen:0, Name:"vxlan.calico", HardwareAddr:net.HardwareAddr{0x66, 0x79, 0xe9, 0x1f, 0x60, 0xa0}, Flags:0x13, RawFlags:0x11043, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cce40), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc0007604f8), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, VxlanId:4096, VtepDevIndex:3, SrcAddr:net.IP{0x64, 0x5b, 0x69, 0x54}, Group:net.IP(nil), TTL:0, TOS:0, Learning:false, Proxy:false, RSC:false, L2miss:false, L3miss:false, UDPCSum:true, UDP6ZeroCSumTx:false, UDP6ZeroCSumRx:false, NoAge:false, GBP:false, FlowBased:false, Age:300, Limit:0, Port:4789, PortLow:0, PortHigh:0} | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.IPPoolKey: (dispatcher.UpdateHandler)(0x1a9cc40) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 287: storeAndNotifyLinkInner called ifaceExists=true ifaceName="vxlan.calico" link=&netlink.Vxlan{LinkAttrs:netlink.LinkAttrs{Index:7, MTU:1210, TxQLen:0, Name:"vxlan.calico", HardwareAddr:net.HardwareAddr{0x66, 0x79, 0xe9, 0x1f, 0x60, 0xa0}, Flags:0x13, RawFlags:0x11043, ParentIndex:0, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004cce40), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc0007604f8), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x0, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, VxlanId:4096, VtepDevIndex:3, SrcAddr:net.IP{0x64, 0x5b, 0x69, 0x54}, Group:net.IP(nil), TTL:0, TOS:0, Learning:false, Proxy:false, RSC:false, L2miss:false, L3miss:false, UDPCSum:true, UDP6ZeroCSumTx:false, UDP6ZeroCSumRx:false, NoAge:false, GBP:false, FlowBased:false, Age:300, Limit:0, Port:4789, PortLow:0, PortHigh:0} | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.WireguardKey: (dispatcher.UpdateHandler)(0x1a9cc40) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 311: Interface now up ifaceName="vxlan.calico" | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ResourceKey: (dispatcher.UpdateHandler)(0x1a9cc40) | |
2021-12-07 00:26:11.388 [INFO][63] felix/int_dataplane.go 1036: Linux interface state changed. ifIndex=7 ifaceName="vxlan.calico" state="up" | |
2021-12-07 00:26:11.388 [INFO][63] felix/l3_route_resolver.go 143: Creating L3 route resolver | |
2021-12-07 00:26:11.388 [INFO][63] felix/l3_route_resolver.go 162: Registering L3 route resolver (node resources on) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ResourceKey: (dispatcher.UpdateHandler)(0x1a9cd60) | |
2021-12-07 00:26:11.388 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.IPPoolKey: (dispatcher.UpdateHandler)(0x1a9cea0) | |
2021-12-07 00:26:11.388 [DEBUG][63] felix/iface_monitor.go 347: Detected interface address change while notifying link new=set.mapSet{"172.16.98.192":set.empty{}} old=<nil> | |
2021-12-07 00:26:11.389 [INFO][63] felix/l3_route_resolver.go 173: Registering for L3 route updates routeSource="CalicoIPAM" | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 235: notifyIfaceAddrs ifIndex=7 | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.BlockKey: (dispatcher.UpdateHandler)(0x1a9cfe0) | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 237: Known interface ifIndex=7 | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.WorkloadEndpointKey: (dispatcher.UpdateHandler)(0x1a9cf40) | |
2021-12-07 00:26:11.389 [INFO][63] felix/int_dataplane.go 1071: Linux interface addrs changed. addrs=set.mapSet{"172.16.98.192":set.empty{}} ifaceName="vxlan.calico" | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ResourceKey: (dispatcher.UpdateHandler)(0x1a9d440) | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 255: storeAndNotifyLink called ifaceExists=true link=&netlink.Veth{LinkAttrs:netlink.LinkAttrs{Index:130, MTU:1210, TxQLen:0, Name:"cali3879dac72fe", HardwareAddr:net.HardwareAddr{0xee, 0xee, 0xee, 0xee, 0xee, 0xee}, Flags:0x13, RawFlags:0x11043, ParentIndex:4, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004ccfc0), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc000760558), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x6, PhysSwitchID:0, NetNsID:3, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, PeerName:"", PeerHardwareAddr:net.HardwareAddr(nil), PeerNamespace:interface {}(nil)} | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostConfigKey: (dispatcher.UpdateHandler)(0x1a9d580) | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.GlobalConfigKey: (dispatcher.UpdateHandler)(0x1a9cb40) | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 287: storeAndNotifyLinkInner called ifaceExists=true ifaceName="cali3879dac72fe" link=&netlink.Veth{LinkAttrs:netlink.LinkAttrs{Index:130, MTU:1210, TxQLen:0, Name:"cali3879dac72fe", HardwareAddr:net.HardwareAddr{0xee, 0xee, 0xee, 0xee, 0xee, 0xee}, Flags:0x13, RawFlags:0x11043, ParentIndex:4, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc0004ccfc0), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc000760558), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x6, PhysSwitchID:0, NetNsID:3, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, PeerName:"", PeerHardwareAddr:net.HardwareAddr(nil), PeerNamespace:interface {}(nil)} | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostConfigKey: (dispatcher.UpdateHandler)(0x1a9cb40) | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ReadyFlagKey: (dispatcher.UpdateHandler)(0x1a9cb40) | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 311: Interface now up ifaceName="cali3879dac72fe" | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.ProfileLabelsKey: (dispatcher.UpdateHandler)(0x1a9d220) | |
2021-12-07 00:26:11.389 [INFO][63] felix/int_dataplane.go 1036: Linux interface state changed. ifIndex=130 ifaceName="cali3879dac72fe" state="up" | |
2021-12-07 00:26:11.389 [INFO][63] felix/dispatcher.go 68: Registering listener for type model.HostIPKey: (dispatcher.UpdateHandler)(0x1a9d2c0) | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 347: Detected interface address change while notifying link new=set.mapSet{} old=<nil> | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 235: notifyIfaceAddrs ifIndex=130 | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/watchersyncer.go 135: Sending initial status event and starting watchers | |
2021-12-07 00:26:11.389 [DEBUG][63] felix/iface_monitor.go 237: Known interface ifIndex=130 | |
2021-12-07 00:26:11.389 [INFO][63] felix/watchersyncer.go 127: Sending status update Status=wait-for-ready | |
... dropped 132 logs ... | |
2021-12-07 00:26:11.395 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.395 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.395 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.395 [DEBUG][63] felix/felixnodeprocessor.go 268: Sync starting called on Felix node update processor | |
2021-12-07 00:26:11.395 [DEBUG][63] felix/k8s.go 642: Performing 'List' for Node model.ResourceListOptions | |
2021-12-07 00:26:11.395 [DEBUG][63] felix/node.go 134: Received List request Resource="Node" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.396 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/k8s.go 642: Performing 'List' for Profile model.ResourceListOptions | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/profile.go 160: Received List request Resource="Profile" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.396 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/k8s.go 642: Performing 'List' for WorkloadEndpoint model.ResourceListOptions | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/workloadendpoint.go 223: Received List request on WorkloadEndpoint type | |
2021-12-07 00:26:11.396 [DEBUG][63] felix/workloadendpoint.go 297: Received List request Resource="WorkloadEndpoint" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/networkpolicies" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/networkpolicies" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/networkpolicies" | |
2021-12-07 00:26:11.397 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/networkpolicies" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/networkpolicies" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/k8s.go 642: Performing 'List' for NetworkPolicy model.ResourceListOptions | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/customresource.go 239: Received List request ListInterface=NetworkPolicy Resource="NetworkPolicies" Type="CustomResource" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/networksets" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/networksets" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/networksets" | |
2021-12-07 00:26:11.397 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/networksets" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/networksets" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/k8s.go 642: Performing 'List' for NetworkSet model.ResourceListOptions | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/customresource.go 239: Received List request ListInterface=NetworkSet Resource="NetworkSets" Type="CustomResource" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/hostendpoints" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/hostendpoints" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/hostendpoints" | |
2021-12-07 00:26:11.397 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/hostendpoints" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/hostendpoints" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/conflictresolvingcacheproc.go 254: Clearing cache for resync | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/k8s.go 642: Performing 'List' for HostEndpoint model.ResourceListOptions | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/customresource.go 239: Received List request ListInterface=HostEndpoint Resource="HostEndpoints" Type="CustomResource" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/bgpconfigurations" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/bgpconfigurations" | |
2021-12-07 00:26:11.397 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/bgpconfigurations" | |
2021-12-07 00:26:11.397 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/bgpconfigurations" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/k8s.go 642: Performing 'List' for BGPConfiguration model.ResourceListOptions | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/customresource.go 239: Received List request ListInterface=BGPConfiguration Resource="BGPConfigurations" Type="CustomResource" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/kubernetesnetworkpolicies" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/kubernetesnetworkpolicies" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/kubernetesnetworkpolicies" | |
2021-12-07 00:26:11.398 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/kubernetesnetworkpolicies" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/kubernetesnetworkpolicies" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/k8s.go 642: Performing 'List' for KubernetesNetworkPolicy model.ResourceListOptions | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/kubenetworkpolicy.go 95: Received List request Resource="KubeNetworkPolicy" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/kubernetesendpointslices" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/kubernetesendpointslices" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/kubernetesendpointslices" | |
2021-12-07 00:26:11.398 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/kubernetesendpointslices" | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/k8s.go 642: Performing 'List' for KubernetesEndpointSlice model.ResourceListOptions | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/route_table.go 311: Interface up, marking for route sync ifaceName="cali3879dac72fe" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/wireguard.go 254: Ignoring interface state change, not the wireguard interface. ifaceName="cali3879dac72fe" wireguardIfaceName="wireguard.cali" | |
2021-12-07 00:26:11.398 [INFO][63] felix/int_dataplane.go 1521: Received interface update msg=&intdataplane.ifaceUpdate{Name:"cali96535058867", State:"up", Index:131} | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceUpdate{Name:"cali96535058867", State:"up", Index:131} | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceUpdate{Name:"cali96535058867", State:"up", Index:131} | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/endpoint_mgr.go 342: Interface state changed. update=&intdataplane.ifaceUpdate{Name:"cali96535058867", State:"up", Index:131} | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceUpdate{Name:"cali96535058867", State:"up", Index:131} | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/route_table.go 307: Ignoring interface state change, not an interface managed by this routetable. ifaceName="cali96535058867" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/route_table.go 307: Ignoring interface state change, not an interface managed by this routetable. ifaceName="cali96535058867" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.398 [DEBUG][63] felix/route_table.go 311: Interface up, marking for route sync ifaceName="cali96535058867" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/wireguard.go 254: Ignoring interface state change, not the wireguard interface. ifaceName="cali96535058867" wireguardIfaceName="wireguard.cali" | |
2021-12-07 00:26:11.399 [INFO][63] felix/int_dataplane.go 1521: Received interface update msg=&intdataplane.ifaceUpdate{Name:"caliac313fa0db4", State:"up", Index:134} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceUpdate{Name:"caliac313fa0db4", State:"up", Index:134} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceUpdate{Name:"caliac313fa0db4", State:"up", Index:134} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/endpoint_mgr.go 342: Interface state changed. update=&intdataplane.ifaceUpdate{Name:"caliac313fa0db4", State:"up", Index:134} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceUpdate{Name:"caliac313fa0db4", State:"up", Index:134} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/route_table.go 307: Ignoring interface state change, not an interface managed by this routetable. ifaceName="caliac313fa0db4" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/route_table.go 307: Ignoring interface state change, not an interface managed by this routetable. ifaceName="caliac313fa0db4" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/route_table.go 311: Interface up, marking for route sync ifaceName="caliac313fa0db4" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/wireguard.go 254: Ignoring interface state change, not the wireguard interface. ifaceName="caliac313fa0db4" wireguardIfaceName="wireguard.cali" | |
2021-12-07 00:26:11.399 [INFO][63] felix/int_dataplane.go 1521: Received interface update msg=&intdataplane.ifaceUpdate{Name:"cali380a5b9c304", State:"up", Index:135} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceUpdate{Name:"cali380a5b9c304", State:"up", Index:135} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceUpdate{Name:"cali380a5b9c304", State:"up", Index:135} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/endpoint_mgr.go 342: Interface state changed. update=&intdataplane.ifaceUpdate{Name:"cali380a5b9c304", State:"up", Index:135} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceUpdate{Name:"cali380a5b9c304", State:"up", Index:135} | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/route_table.go 307: Ignoring interface state change, not an interface managed by this routetable. ifaceName="cali380a5b9c304" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/route_table.go 307: Ignoring interface state change, not an interface managed by this routetable. ifaceName="cali380a5b9c304" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/route_table.go 311: Interface up, marking for route sync ifaceName="cali380a5b9c304" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/wireguard.go 254: Ignoring interface state change, not the wireguard interface. ifaceName="cali380a5b9c304" wireguardIfaceName="wireguard.cali" | |
2021-12-07 00:26:11.399 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ConfigUpdate update from calculation graph msg=config:<key:"CalicoVersion" value:"v3.21.1" > config:<key:"ClusterGUID" value:"96a762c646134e919aef229e6713a6c9" > config:<key:"ClusterType" value:"k8s,bgp,kubeadm,kdd" > config:<key:"DatastoreType" value:"kubernetes" > config:<key:"DefaultEndpointToHostAction" value:"ACCEPT" > config:<key:"FelixHostname" value:"node3.tpurchas.gmail.com.beta.tailscale.net" > config:<key:"HealthEnabled" value:"true" > config:<key:"IPv4VXLANTunnelAddr" value:"172.16.98.192" > config:<key:"IpInIpEnabled" value:"true" > config:<key:"IpInIpMtu" value:"1210" > config:<key:"Ipv6Support" value:"false" > config:<key:"LogFilePath" value:"None" > config:<key:"LogSeverityFile" value:"None" > config:<key:"LogSeverityScreen" value:"Debug" > config:<key:"LogSeveritySys" value:"None" > config:<key:"MetadataAddr" value:"None" > config:<key:"ReportingIntervalSecs" value:"0" > config:<key:"VXLANEnabled" value:"true" > config:<key:"VXLANMTU" value:"1210" > config:<key:"WireguardMTU" value:"1210" > | |
2021-12-07 00:26:11.399 [DEBUG][63] felix/xdp_state.go 134: Received message msg=config:<key:"CalicoVersion" value:"v3.21.1" > config:<key:"ClusterGUID" value:"96a762c646134e919aef229e6713a6c9" > config:<key:"ClusterType" value:"k8s,bgp,kubeadm,kdd" > config:<key:"DatastoreType" value:"kubernetes" > config:<key:"DefaultEndpointToHostAction" value:"ACCEPT" > config:<key:"FelixHostname" value:"node3.tpurchas.gmail.com.beta.tailscale.net" > config:<key:"HealthEnabled" value:"true" > config:<key:"IPv4VXLANTunnelAddr" value:"172.16.98.192" > config:<key:"IpInIpEnabled" value:"true" > config:<key:"IpInIpMtu" value:"1210" > config:<key:"Ipv6Support" value:"false" > config:<key:"LogFilePath" value:"None" > config:<key:"LogSeverityFile" value:"None" > config:<key:"LogSeverityScreen" value:"Debug" > config:<key:"LogSeveritySys" value:"None" > config:<key:"MetadataAddr" value:"None" > config:<key:"ReportingIntervalSecs" value:"0" > config:<key:"VXLANEnabled" value:"true" > config:<key:"VXLANMTU" value:"1210" > config:<key:"WireguardMTU" value:"1210" > | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=config:<key:"CalicoVersion" value:"v3.21.1" > config:<key:"ClusterGUID" value:"96a762c646134e919aef229e6713a6c9" > config:<key:"ClusterType" value:"k8s,bgp,kubeadm,kdd" > config:<key:"DatastoreType" value:"kubernetes" > config:<key:"DefaultEndpointToHostAction" value:"ACCEPT" > config:<key:"FelixHostname" value:"node3.tpurchas.gmail.com.beta.tailscale.net" > config:<key:"HealthEnabled" value:"true" > config:<key:"IPv4VXLANTunnelAddr" value:"172.16.98.192" > config:<key:"IpInIpEnabled" value:"true" > config:<key:"IpInIpMtu" value:"1210" > config:<key:"Ipv6Support" value:"false" > config:<key:"LogFilePath" value:"None" > config:<key:"LogSeverityFile" value:"None" > config:<key:"LogSeverityScreen" value:"Debug" > config:<key:"LogSeveritySys" value:"None" > config:<key:"MetadataAddr" value:"None" > config:<key:"ReportingIntervalSecs" value:"0" > config:<key:"VXLANEnabled" value:"true" > config:<key:"VXLANMTU" value:"1210" > config:<key:"WireguardMTU" value:"1210" > | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=config:<key:"CalicoVersion" value:"v3.21.1" > config:<key:"ClusterGUID" value:"96a762c646134e919aef229e6713a6c9" > config:<key:"ClusterType" value:"k8s,bgp,kubeadm,kdd" > config:<key:"DatastoreType" value:"kubernetes" > config:<key:"DefaultEndpointToHostAction" value:"ACCEPT" > config:<key:"FelixHostname" value:"node3.tpurchas.gmail.com.beta.tailscale.net" > config:<key:"HealthEnabled" value:"true" > config:<key:"IPv4VXLANTunnelAddr" value:"172.16.98.192" > config:<key:"IpInIpEnabled" value:"true" > config:<key:"IpInIpMtu" value:"1210" > config:<key:"Ipv6Support" value:"false" > config:<key:"LogFilePath" value:"None" > config:<key:"LogSeverityFile" value:"None" > config:<key:"LogSeverityScreen" value:"Debug" > config:<key:"LogSeveritySys" value:"None" > config:<key:"MetadataAddr" value:"None" > config:<key:"ReportingIntervalSecs" value:"0" > config:<key:"VXLANEnabled" value:"true" > config:<key:"VXLANMTU" value:"1210" > config:<key:"WireguardMTU" value:"1210" > | |
2021-12-07 00:26:11.400 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"lo", Addrs:set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"lo", Addrs:set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"lo", Addrs:set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="this-host" setType="hash:ip" | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"lo", Addrs:set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"lo", Addrs:set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"lo", Addrs:set.mapSet{"127.0.0.0":set.empty{}, "127.0.0.1":set.empty{}, "::1":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"eth0", Addrs:set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"eth0", Addrs:set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"eth0", Addrs:set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="this-host" setType="hash:ip" | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"eth0", Addrs:set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"eth0", Addrs:set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"eth0", Addrs:set.mapSet{"103.175.234.131":set.empty{}, "2a10:4740:40:0:2222:8d9:dd3d:1":set.empty{}, "fe80::216:3eff:feff:4f4d":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"tailscale0", Addrs:set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"tailscale0", Addrs:set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"tailscale0", Addrs:set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="this-host" setType="hash:ip" | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"tailscale0", Addrs:set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"tailscale0", Addrs:set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}}} | |
2021-12-07 00:26:11.400 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"tailscale0", Addrs:set.mapSet{"100.91.105.84":set.empty{}, "fd7a:115c:a1e0:ab12:4843:cd96:625b:6954":set.empty{}, "fe80::7275:1273:d037:f3be":set.empty{}}} | |
2021-12-07 00:26:11.400 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="this-host" setType="hash:ip" | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"tunl0", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"vxlan.calico", Addrs:set.mapSet{"172.16.98.192":set.empty{}}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"vxlan.calico", Addrs:set.mapSet{"172.16.98.192":set.empty{}}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"vxlan.calico", Addrs:set.mapSet{"172.16.98.192":set.empty{}}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="this-host" setType="hash:ip" | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"vxlan.calico", Addrs:set.mapSet{"172.16.98.192":set.empty{}}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"vxlan.calico", Addrs:set.mapSet{"172.16.98.192":set.empty{}}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"vxlan.calico", Addrs:set.mapSet{"172.16.98.192":set.empty{}}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/hostip_mgr.go 87: Not a real host interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 347: Workload interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali3879dac72fe", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/hostip_mgr.go 87: Not a real host interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 347: Workload interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali96535058867", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/hostip_mgr.go 87: Not a real host interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/endpoint_mgr.go 347: Workload interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.401 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"caliac313fa0db4", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [INFO][63] felix/int_dataplane.go 1539: Received interface addresses update msg=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/xdp_state.go 134: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [INFO][63] felix/hostip_mgr.go 85: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/hostip_mgr.go 87: Not a real host interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/endpoint_mgr.go 345: Interface addrs changed. update=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/endpoint_mgr.go 347: Workload interface, ignoring. update=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=&intdataplane.ifaceAddrsUpdate{Name:"cali380a5b9c304", Addrs:set.mapSet{}} | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/async_calc_graph.go 211: Not throttled: flushing event buffer | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 670: Done flushing IP address deltas | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 664: Done flushing IP set removes | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 730: Done flushing Service Accounts | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 804: Done flushing Namespaces | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 881: Done flushing route deletes | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 831: Done flushing VTEP removes | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 840: Done flushing VTEP adds | |
2021-12-07 00:26:11.402 [DEBUG][63] felix/event_sequencer.go 869: Done flushing route adds | |
2021-12-07 00:26:11.402 [INFO][63] felix/daemon.go 659: No driver process to monitor | |
2021-12-07 00:26:11.403 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/globalnetworksets" | |
2021-12-07 00:26:11.403 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/globalnetworksets" | |
2021-12-07 00:26:11.403 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/globalnetworksets" | |
2021-12-07 00:26:11.403 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/globalnetworksets" | |
2021-12-07 00:26:11.403 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/globalnetworksets" | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/conflictresolvingcacheproc.go 254: Clearing cache for resync | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/k8s.go 642: Performing 'List' for GlobalNetworkSet model.ResourceListOptions | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/customresource.go 239: Received List request ListInterface=GlobalNetworkSet Resource="GlobalNetworkSets" Type="CustomResource" | |
2021-12-07 00:26:11.394 [DEBUG][63] felix/watchercache.go 78: Watcher cache starting, start initial sync processing ListRoot="/calico/resources/v3/projectcalico.org/ippools" | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/watchercache.go 155: Starting watch sync/resync processing ListRoot="/calico/resources/v3/projectcalico.org/ippools" | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/watchercache.go 171: Starting main resync loop ListRoot="/calico/resources/v3/projectcalico.org/ippools" | |
2021-12-07 00:26:11.404 [INFO][63] felix/watchercache.go 175: Full resync is required ListRoot="/calico/resources/v3/projectcalico.org/ippools" | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/watchercache.go 179: Trigger converter resync notification ListRoot="/calico/resources/v3/projectcalico.org/ippools" | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/conflictresolvingcacheproc.go 254: Clearing cache for resync | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/k8s.go 642: Performing 'List' for IPPool model.ResourceListOptions | |
2021-12-07 00:26:11.404 [DEBUG][63] felix/customresource.go 239: Received List request ListInterface=IPPool Resource="IPPools" Type="CustomResource" | |
2021-12-07 00:26:11.408 [DEBUG][63] felix/update_filter.go 67: FilterUpdates: starting | |
2021-12-07 00:26:11.411 [DEBUG][63] felix/list_pager.go 52: List() call completed, convert results ListInterface=GlobalNetworkPolicy Resource="GlobalNetworkPolicies" Type="CustomResource" pagedList=false | |
W1207 00:26:11.425198 63 warnings.go:70] discovery.k8s.io/v1beta1 EndpointSlice is deprecated in v1.21+, unavailable in v1.25+; use discovery.k8s.io/v1 EndpointSlice | |
2021-12-07 00:26:11.411 [INFO][63] felix/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/globalnetworkpolicies" | |
2021-12-07 00:26:11.411 [DEBUG][63] felix/k8s.go 657: Performing 'Watch' for GlobalNetworkPolicy model.ResourceListOptions | |
2021-12-07 00:26:11.413 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.413 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.413 [INFO][63] felix/watchersyncer.go 127: Sending status update Status=resync | |
2021-12-07 00:26:11.413 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=0 | |
2021-12-07 00:26:11.413 [DEBUG][63] felix/async_calc_graph.go 128: Status updated: resync; queueing | |
2021-12-07 00:26:11.413 [DEBUG][63] felix/async_calc_graph.go 161: Pulled status update off channel status=resync | |
2021-12-07 00:26:11.413 [DEBUG][63] felix/stats_collector.go 103: Datastore status updated status=resync | |
2021-12-07 00:26:11.413 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.413 [DEBUG][63] felix/async_calc_graph.go 226: Throttled: not flushing event buffer | |
2021-12-07 00:26:11.414 [DEBUG][63] felix/list_pager.go 52: List() call completed, convert results ListInterface=ClusterInformation Resource="ClusterInformations" Type="CustomResource" pagedList=false | |
2021-12-07 00:26:11.414 [DEBUG][63] felix/configurationprocessor.go 313: Annotations are disallowed - skipping extraction | |
2021-12-07 00:26:11.414 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="GlobalFelixConfig(name=ClusterGUID)" ListRoot="/calico/resources/v3/projectcalico.org/clusterinformations" | |
2021-12-07 00:26:11.414 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="GlobalFelixConfig(name=ClusterType)" ListRoot="/calico/resources/v3/projectcalico.org/clusterinformations" | |
2021-12-07 00:26:11.414 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="GlobalFelixConfig(name=CalicoVersion)" ListRoot="/calico/resources/v3/projectcalico.org/clusterinformations" | |
2021-12-07 00:26:11.414 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ReadyFlagKey()" ListRoot="/calico/resources/v3/projectcalico.org/clusterinformations" | |
2021-12-07 00:26:11.414 [INFO][63] felix/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/clusterinformations" | |
2021-12-07 00:26:11.414 [DEBUG][63] felix/k8s.go 657: Performing 'Watch' for ClusterInformation model.ResourceListOptions | |
2021-12-07 00:26:11.415 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.415 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=4 | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=GlobalFelixConfig(name=ClusterGUID) value="96a762c646134e919aef229e6713a6c9" | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=GlobalFelixConfig(name=ClusterGUID) value="96a762c646134e919aef229e6713a6c9" | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=GlobalFelixConfig(name=ClusterType) value="k8s,bgp,kubeadm,kdd" | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=GlobalFelixConfig(name=ClusterType) value="k8s,bgp,kubeadm,kdd" | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=GlobalFelixConfig(name=CalicoVersion) value="v3.21.1" | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=GlobalFelixConfig(name=CalicoVersion) value="v3.21.1" | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ReadyFlagKey() value=true | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ReadyFlagKey() value=true | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/async_calc_graph.go 123: Got 4 updates; queueing | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/async_calc_graph.go 145: Pulled []KVPair off channel | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{GlobalFelixConfig(name=ClusterGUID) 96a762c646134e919aef229e6713a6c9 649 <nil> 0s} 1} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 95: Type: model.GlobalConfigKey | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9cb40)} | |
2021-12-07 00:26:11.416 [INFO][63] felix/config_batcher.go 74: Global config update: {{GlobalFelixConfig(name=ClusterGUID) 96a762c646134e919aef229e6713a6c9 649 <nil> 0s} 1} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{GlobalFelixConfig(name=ClusterType) k8s,bgp,kubeadm,kdd 649 <nil> 0s} 1} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 95: Type: model.GlobalConfigKey | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9cb40)} | |
2021-12-07 00:26:11.416 [INFO][63] felix/config_batcher.go 74: Global config update: {{GlobalFelixConfig(name=ClusterType) k8s,bgp,kubeadm,kdd 649 <nil> 0s} 1} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{GlobalFelixConfig(name=CalicoVersion) v3.21.1 649 <nil> 0s} 1} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 95: Type: model.GlobalConfigKey | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9cb40)} | |
2021-12-07 00:26:11.416 [INFO][63] felix/config_batcher.go 74: Global config update: {{GlobalFelixConfig(name=CalicoVersion) v3.21.1 649 <nil> 0s} 1} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ReadyFlagKey() true 649 <nil> 0s} 1} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 95: Type: model.ReadyFlagKey | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9cb40)} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.416 [DEBUG][63] felix/async_calc_graph.go 226: Throttled: not flushing event buffer | |
2021-12-07 00:26:11.418 [DEBUG][63] felix/list_pager.go 52: List() call completed, convert results ListInterface=IPAMBlock Resource="IPAMBlocks" Type="CustomResource" pagedList=false | |
2021-12-07 00:26:11.418 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="BlockKey(cidr=172.16.117.128/26)" ListRoot="/calico/ipam/v2/assignment/" | |
2021-12-07 00:26:11.418 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="BlockKey(cidr=172.16.56.0/26)" ListRoot="/calico/ipam/v2/assignment/" | |
2021-12-07 00:26:11.418 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="BlockKey(cidr=172.16.117.192/26)" ListRoot="/calico/ipam/v2/assignment/" | |
2021-12-07 00:26:11.418 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="BlockKey(cidr=172.16.98.192/26)" ListRoot="/calico/ipam/v2/assignment/" | |
2021-12-07 00:26:11.418 [INFO][63] felix/watchercache.go 273: Sending synced update ListRoot="/calico/ipam/v2/assignment/" | |
2021-12-07 00:26:11.418 [DEBUG][63] felix/k8s.go 657: Performing 'Watch' for {IPVersion:0} model.BlockListOptions | |
2021-12-07 00:26:11.419 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.420 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=4 | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=BlockKey(cidr=172.16.117.128/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x75, 0x80}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(nil), Allocations:[]*int{(*int)(nil), (*int)(nil), (*int)(nil), (*int)(0xc0001d21f0), (*int)(nil), (*int)(0xc0001d21f8), (*int)(0xc0001d2220), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 2, 4, 7, 1, 9, 0, 8}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73a50), AttrSecondary:map[string]string{"namespace":"kubernetes-dashboard", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"dashboard-metrics-scraper-c45b7869d-lhzdg", "timestamp":"2021-12-02 05:37:40.268891321 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73ae0), AttrSecondary:map[string]string{"namespace":"kubernetes-dashboard", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"kubernetes-dashboard-576cb95f94-mc6nn", "timestamp":"2021-12-02 05:37:41.137818982 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73b70), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"calico-kube-controllers-56b8f699d9-pzfdp", "timestamp":"2021-12-02 05:37:41.240629426 +0000 UTC"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=BlockKey(cidr=172.16.117.128/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x75, 0x80}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(nil), Allocations:[]*int{(*int)(nil), (*int)(nil), (*int)(nil), (*int)(0xc0001d21f0), (*int)(nil), (*int)(0xc0001d21f8), (*int)(0xc0001d2220), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 2, 4, 7, 1, 9, 0, 8}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73a50), AttrSecondary:map[string]string{"namespace":"kubernetes-dashboard", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"dashboard-metrics-scraper-c45b7869d-lhzdg", "timestamp":"2021-12-02 05:37:40.268891321 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73ae0), AttrSecondary:map[string]string{"namespace":"kubernetes-dashboard", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"kubernetes-dashboard-576cb95f94-mc6nn", "timestamp":"2021-12-02 05:37:41.137818982 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73b70), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"calico-kube-controllers-56b8f699d9-pzfdp", "timestamp":"2021-12-02 05:37:41.240629426 +0000 UTC"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=BlockKey(cidr=172.16.56.0/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x38, 0x0}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(0xc000b73c40), Allocations:[]*int{(*int)(0xc0001d2550), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73c70), AttrSecondary:map[string]string{"node":"node2.tpurchas.gmail.com.beta.tailscale.net", "type":"vxlanTunnelAddress"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=BlockKey(cidr=172.16.56.0/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x38, 0x0}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(0xc000b73c40), Allocations:[]*int{(*int)(0xc0001d2550), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73c70), AttrSecondary:map[string]string{"node":"node2.tpurchas.gmail.com.beta.tailscale.net", "type":"vxlanTunnelAddress"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=BlockKey(cidr=172.16.117.192/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x75, 0xc0}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(0xc000b73d00), Allocations:[]*int{(*int)(0xc0001d26a0), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(0xc0001d26a8), (*int)(0xc0001d26b0), (*int)(nil), (*int)(0xc0001d26b8), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 3, 2, 6, 1}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73d30), AttrSecondary:map[string]string{"node":"node1.tpurchas.gmail.com.beta.tailscale.net", "type":"vxlanTunnelAddress"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73d80), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"coredns-78fcd69978-jrwnw", "timestamp":"2021-12-05 22:20:36.720437284 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73e10), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"coredns-78fcd69978-kfckw", "timestamp":"2021-12-05 22:20:36.789840889 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73ea0), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"metrics-server-dbf765b9b-n9l7r", "timestamp":"2021-12-05 23:53:36.206059759 +0000 UTC"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=BlockKey(cidr=172.16.117.192/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x75, 0xc0}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(0xc000b73d00), Allocations:[]*int{(*int)(0xc0001d26a0), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(0xc0001d26a8), (*int)(0xc0001d26b0), (*int)(nil), (*int)(0xc0001d26b8), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 3, 2, 6, 1}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73d30), AttrSecondary:map[string]string{"node":"node1.tpurchas.gmail.com.beta.tailscale.net", "type":"vxlanTunnelAddress"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73d80), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"coredns-78fcd69978-jrwnw", "timestamp":"2021-12-05 22:20:36.720437284 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73e10), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"coredns-78fcd69978-kfckw", "timestamp":"2021-12-05 22:20:36.789840889 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73ea0), AttrSecondary:map[string]string{"namespace":"kube-system", "node":"node1.tpurchas.gmail.com.beta.tailscale.net", "pod":"metrics-server-dbf765b9b-n9l7r", "timestamp":"2021-12-05 23:53:36.206059759 +0000 UTC"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.420 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=BlockKey(cidr=172.16.98.192/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x62, 0xc0}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(0xc000b73f70), Allocations:[]*int{(*int)(0xc0001d29b0), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(0xc0001d29b8), (*int)(0xc0001d29d0), (*int)(0xc0001d29d8), (*int)(0xc0001d29f0), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{15, 13, 14, 16, 7, 17, 20, 18, 21, 19, 22, 23, 26, 25, 24, 27, 29, 28, 31, 30, 32, 33, 35, 34, 38, 36, 40, 37, 41, 39, 42, 44, 43, 45, 48, 46, 49, 47, 50, 51, 53, 52, 54, 55, 57, 56, 60, 58, 61, 62, 1, 59, 63, 2, 3, 4, 6, 5, 8}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73fa0), AttrSecondary:map[string]string{"node":"node3.tpurchas.gmail.com.beta.tailscale.net", "type":"vxlanTunnelAddress"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73ff0), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hostnames-57b79fc5df-2l5ln", "timestamp":"2021-12-07 00:16:58.933253831 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000bd0080), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hostnames-57b79fc5df-vzx9w", "timestamp":"2021-12-07 00:18:33.099808372 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000bd0110), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hostnames-57b79fc5df-6sw8n", "timestamp":"2021-12-07 00:21:53.474793256 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000bd01a0), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hello-minikube-6ddfcc9757-sp9xc", "timestamp":"2021-12-07 00:22:12.469662608 +0000 UTC"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=BlockKey(cidr=172.16.98.192/26) value=&model.AllocationBlock{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x62, 0xc0}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xc0}}}, Affinity:(*string)(0xc000b73f70), Allocations:[]*int{(*int)(0xc0001d29b0), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(0xc0001d29b8), (*int)(0xc0001d29d0), (*int)(0xc0001d29d8), (*int)(0xc0001d29f0), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil), (*int)(nil)}, Unallocated:[]int{15, 13, 14, 16, 7, 17, 20, 18, 21, 19, 22, 23, 26, 25, 24, 27, 29, 28, 31, 30, 32, 33, 35, 34, 38, 36, 40, 37, 41, 39, 42, 44, 43, 45, 48, 46, 49, 47, 50, 51, 53, 52, 54, 55, 57, 56, 60, 58, 61, 62, 1, 59, 63, 2, 3, 4, 6, 5, 8}, Attributes:[]model.AllocationAttribute{model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73fa0), AttrSecondary:map[string]string{"node":"node3.tpurchas.gmail.com.beta.tailscale.net", "type":"vxlanTunnelAddress"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000b73ff0), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hostnames-57b79fc5df-2l5ln", "timestamp":"2021-12-07 00:16:58.933253831 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000bd0080), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hostnames-57b79fc5df-vzx9w", "timestamp":"2021-12-07 00:18:33.099808372 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000bd0110), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hostnames-57b79fc5df-6sw8n", "timestamp":"2021-12-07 00:21:53.474793256 +0000 UTC"}}, model.AllocationAttribute{AttrPrimary:(*string)(0xc000bd01a0), AttrSecondary:map[string]string{"namespace":"default", "node":"node3.tpurchas.gmail.com.beta.tailscale.net", "pod":"hello-minikube-6ddfcc9757-sp9xc", "timestamp":"2021-12-07 00:22:12.469662608 +0000 UTC"}}}, Deleted:false, HostAffinity:(*string)(nil)} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/async_calc_graph.go 123: Got 4 updates; queueing | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/async_calc_graph.go 145: Pulled []KVPair off channel | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{BlockKey(cidr=172.16.117.128/26) 0xc00011fcb0 443767 0xc0001a8060 0s} 1} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/dispatcher.go 95: Type: model.BlockKey | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9cfe0)} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 245: IPAM block update numRoutes=3 | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 280: Found new route route=hostnameRoute(dst: 172.16.117.131/32, node: node1.tpurchas.gmail.com.beta.tailscale.net) | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 280: Found new route route=hostnameRoute(dst: 172.16.117.133/32, node: node1.tpurchas.gmail.com.beta.tailscale.net) | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 280: Found new route route=hostnameRoute(dst: 172.16.117.134/32, node: node1.tpurchas.gmail.com.beta.tailscale.net) | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.131/32 | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.131/32 | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_WORKLOAD dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.117.131/32"} | |
2021-12-07 00:26:11.421 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.133/32 | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.133/32 | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_WORKLOAD dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.117.133/32"} | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.134/32 | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.134/32 | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_WORKLOAD dst:"172.16.117.134/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.117.134/32"} | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{BlockKey(cidr=172.16.56.0/26) 0xc00011fdd0 450842 0xc0001a81e8 0s} 1} | |
2021-12-07 00:26:11.422 [DEBUG][63] felix/dispatcher.go 95: Type: model.BlockKey | |
... dropped 149 logs ... | |
2021-12-07 00:26:11.427 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=KubernetesEndpointSlice(default/kubernetes) value=&EndpointSlice{ObjectMeta:{kubernetes default b3bc9b19-093a-4f83-9f4f-72a24c8df0dc 209 1 2021-12-02 00:04:59 +0000 UTC <nil> <nil> map[kubernetes.io/service-name:kubernetes] map[] [] [] [{kube-apiserver Update discovery.k8s.io/v1 2021-12-02 00:04:59 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:labels":{".":{},"f:kubernetes.io/service-name":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[100.64.226.74],Conditions:EndpointConditions{Ready:*true,Serving:nil,Terminating:nil,},Hostname:nil,TargetRef:nil,Topology:map[string]string{},NodeName:nil,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*https,Protocol:*TCP,Port:*6443,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.436 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=KubernetesEndpointSlice(kube-system/kube-dns-qlzmc) value=&EndpointSlice{ObjectMeta:{kube-dns-qlzmc kube-dns- kube-system 14593334-bbae-428e-afc8-724f0b993d69 455981 142 2021-12-02 00:05:14 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:kube-dns kubernetes.io/cluster-service:true kubernetes.io/name:CoreDNS kubernetes.io/service-name:kube-dns] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:05:00Z] [{v1 Service kube-dns 5dbdc93e-efb5-4b77-ac91-ac5e52b26929 0xc0008bb638 0xc0008bb639}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/cluster-service":{},"f:kubernetes.io/name":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"5dbdc93e-efb5-4b77-ac91-ac5e52b26929\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.197],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-78fcd69978-kfckw,UID:a75bf0c2-ee45-405c-b793-5a5c396daf84,APIVersion:,ResourceVersion:453843,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},Endpoint{Addresses:[172.16.117.196],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-78fcd69978-jrwnw,UID:043ff623-b983-42d3-b215-f1cd106891e2,APIVersion:,ResourceVersion:453834,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*metrics,Protocol:*TCP,Port:*9153,AppProtocol:nil,},EndpointPort{Name:*dns,Protocol:*UDP,Port:*53,AppProtocol:nil,},EndpointPort{Name:*dns-tcp,Protocol:*TCP,Port:*53,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.437 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=KubernetesEndpointSlice(kube-system/kube-dns-qlzmc) value=&EndpointSlice{ObjectMeta:{kube-dns-qlzmc kube-dns- kube-system 14593334-bbae-428e-afc8-724f0b993d69 455981 142 2021-12-02 00:05:14 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:kube-dns kubernetes.io/cluster-service:true kubernetes.io/name:CoreDNS kubernetes.io/service-name:kube-dns] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:05:00Z] [{v1 Service kube-dns 5dbdc93e-efb5-4b77-ac91-ac5e52b26929 0xc0008bb638 0xc0008bb639}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/cluster-service":{},"f:kubernetes.io/name":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"5dbdc93e-efb5-4b77-ac91-ac5e52b26929\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.197],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-78fcd69978-kfckw,UID:a75bf0c2-ee45-405c-b793-5a5c396daf84,APIVersion:,ResourceVersion:453843,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},Endpoint{Addresses:[172.16.117.196],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-78fcd69978-jrwnw,UID:043ff623-b983-42d3-b215-f1cd106891e2,APIVersion:,ResourceVersion:453834,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*metrics,Protocol:*TCP,Port:*9153,AppProtocol:nil,},EndpointPort{Name:*dns,Protocol:*UDP,Port:*53,AppProtocol:nil,},EndpointPort{Name:*dns-tcp,Protocol:*TCP,Port:*53,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.437 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=KubernetesEndpointSlice(kubernetes-dashboard/dashboard-metrics-scraper-g5vc7) value=&EndpointSlice{ObjectMeta:{dashboard-metrics-scraper-g5vc7 dashboard-metrics-scraper- kubernetes-dashboard 6a1776f4-b81a-497a-947e-861a0a818a80 455979 9 2021-12-02 00:07:03 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:dashboard-metrics-scraper kubernetes.io/service-name:dashboard-metrics-scraper] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:07:03Z] [{v1 Service dashboard-metrics-scraper 6b0daf1e-915b-4ba2-b702-fd871ef63179 0xc0008bb64c 0xc0008bb64d}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"6b0daf1e-915b-4ba2-b702-fd871ef63179\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.131],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kubernetes-dashboard,Name:dashboard-metrics-scraper-c45b7869d-lhzdg,UID:d0a919e7-00ee-4b59-8b14-c1f793c0c79f,APIVersion:,ResourceVersion:453825,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8000,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.437 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=KubernetesEndpointSlice(kubernetes-dashboard/dashboard-metrics-scraper-g5vc7) value=&EndpointSlice{ObjectMeta:{dashboard-metrics-scraper-g5vc7 dashboard-metrics-scraper- kubernetes-dashboard 6a1776f4-b81a-497a-947e-861a0a818a80 455979 9 2021-12-02 00:07:03 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:dashboard-metrics-scraper kubernetes.io/service-name:dashboard-metrics-scraper] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:07:03Z] [{v1 Service dashboard-metrics-scraper 6b0daf1e-915b-4ba2-b702-fd871ef63179 0xc0008bb64c 0xc0008bb64d}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"6b0daf1e-915b-4ba2-b702-fd871ef63179\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.131],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kubernetes-dashboard,Name:dashboard-metrics-scraper-c45b7869d-lhzdg,UID:d0a919e7-00ee-4b59-8b14-c1f793c0c79f,APIVersion:,ResourceVersion:453825,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8000,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.437 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=KubernetesEndpointSlice(kubernetes-dashboard/kubernetes-dashboard-75gq9) value=&EndpointSlice{ObjectMeta:{kubernetes-dashboard-75gq9 kubernetes-dashboard- kubernetes-dashboard ba6b1323-6e27-4ff9-886c-f2878a743b16 455982 9 2021-12-02 00:07:03 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:kubernetes-dashboard kubernetes.io/service-name:kubernetes-dashboard] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:07:03Z] [{v1 Service kubernetes-dashboard 9e8f75c2-558e-4819-ae9a-5bccaa6f0543 0xc0008bb658 0xc0008bb659}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"9e8f75c2-558e-4819-ae9a-5bccaa6f0543\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.133],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kubernetes-dashboard,Name:kubernetes-dashboard-576cb95f94-mc6nn,UID:af22c47f-f7c9-4c90-90ef-69ae638dd250,APIVersion:,ResourceVersion:455978,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8443,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.437 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=KubernetesEndpointSlice(kubernetes-dashboard/kubernetes-dashboard-75gq9) value=&EndpointSlice{ObjectMeta:{kubernetes-dashboard-75gq9 kubernetes-dashboard- kubernetes-dashboard ba6b1323-6e27-4ff9-886c-f2878a743b16 455982 9 2021-12-02 00:07:03 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:kubernetes-dashboard kubernetes.io/service-name:kubernetes-dashboard] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:07:03Z] [{v1 Service kubernetes-dashboard 9e8f75c2-558e-4819-ae9a-5bccaa6f0543 0xc0008bb658 0xc0008bb659}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"9e8f75c2-558e-4819-ae9a-5bccaa6f0543\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.133],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kubernetes-dashboard,Name:kubernetes-dashboard-576cb95f94-mc6nn,UID:af22c47f-f7c9-4c90-90ef-69ae638dd250,APIVersion:,ResourceVersion:455978,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8443,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.438 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=KubernetesEndpointSlice(kube-system/metrics-server-xhkct) value=&EndpointSlice{ObjectMeta:{metrics-server-xhkct metrics-server- kube-system 958a2bd0-13e7-40d1-a8b6-dbe493eebf13 455983 3 2021-12-05 23:53:34 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:metrics-server kubernetes.io/service-name:metrics-server] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-05T23:53:34Z] [{v1 Service metrics-server 65d5f979-cd57-4b85-ba45-8f84ab00d57a 0xc0008bb664 0xc0008bb665}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"65d5f979-cd57-4b85-ba45-8f84ab00d57a\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.199],Conditions:EndpointConditions{Ready:*false,Serving:*false,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:metrics-server-dbf765b9b-n9l7r,UID:2f4b42b3-f365-49ee-9916-cc7f7ab105f2,APIVersion:,ResourceVersion:454480,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*https,Protocol:*TCP,Port:*4443,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.438 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=KubernetesEndpointSlice(kube-system/metrics-server-xhkct) value=&EndpointSlice{ObjectMeta:{metrics-server-xhkct metrics-server- kube-system 958a2bd0-13e7-40d1-a8b6-dbe493eebf13 455983 3 2021-12-05 23:53:34 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:metrics-server kubernetes.io/service-name:metrics-server] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-05T23:53:34Z] [{v1 Service metrics-server 65d5f979-cd57-4b85-ba45-8f84ab00d57a 0xc0008bb664 0xc0008bb665}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"65d5f979-cd57-4b85-ba45-8f84ab00d57a\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.199],Conditions:EndpointConditions{Ready:*false,Serving:*false,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:metrics-server-dbf765b9b-n9l7r,UID:2f4b42b3-f365-49ee-9916-cc7f7ab105f2,APIVersion:,ResourceVersion:454480,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*https,Protocol:*TCP,Port:*4443,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=KubernetesEndpointSlice(default/hello-minikube-sb8p7) value=&EndpointSlice{ObjectMeta:{hello-minikube-sb8p7 hello-minikube- default d88d58f3-b870-4e07-a540-a48088c1d0ce 559963 123 2021-12-02 00:46:09 +0000 UTC <nil> <nil> map[app:hello-minikube endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io kubernetes.io/service-name:hello-minikube] map[] [{v1 Service hello-minikube e375d0ca-cfb4-41f4-ab76-72e3c0736e35 0xc0008bb670 0xc0008bb671}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-07 00:22:13 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:app":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"e375d0ca-cfb4-41f4-ab76-72e3c0736e35\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.98.202],Conditions:EndpointConditions{Ready:*false,Serving:*false,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:default,Name:hello-minikube-6ddfcc9757-sp9xc,UID:76584ce6-d84b-4024-a48d-f4ba55aba012,APIVersion:,ResourceVersion:559962,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node3.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node3.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8080,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=KubernetesEndpointSlice(default/hello-minikube-sb8p7) value=&EndpointSlice{ObjectMeta:{hello-minikube-sb8p7 hello-minikube- default d88d58f3-b870-4e07-a540-a48088c1d0ce 559963 123 2021-12-02 00:46:09 +0000 UTC <nil> <nil> map[app:hello-minikube endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io kubernetes.io/service-name:hello-minikube] map[] [{v1 Service hello-minikube e375d0ca-cfb4-41f4-ab76-72e3c0736e35 0xc0008bb670 0xc0008bb671}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-07 00:22:13 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:app":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"e375d0ca-cfb4-41f4-ab76-72e3c0736e35\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.98.202],Conditions:EndpointConditions{Ready:*false,Serving:*false,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:default,Name:hello-minikube-6ddfcc9757-sp9xc,UID:76584ce6-d84b-4024-a48d-f4ba55aba012,APIVersion:,ResourceVersion:559962,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node3.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node3.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8080,AppProtocol:nil,},},AddressType:IPv4,} | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/async_calc_graph.go 123: Got 6 updates; queueing | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=GlobalFelixConfig(name=LogSeverityScreen) value="Info" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=GlobalFelixConfig(name=LogSeverityScreen) value="Info" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=GlobalFelixConfig(name=IpInIpEnabled) value="true" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=GlobalFelixConfig(name=IpInIpEnabled) value="true" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=GlobalFelixConfig(name=VXLANEnabled) value="true" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=GlobalFelixConfig(name=VXLANEnabled) value="true" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=GlobalFelixConfig(name=ReportingIntervalSecs) value="0" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=GlobalFelixConfig(name=ReportingIntervalSecs) value="0" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=HostConfig(node=node3.tpurchas.gmail.com.beta.tailscale.net,name=LogSeverityScreen) value="Debug" | |
2021-12-07 00:26:11.439 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/globalnetworkpolicies" | |
2021-12-07 00:26:11.440 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/globalnetworkpolicies" | |
2021-12-07 00:26:11.440 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=HostConfig(node=node3.tpurchas.gmail.com.beta.tailscale.net,name=LogSeverityScreen) value="Debug" | |
2021-12-07 00:26:11.440 [DEBUG][63] felix/async_calc_graph.go 123: Got 5 updates; queueing | |
2021-12-07 00:26:11.440 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="GlobalNetworkPolicy (custom)" | |
2021-12-07 00:26:11.440 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/clusterinformations" | |
2021-12-07 00:26:11.440 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/clusterinformations" | |
2021-12-07 00:26:11.440 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="ClusterInformation (custom)" | |
2021-12-07 00:26:11.441 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.441 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.441 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.441 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.441 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=1 | |
2021-12-07 00:26:11.441 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=IPPool(cidr=172.16.0.0/16) value=&model.IPPool{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x0, 0x0}, Mask:net.IPMask{0xff, 0xff, 0x0, 0x0}}}, IPIPInterface:"", IPIPMode:"", VXLANMode:"always", Masquerade:true, IPAM:true, Disabled:false, DisableBGPExport:false} | |
2021-12-07 00:26:11.441 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=IPPool(cidr=172.16.0.0/16) value=&model.IPPool{CIDR:net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x0, 0x0}, Mask:net.IPMask{0xff, 0xff, 0x0, 0x0}}}, IPIPInterface:"", IPIPMode:"", VXLANMode:"always", Masquerade:true, IPAM:true, Disabled:false, DisableBGPExport:false} | |
2021-12-07 00:26:11.442 [DEBUG][63] felix/async_calc_graph.go 123: Got 1 updates; queueing | |
2021-12-07 00:26:11.442 [DEBUG][63] felix/watcher.go 122: Kubernetes event converted and sent to backend watcher resource="IPAMBlock (custom)" | |
2021-12-07 00:26:11.442 [DEBUG][63] felix/watcher.go 122: Kubernetes event converted and sent to backend watcher resource="IPAMBlock (custom)" | |
2021-12-07 00:26:11.443 [DEBUG][63] felix/watcher.go 122: Kubernetes event converted and sent to backend watcher resource="IPAMBlock (custom)" | |
2021-12-07 00:26:11.443 [DEBUG][63] felix/watcher.go 122: Kubernetes event converted and sent to backend watcher resource="IPAMBlock (custom)" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/list_pager.go 52: List() call completed, convert results Resource="Node" pagedList=false | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/felixnodeprocessor.go 78: Parsed IPv4 address cidr=100.64.226.74/32 ip=100.64.226.74 | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/felixnodeprocessor.go 117: Parsed VXLAN tunnel address ip=172.16.117.192 | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Node(name=node1.tpurchas.gmail.com.beta.tailscale.net)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="HostConfig(node=node1.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Node(node1.tpurchas.gmail.com.beta.tailscale.net)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/felixnodeprocessor.go 78: Parsed IPv4 address cidr=100.110.110.87/32 ip=100.110.110.87 | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/felixnodeprocessor.go 117: Parsed VXLAN tunnel address ip=172.16.56.0 | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Node(name=node2.tpurchas.gmail.com.beta.tailscale.net)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="HostConfig(node=node2.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Node(node2.tpurchas.gmail.com.beta.tailscale.net)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/felixnodeprocessor.go 78: Parsed IPv4 address cidr=100.91.105.84/32 ip=100.91.105.84 | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/felixnodeprocessor.go 117: Parsed VXLAN tunnel address ip=172.16.98.192 | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Node(name=node3.tpurchas.gmail.com.beta.tailscale.net)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="HostConfig(node=node3.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Node(node3.tpurchas.gmail.com.beta.tailscale.net)" ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [INFO][63] felix/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/nodes" | |
2021-12-07 00:26:11.444 [DEBUG][63] felix/k8s.go 657: Performing 'Watch' for Node model.ResourceListOptions | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.445 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=9 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Node(name=node1.tpurchas.gmail.com.beta.tailscale.net) value=100.64.226.74 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=Node(name=node1.tpurchas.gmail.com.beta.tailscale.net) value=100.64.226.74 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=HostConfig(node=node1.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) value="172.16.117.192" | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=HostConfig(node=node1.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) value="172.16.117.192" | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Node(node1.tpurchas.gmail.com.beta.tailscale.net) value=&v3.Node{TypeMeta:v1.TypeMeta{Kind:"Node", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"node1.tpurchas.gmail.com.beta.tailscale.net", GenerateName:"", Namespace:"", SelfLink:"", UID:"833b7d47-8a9f-49b6-9f95-7849249e753e", ResourceVersion:"559988", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000298, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"beta.kubernetes.io/arch":"amd64", "beta.kubernetes.io/os":"linux", "kubernetes.io/arch":"amd64", "kubernetes.io/hostname":"node1.tpurchas.gmail.com.beta.tailscale.net", "kubernetes.io/os":"linux", "node-role.kubernetes.io/control-plane":"", "node-role.kubernetes.io/master":"", "node.kubernetes.io/exclude-from-external-load-balancers":""}, Annotations:map[string]string{"projectcalico.org/kube-labels":"{\"beta.kubernetes.io/arch\":\"amd64\",\"beta.kubernetes.io/os\":\"linux\",\"kubernetes.io/arch\":\"amd64\",\"kubernetes.io/hostname\":\"node1.tpurchas.gmail.com.beta.tailscale.net\",\"kubernetes.io/os\":\"linux\",\"node-role.kubernetes.io/control-plane\":\"\",\"node-role.kubernetes.io/master\":\"\",\"node.kubernetes.io/exclude-from-external-load-balancers\":\"\"}"}, OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.NodeSpec{BGP:(*v3.NodeBGPSpec)(0xc000bf8f50), IPv4VXLANTunnelAddr:"172.16.117.192", VXLANTunnelMACAddr:"", OrchRefs:[]v3.OrchRef{v3.OrchRef{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net", Orchestrator:"k8s"}}, Wireguard:(*v3.NodeWireguardSpec)(nil), Addresses:[]v3.NodeAddress{v3.NodeAddress{Address:"100.64.226.74/32", Type:"CalicoNodeIP"}, v3.NodeAddress{Address:"100.64.226.74", Type:"InternalIP"}}}, Status:v3.NodeStatus{WireguardPublicKey:"", PodCIDRs:[]string{"172.16.0.0/24"}}} | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Node(node1.tpurchas.gmail.com.beta.tailscale.net) value=&v3.Node{TypeMeta:v1.TypeMeta{Kind:"Node", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"node1.tpurchas.gmail.com.beta.tailscale.net", GenerateName:"", Namespace:"", SelfLink:"", UID:"833b7d47-8a9f-49b6-9f95-7849249e753e", ResourceVersion:"559988", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000298, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"beta.kubernetes.io/arch":"amd64", "beta.kubernetes.io/os":"linux", "kubernetes.io/arch":"amd64", "kubernetes.io/hostname":"node1.tpurchas.gmail.com.beta.tailscale.net", "kubernetes.io/os":"linux", "node-role.kubernetes.io/control-plane":"", "node-role.kubernetes.io/master":"", "node.kubernetes.io/exclude-from-external-load-balancers":""}, Annotations:map[string]string{"projectcalico.org/kube-labels":"{\"beta.kubernetes.io/arch\":\"amd64\",\"beta.kubernetes.io/os\":\"linux\",\"kubernetes.io/arch\":\"amd64\",\"kubernetes.io/hostname\":\"node1.tpurchas.gmail.com.beta.tailscale.net\",\"kubernetes.io/os\":\"linux\",\"node-role.kubernetes.io/control-plane\":\"\",\"node-role.kubernetes.io/master\":\"\",\"node.kubernetes.io/exclude-from-external-load-balancers\":\"\"}"}, OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.NodeSpec{BGP:(*v3.NodeBGPSpec)(0xc000bf8f50), IPv4VXLANTunnelAddr:"172.16.117.192", VXLANTunnelMACAddr:"", OrchRefs:[]v3.OrchRef{v3.OrchRef{NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net", Orchestrator:"k8s"}}, Wireguard:(*v3.NodeWireguardSpec)(nil), Addresses:[]v3.NodeAddress{v3.NodeAddress{Address:"100.64.226.74/32", Type:"CalicoNodeIP"}, v3.NodeAddress{Address:"100.64.226.74", Type:"InternalIP"}}}, Status:v3.NodeStatus{WireguardPublicKey:"", PodCIDRs:[]string{"172.16.0.0/24"}}} | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validator.go 511: Validate IPv4 network: 100.64.226.74/32 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Node(name=node2.tpurchas.gmail.com.beta.tailscale.net) value=100.110.110.87 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=Node(name=node2.tpurchas.gmail.com.beta.tailscale.net) value=100.110.110.87 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=HostConfig(node=node2.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) value="172.16.56.0" | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=HostConfig(node=node2.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) value="172.16.56.0" | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Node(node2.tpurchas.gmail.com.beta.tailscale.net) value=&v3.Node{TypeMeta:v1.TypeMeta{Kind:"Node", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"node2.tpurchas.gmail.com.beta.tailscale.net", GenerateName:"", Namespace:"", SelfLink:"", UID:"ea704880-ae12-47d6-a482-7bb5409e2843", ResourceVersion:"455992", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774344616, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"beta.kubernetes.io/arch":"amd64", "beta.kubernetes.io/os":"linux", "kubernetes.io/arch":"amd64", "kubernetes.io/hostname":"node2.tpurchas.gmail.com.beta.tailscale.net", "kubernetes.io/os":"linux"}, Annotations:map[string]string{"projectcalico.org/kube-labels":"{\"beta.kubernetes.io/arch\":\"amd64\",\"beta.kubernetes.io/os\":\"linux\",\"kubernetes.io/arch\":\"amd64\",\"kubernetes.io/hostname\":\"node2.tpurchas.gmail.com.beta.tailscale.net\",\"kubernetes.io/os\":\"linux\"}"}, OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.NodeSpec{BGP:(*v3.NodeBGPSpec)(0xc000bf9540), IPv4VXLANTunnelAddr:"172.16.56.0", VXLANTunnelMACAddr:"", OrchRefs:[]v3.OrchRef{v3.OrchRef{NodeName:"node2.tpurchas.gmail.com.beta.tailscale.net", Orchestrator:"k8s"}}, Wireguard:(*v3.NodeWireguardSpec)(nil), Addresses:[]v3.NodeAddress{v3.NodeAddress{Address:"100.110.110.87/32", Type:"CalicoNodeIP"}, v3.NodeAddress{Address:"5.183.171.190", Type:"InternalIP"}}}, Status:v3.NodeStatus{WireguardPublicKey:"", PodCIDRs:[]string{"172.16.1.0/24"}}} | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Node(node2.tpurchas.gmail.com.beta.tailscale.net) value=&v3.Node{TypeMeta:v1.TypeMeta{Kind:"Node", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"node2.tpurchas.gmail.com.beta.tailscale.net", GenerateName:"", Namespace:"", SelfLink:"", UID:"ea704880-ae12-47d6-a482-7bb5409e2843", ResourceVersion:"455992", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774344616, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"beta.kubernetes.io/arch":"amd64", "beta.kubernetes.io/os":"linux", "kubernetes.io/arch":"amd64", "kubernetes.io/hostname":"node2.tpurchas.gmail.com.beta.tailscale.net", "kubernetes.io/os":"linux"}, Annotations:map[string]string{"projectcalico.org/kube-labels":"{\"beta.kubernetes.io/arch\":\"amd64\",\"beta.kubernetes.io/os\":\"linux\",\"kubernetes.io/arch\":\"amd64\",\"kubernetes.io/hostname\":\"node2.tpurchas.gmail.com.beta.tailscale.net\",\"kubernetes.io/os\":\"linux\"}"}, OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.NodeSpec{BGP:(*v3.NodeBGPSpec)(0xc000bf9540), IPv4VXLANTunnelAddr:"172.16.56.0", VXLANTunnelMACAddr:"", OrchRefs:[]v3.OrchRef{v3.OrchRef{NodeName:"node2.tpurchas.gmail.com.beta.tailscale.net", Orchestrator:"k8s"}}, Wireguard:(*v3.NodeWireguardSpec)(nil), Addresses:[]v3.NodeAddress{v3.NodeAddress{Address:"100.110.110.87/32", Type:"CalicoNodeIP"}, v3.NodeAddress{Address:"5.183.171.190", Type:"InternalIP"}}}, Status:v3.NodeStatus{WireguardPublicKey:"", PodCIDRs:[]string{"172.16.1.0/24"}}} | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validator.go 511: Validate IPv4 network: 100.110.110.87/32 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Node(name=node3.tpurchas.gmail.com.beta.tailscale.net) value=100.91.105.84 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=Node(name=node3.tpurchas.gmail.com.beta.tailscale.net) value=100.91.105.84 | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=HostConfig(node=node3.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) value="172.16.98.192" | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=HostConfig(node=node3.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) value="172.16.98.192" | |
2021-12-07 00:26:11.445 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Node(node3.tpurchas.gmail.com.beta.tailscale.net) value=&v3.Node{TypeMeta:v1.TypeMeta{Kind:"Node", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"node3.tpurchas.gmail.com.beta.tailscale.net", GenerateName:"", Namespace:"", SelfLink:"", UID:"af803a38-73d6-4a70-8791-0951f34e7e6a", ResourceVersion:"560288", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774428174, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"beta.kubernetes.io/arch":"amd64", "beta.kubernetes.io/os":"linux", "kubernetes.io/arch":"amd64", "kubernetes.io/hostname":"node3.tpurchas.gmail.com.beta.tailscale.net", "kubernetes.io/os":"linux"}, Annotations:map[string]string{"projectcalico.org/kube-labels":"{\"beta.kubernetes.io/arch\":\"amd64\",\"beta.kubernetes.io/os\":\"linux\",\"kubernetes.io/arch\":\"amd64\",\"kubernetes.io/hostname\":\"node3.tpurchas.gmail.com.beta.tailscale.net\",\"kubernetes.io/os\":\"linux\"}"}, OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.NodeSpec{BGP:(*v3.NodeBGPSpec)(0xc000bf9630), IPv4VXLANTunnelAddr:"172.16.98.192", VXLANTunnelMACAddr:"", OrchRefs:[]v3.OrchRef{v3.OrchRef{NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net", Orchestrator:"k8s"}}, Wireguard:(*v3.NodeWireguardSpec)(nil), Addresses:[]v3.NodeAddress{v3.NodeAddress{Address:"100.91.105.84/32", Type:"CalicoNodeIP"}, v3.NodeAddress{Address:"100.91.105.84", Type:"InternalIP"}}}, Status:v3.NodeStatus{WireguardPublicKey:"", PodCIDRs:[]string{"172.16.2.0/24"}}} | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Node(node3.tpurchas.gmail.com.beta.tailscale.net) value=&v3.Node{TypeMeta:v1.TypeMeta{Kind:"Node", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"node3.tpurchas.gmail.com.beta.tailscale.net", GenerateName:"", Namespace:"", SelfLink:"", UID:"af803a38-73d6-4a70-8791-0951f34e7e6a", ResourceVersion:"560288", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774428174, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"beta.kubernetes.io/arch":"amd64", "beta.kubernetes.io/os":"linux", "kubernetes.io/arch":"amd64", "kubernetes.io/hostname":"node3.tpurchas.gmail.com.beta.tailscale.net", "kubernetes.io/os":"linux"}, Annotations:map[string]string{"projectcalico.org/kube-labels":"{\"beta.kubernetes.io/arch\":\"amd64\",\"beta.kubernetes.io/os\":\"linux\",\"kubernetes.io/arch\":\"amd64\",\"kubernetes.io/hostname\":\"node3.tpurchas.gmail.com.beta.tailscale.net\",\"kubernetes.io/os\":\"linux\"}"}, OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.NodeSpec{BGP:(*v3.NodeBGPSpec)(0xc000bf9630), IPv4VXLANTunnelAddr:"172.16.98.192", VXLANTunnelMACAddr:"", OrchRefs:[]v3.OrchRef{v3.OrchRef{NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net", Orchestrator:"k8s"}}, Wireguard:(*v3.NodeWireguardSpec)(nil), Addresses:[]v3.NodeAddress{v3.NodeAddress{Address:"100.91.105.84/32", Type:"CalicoNodeIP"}, v3.NodeAddress{Address:"100.91.105.84", Type:"InternalIP"}}}, Status:v3.NodeStatus{WireguardPublicKey:"", PodCIDRs:[]string{"172.16.2.0/24"}}} | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/validator.go 511: Validate IPv4 network: 100.91.105.84/32 | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/async_calc_graph.go 123: Got 9 updates; queueing | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/async_calc_graph.go 145: Pulled []KVPair off channel | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{KubernetesEndpointSlice(default/kubernetes) &EndpointSlice{ObjectMeta:{kubernetes default b3bc9b19-093a-4f83-9f4f-72a24c8df0dc 209 1 2021-12-02 00:04:59 +0000 UTC <nil> <nil> map[kubernetes.io/service-name:kubernetes] map[] [] [] [{kube-apiserver Update discovery.k8s.io/v1 2021-12-02 00:04:59 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:labels":{".":{},"f:kubernetes.io/service-name":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[100.64.226.74],Conditions:EndpointConditions{Ready:*true,Serving:nil,Terminating:nil,},Hostname:nil,TargetRef:nil,Topology:map[string]string{},NodeName:nil,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*https,Protocol:*TCP,Port:*6443,AppProtocol:nil,},},AddressType:IPv4,} 209 <nil> 0s} 1} | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/serviceindex.go 76: Updating ServiceIndex with EndpointSlice KubernetesEndpointSlice(default/kubernetes) | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/serviceindex.go 183: Endpoint slice kubernetes belongs to service default/kubernetes | |
2021-12-07 00:26:11.446 [DEBUG][63] felix/serviceindex.go 133: EndpointSlice doesn't belong to an active service, simply cache it. slice="default/kubernetes" svc="default/kubernetes" | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=KubernetesEndpointSlice(default/kubernetes) | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{KubernetesEndpointSlice(kube-system/kube-dns-qlzmc) &EndpointSlice{ObjectMeta:{kube-dns-qlzmc kube-dns- kube-system 14593334-bbae-428e-afc8-724f0b993d69 455981 142 2021-12-02 00:05:14 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:kube-dns kubernetes.io/cluster-service:true kubernetes.io/name:CoreDNS kubernetes.io/service-name:kube-dns] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:05:00Z] [{v1 Service kube-dns 5dbdc93e-efb5-4b77-ac91-ac5e52b26929 0xc0008bb638 0xc0008bb639}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/cluster-service":{},"f:kubernetes.io/name":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"5dbdc93e-efb5-4b77-ac91-ac5e52b26929\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.197],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-78fcd69978-kfckw,UID:a75bf0c2-ee45-405c-b793-5a5c396daf84,APIVersion:,ResourceVersion:453843,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},Endpoint{Addresses:[172.16.117.196],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-78fcd69978-jrwnw,UID:043ff623-b983-42d3-b215-f1cd106891e2,APIVersion:,ResourceVersion:453834,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*metrics,Protocol:*TCP,Port:*9153,AppProtocol:nil,},EndpointPort{Name:*dns,Protocol:*UDP,Port:*53,AppProtocol:nil,},EndpointPort{Name:*dns-tcp,Protocol:*TCP,Port:*53,AppProtocol:nil,},},AddressType:IPv4,} 455981 <nil> 0s} 1} | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/serviceindex.go 76: Updating ServiceIndex with EndpointSlice KubernetesEndpointSlice(kube-system/kube-dns-qlzmc) | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/serviceindex.go 183: Endpoint slice kube-dns-qlzmc belongs to service kube-system/kube-dns | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/serviceindex.go 133: EndpointSlice doesn't belong to an active service, simply cache it. slice="kube-system/kube-dns-qlzmc" svc="kube-system/kube-dns" | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=KubernetesEndpointSlice(kube-system/kube-dns-qlzmc) | |
2021-12-07 00:26:11.447 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/list_pager.go 52: List() call completed, convert results Resource="Profile" from="serviceaccounts" pagedList=false | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{KubernetesEndpointSlice(kubernetes-dashboard/dashboard-metrics-scraper-g5vc7) &EndpointSlice{ObjectMeta:{dashboard-metrics-scraper-g5vc7 dashboard-metrics-scraper- kubernetes-dashboard 6a1776f4-b81a-497a-947e-861a0a818a80 455979 9 2021-12-02 00:07:03 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:dashboard-metrics-scraper kubernetes.io/service-name:dashboard-metrics-scraper] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:07:03Z] [{v1 Service dashboard-metrics-scraper 6b0daf1e-915b-4ba2-b702-fd871ef63179 0xc0008bb64c 0xc0008bb64d}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"6b0daf1e-915b-4ba2-b702-fd871ef63179\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.131],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kubernetes-dashboard,Name:dashboard-metrics-scraper-c45b7869d-lhzdg,UID:d0a919e7-00ee-4b59-8b14-c1f793c0c79f,APIVersion:,ResourceVersion:453825,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8000,AppProtocol:nil,},},AddressType:IPv4,} 455979 <nil> 0s} 1} | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/serviceindex.go 76: Updating ServiceIndex with EndpointSlice KubernetesEndpointSlice(kubernetes-dashboard/dashboard-metrics-scraper-g5vc7) | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/serviceindex.go 183: Endpoint slice dashboard-metrics-scraper-g5vc7 belongs to service kubernetes-dashboard/dashboard-metrics-scraper | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/serviceindex.go 133: EndpointSlice doesn't belong to an active service, simply cache it. slice="kubernetes-dashboard/dashboard-metrics-scraper-g5vc7" svc="kubernetes-dashboard/dashboard-metrics-scraper" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=KubernetesEndpointSlice(kubernetes-dashboard/dashboard-metrics-scraper-g5vc7) | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=projectcalico-default-allow)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(projectcalico-default-allow)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=kns.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=kns.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(kns.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=kns.kube-node-lease)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=kns.kube-node-lease)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(kns.kube-node-lease)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{KubernetesEndpointSlice(kubernetes-dashboard/kubernetes-dashboard-75gq9) &EndpointSlice{ObjectMeta:{kubernetes-dashboard-75gq9 kubernetes-dashboard- kubernetes-dashboard ba6b1323-6e27-4ff9-886c-f2878a743b16 455982 9 2021-12-02 00:07:03 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:kubernetes-dashboard kubernetes.io/service-name:kubernetes-dashboard] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-02T00:07:03Z] [{v1 Service kubernetes-dashboard 9e8f75c2-558e-4819-ae9a-5bccaa6f0543 0xc0008bb658 0xc0008bb659}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"9e8f75c2-558e-4819-ae9a-5bccaa6f0543\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.133],Conditions:EndpointConditions{Ready:*true,Serving:*true,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kubernetes-dashboard,Name:kubernetes-dashboard-576cb95f94-mc6nn,UID:af22c47f-f7c9-4c90-90ef-69ae638dd250,APIVersion:,ResourceVersion:455978,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8443,AppProtocol:nil,},},AddressType:IPv4,} 455982 <nil> 0s} 1} | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=kns.kube-public)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/serviceindex.go 76: Updating ServiceIndex with EndpointSlice KubernetesEndpointSlice(kubernetes-dashboard/kubernetes-dashboard-75gq9) | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=kns.kube-public)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/serviceindex.go 183: Endpoint slice kubernetes-dashboard-75gq9 belongs to service kubernetes-dashboard/kubernetes-dashboard | |
2021-12-07 00:26:11.448 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(kns.kube-public)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/serviceindex.go 133: EndpointSlice doesn't belong to an active service, simply cache it. slice="kubernetes-dashboard/kubernetes-dashboard-75gq9" svc="kubernetes-dashboard/kubernetes-dashboard" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=kns.kube-system)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=KubernetesEndpointSlice(kubernetes-dashboard/kubernetes-dashboard-75gq9) | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=kns.kube-system)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(kns.kube-system)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=kns.kubernetes-dashboard)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=kns.kubernetes-dashboard)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{KubernetesEndpointSlice(kube-system/metrics-server-xhkct) &EndpointSlice{ObjectMeta:{metrics-server-xhkct metrics-server- kube-system 958a2bd0-13e7-40d1-a8b6-dbe493eebf13 455983 3 2021-12-05 23:53:34 +0000 UTC <nil> <nil> map[endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io k8s-app:metrics-server kubernetes.io/service-name:metrics-server] map[endpoints.kubernetes.io/last-change-trigger-time:2021-12-05T23:53:34Z] [{v1 Service metrics-server 65d5f979-cd57-4b85-ba45-8f84ab00d57a 0xc0008bb664 0xc0008bb665}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:annotations":{".":{},"f:endpoints.kubernetes.io/last-change-trigger-time":{}},"f:generateName":{},"f:labels":{".":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:k8s-app":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"65d5f979-cd57-4b85-ba45-8f84ab00d57a\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.117.199],Conditions:EndpointConditions{Ready:*false,Serving:*false,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:kube-system,Name:metrics-server-dbf765b9b-n9l7r,UID:2f4b42b3-f365-49ee-9916-cc7f7ab105f2,APIVersion:,ResourceVersion:454480,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node1.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node1.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*https,Protocol:*TCP,Port:*4443,AppProtocol:nil,},},AddressType:IPv4,} 455983 <nil> 0s} 1} | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(kns.kubernetes-dashboard)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.default.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/serviceindex.go 76: Updating ServiceIndex with EndpointSlice KubernetesEndpointSlice(kube-system/metrics-server-xhkct) | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.default.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.default.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/serviceindex.go 183: Endpoint slice metrics-server-xhkct belongs to service kube-system/metrics-server | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/serviceindex.go 133: EndpointSlice doesn't belong to an active service, simply cache it. slice="kube-system/metrics-server-xhkct" svc="kube-system/metrics-server" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=KubernetesEndpointSlice(kube-system/metrics-server-xhkct) | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-node-lease.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-node-lease.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-node-lease.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-public.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-public.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-public.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{KubernetesEndpointSlice(default/hello-minikube-sb8p7) &EndpointSlice{ObjectMeta:{hello-minikube-sb8p7 hello-minikube- default d88d58f3-b870-4e07-a540-a48088c1d0ce 559963 123 2021-12-02 00:46:09 +0000 UTC <nil> <nil> map[app:hello-minikube endpointslice.kubernetes.io/managed-by:endpointslice-controller.k8s.io kubernetes.io/service-name:hello-minikube] map[] [{v1 Service hello-minikube e375d0ca-cfb4-41f4-ab76-72e3c0736e35 0xc0008bb670 0xc0008bb671}] [] [{kube-controller-manager Update discovery.k8s.io/v1 2021-12-07 00:22:13 +0000 UTC FieldsV1 {"f:addressType":{},"f:endpoints":{},"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:app":{},"f:endpointslice.kubernetes.io/managed-by":{},"f:kubernetes.io/service-name":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"e375d0ca-cfb4-41f4-ab76-72e3c0736e35\"}":{}}},"f:ports":{}}}]},Endpoints:[]Endpoint{Endpoint{Addresses:[172.16.98.202],Conditions:EndpointConditions{Ready:*false,Serving:*false,Terminating:*false,},Hostname:nil,TargetRef:&v1.ObjectReference{Kind:Pod,Namespace:default,Name:hello-minikube-6ddfcc9757-sp9xc,UID:76584ce6-d84b-4024-a48d-f4ba55aba012,APIVersion:,ResourceVersion:559962,FieldPath:,},Topology:map[string]string{kubernetes.io/hostname: node3.tpurchas.gmail.com.beta.tailscale.net,},NodeName:*node3.tpurchas.gmail.com.beta.tailscale.net,Hints:nil,},},Ports:[]EndpointPort{EndpointPort{Name:*,Protocol:*TCP,Port:*8080,AppProtocol:nil,},},AddressType:IPv4,} 559963 <nil> 0s} 1} | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-system.attachdetach-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-system.attachdetach-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-system.attachdetach-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/serviceindex.go 76: Updating ServiceIndex with EndpointSlice KubernetesEndpointSlice(default/hello-minikube-sb8p7) | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/serviceindex.go 183: Endpoint slice hello-minikube-sb8p7 belongs to service default/hello-minikube | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-system.bootstrap-signer)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-system.bootstrap-signer)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.449 [DEBUG][63] felix/serviceindex.go 133: EndpointSlice doesn't belong to an active service, simply cache it. slice="default/hello-minikube-sb8p7" svc="default/hello-minikube" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=KubernetesEndpointSlice(default/hello-minikube-sb8p7) | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-system.bootstrap-signer)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-system.calico-kube-controllers)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/async_calc_graph.go 211: Not throttled: flushing event buffer | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 670: Done flushing IP address deltas | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 664: Done flushing IP set removes | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-system.calico-kube-controllers)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 730: Done flushing Service Accounts | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-system.calico-kube-controllers)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 804: Done flushing Namespaces | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-system.calico-node)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 881: Done flushing route deletes | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-system.calico-node)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 831: Done flushing VTEP removes | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 840: Done flushing VTEP adds | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/event_sequencer.go 869: Done flushing route adds | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-system.calico-node)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/async_calc_graph.go 145: Pulled []KVPair off channel | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-system.certificate-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{GlobalFelixConfig(name=LogSeverityScreen) Info 443603 <nil> 0s} 1} | |
2021-12-07 00:26:11.450 [DEBUG][63] felix/dispatcher.go 95: Type: model.GlobalConfigKey | |
... dropped 221 logs ... | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/event_sequencer.go 869: Done flushing route adds | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/async_calc_graph.go 145: Pulled []KVPair off channel | |
2021-12-07 00:26:11.457 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Node(name=node1.tpurchas.gmail.com.beta.tailscale.net) 100.64.226.74 559988 <nil> 0s} 1} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dispatcher.go 95: Type: model.HostIPKey | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.458 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dataplane_passthru.go 68: Passing-through HostIP update update=api.Update{KVPair:model.KVPair{Key:model.HostIPKey{Hostname:"node1.tpurchas.gmail.com.beta.tailscale.net"}, Value:(*net.IP)(0xc000b1e1f8), Revision:"559988", UID:(*types.UID)(nil), TTL:0}, UpdateType:0x1} | |
2021-12-07 00:26:11.458 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/event_sequencer.go 463: HostIP update hostname="node1.tpurchas.gmail.com.beta.tailscale.net" ip=100.64.226.74 | |
2021-12-07 00:26:11.458 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=135 | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node1.tpurchas.gmail.com.beta.tailscale.net" key=Node(name=node1.tpurchas.gmail.com.beta.tailscale.net) newCount=1 | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=projectcalico-default-allow) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=projectcalico-default-allow) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{HostConfig(node=node1.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) 172.16.117.192 559988 <nil> 0s} 1} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dispatcher.go 95: Type: model.HostConfigKey | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9d580), (dispatcher.UpdateHandler)(0x1a9cb40), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/vxlan_resolver.go 176: IPv4VXLANTunnelAddr update node="node1.tpurchas.gmail.com.beta.tailscale.net" value="172.16.117.192" | |
2021-12-07 00:26:11.458 [INFO][63] felix/vxlan_resolver.go 252: Missing IP for node, cannot send VTEP yet node="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/config_batcher.go 56: Ignoring host config not for this host: HostConfig(node=node1.tpurchas.gmail.com.beta.tailscale.net,name=IPv4VXLANTunnelAddr) | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Node(node1.tpurchas.gmail.com.beta.tailscale.net) 0xc000165040 559988 <nil> 0s} 1} | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.454 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-system.ttl-after-finished-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Node(node1.tpurchas.gmail.com.beta.tailscale.net) | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-system.ttl-after-finished-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kube-system.ttl-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kube-system.ttl-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kube-system.ttl-controller)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kubernetes-dashboard.admin-user)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 329: OnResourceUpdate triggered node="node1.tpurchas.gmail.com.beta.tailscale.net" update=api.Update{KVPair:model.KVPair{Key:model.ResourceKey{Name:"node1.tpurchas.gmail.com.beta.tailscale.net", Namespace:"", Kind:"Node"}, Value:(*v3.Node)(0xc000165040), Revision:"559988", UID:(*types.UID)(nil), TTL:0}, UpdateType:0x1} | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kubernetes-dashboard.admin-user)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x3, NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kubernetes-dashboard.admin-user)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string{"node1.tpurchas.gmail.com.beta.tailscale.net"}}, Refs:[]calc.Ref(nil), WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kubernetes-dashboard.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kubernetes-dashboard.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.192/32 | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kubernetes-dashboard.default)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.117.192/32 type=VXLAN | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileLabels(name=ksa.kubernetes-dashboard.kubernetes-dashboard)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.117.192/32 | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.192/32 | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_TUNNEL ip_pool_type:VXLAN dst:"172.16.117.192/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.117.192/32"} | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="ProfileRules(name=ksa.kubernetes-dashboard.kubernetes-dashboard)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="Profile(ksa.kubernetes-dashboard.kubernetes-dashboard)" ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [INFO][63] felix/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/k8s.go 657: Performing 'Watch' for Profile model.ResourceListOptions | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x3, NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x3, NodeName:"node1.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/profile.go 287: Watching namespace at revision "560291" | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=100.64.226.74/32 | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 677: Remote host route. cidr=100.64.226.74/32 | |
2021-12-07 00:26:11.459 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_HOST dst:"100.64.226.74/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"100.64.226.74/32"} | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string{"node1.tpurchas.gmail.com.beta.tailscale.net"}}, Refs:[]calc.Ref(nil), WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string{"node1.tpurchas.gmail.com.beta.tailscale.net"}}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.131/32 | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.117.131/32 type=VXLAN | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.117.131/32 | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.131/32 | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.117.131/32"} | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 950: Ignoring no-op change cidr=172.16.117.131/32 | |
2021-12-07 00:26:11.460 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.133/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.117.133/32 type=VXLAN | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.117.133/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.133/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.117.133/32"} | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 950: Ignoring no-op change cidr=172.16.117.133/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.134/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.117.134/32 type=VXLAN | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.117.134/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.134/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.134/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.117.134/32"} | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 950: Ignoring no-op change cidr=172.16.117.134/32 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.117.192/26 | |
2021-12-07 00:26:11.458 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(projectcalico-default-allow) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"projectcalico-default-allow", GenerateName:"", Namespace:"", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:0, loc:(*time.Location)(nil)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, Egress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, LabelsToApply:map[string]string(nil)}} | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.117.192/26 type=VXLAN | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.117.192/26 | |
2021-12-07 00:26:11.461 [DEBUG][63] felix/l3_route_resolver.go 666: Remote workload route. cidr=172.16.117.192/26 | |
... dropped 188 logs ... | |
2021-12-07 00:26:11.467 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/kubernetesnetworkpolicies" | |
2021-12-07 00:26:11.467 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/kubernetesnetworkpolicies" | |
2021-12-07 00:26:11.467 [DEBUG][63] felix/validator.go 249: Validate action: Allow | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="HostEndpoint (custom)" | |
W1207 00:26:11.468130 63 warnings.go:70] discovery.k8s.io/v1beta1 EndpointSlice is deprecated in v1.21+, unavailable in v1.25+; use discovery.k8s.io/v1 EndpointSlice | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/networksets" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/networksets" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/networkpolicies" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/networkpolicies" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/profile.go 306: Watching serviceAccount at revision "560291" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/kubernetesendpointslices" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/kubernetesendpointslices" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="KubernetesEndpointSlice" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="KubernetesNetworkPolicy" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="NetworkSet (custom)" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="NetworkPolicy (custom)" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="Profile-NS" | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.468 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchersyncer.go 207: Received sync status event from watcher SyncUpdate=in-sync | |
2021-12-07 00:26:11.468 [INFO][63] felix/watchersyncer.go 209: Received InSync event from one of the watcher caches | |
2021-12-07 00:26:11.468 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=14 | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/event_sequencer.go 840: Done flushing VTEP adds | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/event_sequencer.go 869: Done flushing route adds | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.469 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.467 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/hostendpoints" | |
2021-12-07 00:26:11.470 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/hostendpoints" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/profiles" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="Profile-SA" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/profile.go 383: Watcher process started for profile. | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/masq_mgr.go 91: IPAM pool update/create id="172.16.0.0-16" ipVersion=0x4 | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/masq_mgr.go 126: Adding IPAM pool to IP sets. id="172.16.0.0-16" ipVersion=0x4 | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/ipsets.go 175: Adding new members to IP set family="inet" filteredMembers=set.mapSet{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x0, 0x0}, prefix:0x10}:set.empty{}} setID="all-ipam-pools" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/masq_mgr.go 129: IPAM has masquerade enabled. id="172.16.0.0-16" ipVersion=0x4 | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/ipsets.go 175: Adding new members to IP set family="inet" filteredMembers=set.mapSet{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x0, 0x0}, prefix:0x10}:set.empty{}} setID="masq-ipam-pools" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:"172.16.0.0-16" pool:<cidr:"172.16.0.0/16" masquerade:true > | |
2021-12-07 00:26:11.471 [INFO][63] felix/int_dataplane.go 1506: Received *proto.VXLANTunnelEndpointUpdate update from calculation graph msg=node:"node2.tpurchas.gmail.com.beta.tailscale.net" mac:"66:4d:12:81:74:cd" ipv4_addr:"172.16.56.0" parent_device_ip:"100.110.110.87" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/vxlan_mgr.go 201: VXLAN data plane received VTEP update msg=node:"node2.tpurchas.gmail.com.beta.tailscale.net" mac:"66:4d:12:81:74:cd" ipv4_addr:"172.16.56.0" parent_device_ip:"100.110.110.87" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/xdp_state.go 134: Received message msg=node:"node2.tpurchas.gmail.com.beta.tailscale.net" mac:"66:4d:12:81:74:cd" ipv4_addr:"172.16.56.0" parent_device_ip:"100.110.110.87" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=node:"node2.tpurchas.gmail.com.beta.tailscale.net" mac:"66:4d:12:81:74:cd" ipv4_addr:"172.16.56.0" parent_device_ip:"100.110.110.87" | |
2021-12-07 00:26:11.467 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=node:"node2.tpurchas.gmail.com.beta.tailscale.net" mac:"66:4d:12:81:74:cd" ipv4_addr:"172.16.56.0" parent_device_ip:"100.110.110.87" | |
2021-12-07 00:26:11.471 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.471 [INFO][63] felix/int_dataplane.go 1506: Received *proto.VXLANTunnelEndpointUpdate update from calculation graph msg=node:"node3.tpurchas.gmail.com.beta.tailscale.net" mac:"66:79:e9:1f:60:a0" ipv4_addr:"172.16.98.192" parent_device_ip:"100.91.105.84" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/vxlan_mgr.go 201: VXLAN data plane received VTEP update msg=node:"node3.tpurchas.gmail.com.beta.tailscale.net" mac:"66:79:e9:1f:60:a0" ipv4_addr:"172.16.98.192" parent_device_ip:"100.91.105.84" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/validator.go 249: Validate action: Allow | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/xdp_state.go 134: Received message msg=node:"node3.tpurchas.gmail.com.beta.tailscale.net" mac:"66:79:e9:1f:60:a0" ipv4_addr:"172.16.98.192" parent_device_ip:"100.91.105.84" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=kns.default) value=map[string]string{"pcns.kubernetes.io/metadata.name":"default", "pcns.projectcalico.org/name":"default"} | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=node:"node3.tpurchas.gmail.com.beta.tailscale.net" mac:"66:79:e9:1f:60:a0" ipv4_addr:"172.16.98.192" parent_device_ip:"100.91.105.84" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=node:"node3.tpurchas.gmail.com.beta.tailscale.net" mac:"66:79:e9:1f:60:a0" ipv4_addr:"172.16.98.192" parent_device_ip:"100.91.105.84" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=kns.default) value=map[string]string{"pcns.kubernetes.io/metadata.name":"default", "pcns.projectcalico.org/name":"default"} | |
2021-12-07 00:26:11.472 [INFO][63] felix/int_dataplane.go 1506: Received *proto.VXLANTunnelEndpointUpdate update from calculation graph msg=node:"node1.tpurchas.gmail.com.beta.tailscale.net" mac:"66:25:fc:e3:f1:b2" ipv4_addr:"172.16.117.192" parent_device_ip:"100.64.226.74" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/vxlan_mgr.go 201: VXLAN data plane received VTEP update msg=node:"node1.tpurchas.gmail.com.beta.tailscale.net" mac:"66:25:fc:e3:f1:b2" ipv4_addr:"172.16.117.192" parent_device_ip:"100.64.226.74" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=kns.default) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/xdp_state.go 134: Received message msg=node:"node1.tpurchas.gmail.com.beta.tailscale.net" mac:"66:25:fc:e3:f1:b2" ipv4_addr:"172.16.117.192" parent_device_ip:"100.64.226.74" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=node:"node1.tpurchas.gmail.com.beta.tailscale.net" mac:"66:25:fc:e3:f1:b2" ipv4_addr:"172.16.117.192" parent_device_ip:"100.64.226.74" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=node:"node1.tpurchas.gmail.com.beta.tailscale.net" mac:"66:25:fc:e3:f1:b2" ipv4_addr:"172.16.117.192" parent_device_ip:"100.64.226.74" | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=kns.default) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.472 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:REMOTE_TUNNEL ip_pool_type:VXLAN dst:"172.16.117.192/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:REMOTE_TUNNEL ip_pool_type:VXLAN dst:"172.16.117.192/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:REMOTE_TUNNEL ip_pool_type:VXLAN dst:"172.16.117.192/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:REMOTE_TUNNEL ip_pool_type:VXLAN dst:"172.16.117.192/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:REMOTE_TUNNEL ip_pool_type:VXLAN dst:"172.16.117.192/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/wireguard_mgr.go 86: RouteUpdate is a tunnel update | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(kns.default) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"kns.default", GenerateName:"", Namespace:"", SelfLink:"", UID:"c818bf90-dbb3-46d7-8d77-bcca62ff1772", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000299, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, Egress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, LabelsToApply:map[string]string{"pcns.kubernetes.io/metadata.name":"default", "pcns.projectcalico.org/name":"default"}}} | |
2021-12-07 00:26:11.472 [DEBUG][63] felix/wireguard.go 323: RouteUpdate cidr=172.16.117.192/32 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard.go 325: Not enabled - ignoring cidr=172.16.117.192/32 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.473 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:REMOTE_HOST dst:"100.64.226.74/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:REMOTE_HOST dst:"100.64.226.74/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:REMOTE_HOST dst:"100.64.226.74/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(kns.default) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"kns.default", GenerateName:"", Namespace:"", SelfLink:"", UID:"c818bf90-dbb3-46d7-8d77-bcca62ff1772", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000299, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, Egress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, LabelsToApply:map[string]string{"pcns.kubernetes.io/metadata.name":"default", "pcns.projectcalico.org/name":"default"}}} | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:REMOTE_HOST dst:"100.64.226.74/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/validator.go 249: Validate action: Allow | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:REMOTE_HOST dst:"100.64.226.74/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard_mgr.go 73: RouteUpdate is a remote host update | |
2021-12-07 00:26:11.473 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/vxlan_mgr.go 248: deleting route dst 172.16.117.131/32 | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/validator.go 249: Validate action: Allow | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/vxlan_mgr.go 182: VXLAN data plane received route update msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=kns.kube-node-lease) value=map[string]string{"pcns.kubernetes.io/metadata.name":"kube-node-lease", "pcns.projectcalico.org/name":"kube-node-lease"} | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=kns.kube-node-lease) value=map[string]string{"pcns.kubernetes.io/metadata.name":"kube-node-lease", "pcns.projectcalico.org/name":"kube-node-lease"} | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.131/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=kns.kube-node-lease) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard_mgr.go 81: RouteUpdate is a workload update | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard.go 323: RouteUpdate cidr=172.16.117.131/32 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/wireguard.go 325: Not enabled - ignoring cidr=172.16.117.131/32 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.473 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=kns.kube-node-lease) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.474 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/vxlan_mgr.go 248: deleting route dst 172.16.117.133/32 | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/vxlan_mgr.go 182: VXLAN data plane received route update msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(kns.kube-node-lease) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"kns.kube-node-lease", GenerateName:"", Namespace:"", SelfLink:"", UID:"ba212b14-7b00-4bab-bf39-efeeb242ae68", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000298, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, Egress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, LabelsToApply:map[string]string{"pcns.kubernetes.io/metadata.name":"kube-node-lease", "pcns.projectcalico.org/name":"kube-node-lease"}}} | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.133/32" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(kns.kube-node-lease) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"kns.kube-node-lease", GenerateName:"", Namespace:"", SelfLink:"", UID:"ba212b14-7b00-4bab-bf39-efeeb242ae68", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000298, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, Egress:[]v3.Rule{v3.Rule{Action:"Allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), ICMP:(*v3.ICMPFields)(nil), NotProtocol:(*numorstring.Protocol)(nil), NotICMP:(*v3.ICMPFields)(nil), Source:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, Destination:v3.EntityRule{Nets:[]string(nil), Selector:"", NamespaceSelector:"", Services:(*v3.ServiceMatch)(nil), Ports:[]numorstring.Port(nil), NotNets:[]string(nil), NotSelector:"", NotPorts:[]numorstring.Port(nil), ServiceAccounts:(*v3.ServiceAccountMatch)(nil)}, HTTP:(*v3.HTTPMatch)(nil), Metadata:(*v3.RuleMetadata)(nil)}}, LabelsToApply:map[string]string{"pcns.kubernetes.io/metadata.name":"kube-node-lease", "pcns.projectcalico.org/name":"kube-node-lease"}}} | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard_mgr.go 81: RouteUpdate is a workload update | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard.go 323: RouteUpdate cidr=172.16.117.133/32 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard.go 325: Not enabled - ignoring cidr=172.16.117.133/32 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.474 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.192/26" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/validator.go 249: Validate action: Allow | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/vxlan_mgr.go 248: deleting route dst 172.16.117.192/26 | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/vxlan_mgr.go 182: VXLAN data plane received route update msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.192/26" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/validator.go 249: Validate action: Allow | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.192/26" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/parser.go 30: Parsing "" | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=kns.kube-public) value=map[string]string{"pcns.kubernetes.io/metadata.name":"kube-public", "pcns.projectcalico.org/name":"kube-public"} | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.192/26" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=kns.kube-public) value=map[string]string{"pcns.kubernetes.io/metadata.name":"kube-public", "pcns.projectcalico.org/name":"kube-public"} | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.192/26" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:REMOTE_WORKLOAD ip_pool_type:VXLAN dst:"172.16.117.192/26" dst_node_name:"node1.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.64.226.74" nat_outgoing:true | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard_mgr.go 81: RouteUpdate is a workload update | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/wireguard.go 323: RouteUpdate cidr=172.16.117.192/26 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.474 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=kns.kube-public) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.475 [DEBUG][63] felix/wireguard.go 325: Not enabled - ignoring cidr=172.16.117.192/26 name="node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.475 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:LOCAL_TUNNEL ip_pool_type:VXLAN dst:"172.16.98.192/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.475 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:LOCAL_TUNNEL ip_pool_type:VXLAN dst:"172.16.98.192/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true tunnel_type:<vxlan:true > | |
2021-12-07 00:26:11.475 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=kns.kube-public) value=&model.ProfileRules{InboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}, OutboundRules:[]model.Rule{model.Rule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), NotProtocol:(*numorstring.Protocol)(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), SrcTag:"", SrcNet:(*net.IPNet)(nil), SrcNets:[]*net.IPNet(nil), SrcSelector:"", SrcPorts:[]numorstring.Port(nil), SrcService:"", SrcServiceNamespace:"", DstTag:"", DstSelector:"", DstNet:(*net.IPNet)(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstService:"", DstServiceNamespace:"", NotSrcTag:"", NotSrcNet:(*net.IPNet)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcSelector:"", NotSrcPorts:[]numorstring.Port(nil), NotDstTag:"", NotDstSelector:"", NotDstNet:(*net.IPNet)(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", HTTPMatch:(*model.HTTPMatch)(nil), LogPrefix:"", Metadata:(*model.RuleMetadata)(nil)}}} | |
2021-12-07 00:26:11.475 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:LOCAL_TUNNEL ip_pool_type:VXLAN dst:"172.16.98.192/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true tunnel_type:<vxlan:true > | |
... dropped 345 logs ... | |
2021-12-07 00:26:11.492 [DEBUG][63] felix/list_pager.go 52: List() call completed, convert results Resource="WorkloadEndpoint" pagedList=false | |
2021-12-07 00:26:11.492 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="etcd-node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.492 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{dashboard-metrics-scraper-c45b7869d-lhzdg dashboard-metrics-scraper-c45b7869d- kubernetes-dashboard d0a919e7-00ee-4b59-8b14-c1f793c0c79f 453825 0 2021-12-02 05:37:38 +0000 UTC <nil> <nil> map[k8s-app:dashboard-metrics-scraper pod-template-hash:c45b7869d] map[cni.projectcalico.org/containerID:9a62db43407cd483c8af1b14fdff2e61cd5a7b5f11bf1f9b2765a0af0a5ba8fe cni.projectcalico.org/podIP:172.16.117.131/32 cni.projectcalico.org/podIPs:172.16.117.131/32 seccomp.security.alpha.kubernetes.io/pod:runtime/default] [{apps/v1 ReplicaSet dashboard-metrics-scraper-c45b7869d a6d60831-1e54-401c-a0d4-c9dbc88f5088 0xc0008bb2f7 0xc0008bb2f8}] [] [{kube-controller-manager Update v1 2021-12-02 05:37:38 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:k8s-app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"a6d60831-1e54-401c-a0d4-c9dbc88f5088\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"dashboard-metrics-scraper\"}":{".":{},"f:image":{},"f:imagePullPolicy":{},"f:livenessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:initialDelaySeconds":{},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:name":{},"f:ports":{".":{},"k:{\"containerPort\":8000,\"protocol\":\"TCP\"}":{".":{},"f:containerPort":{},"f:protocol":{}}},"f:resources":{},"f:securityContext":{".":{},"f:allowPrivilegeEscalation":{},"f:readOnlyRootFilesystem":{},"f:runAsGroup":{},"f:runAsUser":{}},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{},"f:volumeMounts":{".":{},"k:{\"mountPath\":\"/tmp\"}":{".":{},"f:mountPath":{},"f:name":{}}}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:nodeSelector":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{".":{},"f:seccompProfile":{".":{},"f:type":{}}},"f:serviceAccount":{},"f:serviceAccountName":{},"f:terminationGracePeriodSeconds":{},"f:tolerations":{},"f:volumes":{".":{},"k:{\"name\":\"tmp-volume\"}":{".":{},"f:emptyDir":{},"f:name":{}}}}}} {calico Update v1 2021-12-02 05:37:40 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-02 05:37:41 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.117.131\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:tmp-volume,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:&EmptyDirVolumeSource{Medium:,SizeLimit:<nil>,},GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:nil,StorageOS:nil,CSI:nil,Ephemeral:nil,},},Volume{Name:kube-api-access-5g6rg,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:dashboard-metrics-scraper,Image:kubernetesui/metrics-scraper:v1.0.7,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{ContainerPort{Name:,HostPort:0,ContainerPort:8000,Protocol:TCP,HostIP:,},},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tmp-volume,ReadOnly:false,MountPath:/tmp,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5g6rg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/,Port:{0 8000 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:30,TimeoutSeconds:30,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:nil,SELinuxOptions:nil,RunAsUser:*1001,RunAsNonRoot:nil,ReadOnlyRootFilesystem:*true,AllowPrivilegeEscalation:*false,RunAsGroup:*2001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{kubernetes.io/os: linux,},ServiceAccountName:kubernetes-dashboard,DeprecatedServiceAccount:kubernetes-dashboard,NodeName:node1.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:node-role.kubernetes.io/master,Operator:,Value:,Effect:NoSchedule,TolerationSeconds:nil,},Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:,Priority:*0,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:38 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:41 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:41 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:38 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.64.226.74,PodIP:172.16.117.131,StartTime:2021-12-02 05:37:38 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:dashboard-metrics-scraper,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-02 05:37:40 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:nil,},Ready:true,RestartCount:0,Image:kubernetesui/metrics-scraper:v1.0.7,ImageID:docker-pullable://kubernetesui/metrics-scraper@sha256:36d5b3f60e1a144cc5ada820910535074bdf5cf73fb70d1ff1681537eef4e172,ContainerID:docker://c319b9911b09d61bfd6a57eab9f528917766539aa3aa3bc011824e7661c2e83e,Started:*true,},},QOSClass:BestEffort,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.117.131,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.493 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.117.131"}} | |
2021-12-07 00:26:11.493 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.493 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="kube-proxy-vhlfz" | |
2021-12-07 00:26:11.493 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{hostnames-57b79fc5df-6sw8n hostnames-57b79fc5df- default 2c01f278-c628-4767-83ac-38cf0e8096b8 559922 0 2021-12-06 22:59:09 +0000 UTC <nil> <nil> map[app:hostnames pod-template-hash:57b79fc5df] map[cni.projectcalico.org/containerID:8b122e3352bfb279f3f3bc3c0b557521da2e9c9d5dbb1143758f7f99806446b6 cni.projectcalico.org/podIP:172.16.98.203/32 cni.projectcalico.org/podIPs:172.16.98.203/32] [{apps/v1 ReplicaSet hostnames-57b79fc5df ba500662-d7ce-4cbf-a28d-54a373b686ef 0xc000ae0ba7 0xc000ae0ba8}] [] [{kube-controller-manager Update v1 2021-12-06 22:59:09 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"ba500662-d7ce-4cbf-a28d-54a373b686ef\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"serve-hostname-42szp\"}":{".":{},"f:image":{},"f:imagePullPolicy":{},"f:name":{},"f:resources":{},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:terminationGracePeriodSeconds":{}}}} {calico Update v1 2021-12-06 22:59:10 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-07 00:21:55 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.98.203\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:kube-api-access-x85t5,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:serve-hostname-42szp,Image:k8s.gcr.io/serve_hostname,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-x85t5,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:Always,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{},ServiceAccountName:default,DeprecatedServiceAccount:default,NodeName:node3.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:,Priority:*0,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:21:55 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:21:55 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.91.105.84,PodIP:172.16.98.203,StartTime:2021-12-06 22:59:09 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:serve-hostname-42szp,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-07 00:21:54 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:&ContainerStateTerminated{ExitCode:2,Signal:0,Reason:Error,Message:,StartedAt:2021-12-07 00:08:36 +0000 UTC,FinishedAt:2021-12-07 00:21:51 +0000 UTC,ContainerID:containerd://0af2cb59776a9997f33af4d28de2fe860d486181331620064dc85be9db7498bd,},},Ready:true,RestartCount:18,Image:k8s.gcr.io/serve_hostname:latest,ImageID:k8s.gcr.io/serve_hostname@sha256:07ab315083303397079209c526f6ed02f731d2fa7ffa0ad5c40b49410b105fee,ContainerID:containerd://d071e69a9c485885f831c152f6f7e52470481412f7227d181cbe7265b8fc4014,Started:*true,},},QOSClass:BestEffort,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.98.203,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.493 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.98.203"}} | |
2021-12-07 00:26:11.493 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.498 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{hostnames-57b79fc5df-2l5ln hostnames-57b79fc5df- default 38d98cac-adaa-4401-849c-4bdc907def9c 559949 0 2021-12-06 22:59:09 +0000 UTC <nil> <nil> map[app:hostnames pod-template-hash:57b79fc5df] map[cni.projectcalico.org/containerID:8689790c591df61ed22682e9f787910ed67924f4c4fc352b5ed831daf7a1a87f cni.projectcalico.org/podIP:172.16.98.201/32 cni.projectcalico.org/podIPs:172.16.98.201/32] [{apps/v1 ReplicaSet hostnames-57b79fc5df ba500662-d7ce-4cbf-a28d-54a373b686ef 0xc000ae1117 0xc000ae1118}] [] [{kube-controller-manager Update v1 2021-12-06 22:59:09 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"ba500662-d7ce-4cbf-a28d-54a373b686ef\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"serve-hostname-42szp\"}":{".":{},"f:image":{},"f:imagePullPolicy":{},"f:name":{},"f:resources":{},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:terminationGracePeriodSeconds":{}}}} {calico Update v1 2021-12-06 22:59:10 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-07 00:22:11 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.98.201\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:kube-api-access-2tntr,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:serve-hostname-42szp,Image:k8s.gcr.io/serve_hostname,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-2tntr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:Always,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{},ServiceAccountName:default,DeprecatedServiceAccount:default,NodeName:node3.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:,Priority:*0,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:22:11 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:22:11 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.91.105.84,PodIP:172.16.98.201,StartTime:2021-12-06 22:59:09 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:serve-hostname-42szp,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-07 00:22:11 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:&ContainerStateTerminated{ExitCode:2,Signal:0,Reason:Error,Message:,StartedAt:2021-12-07 00:13:06 +0000 UTC,FinishedAt:2021-12-07 00:16:57 +0000 UTC,ContainerID:containerd://fd4514b5402b4b055e4131f5471f7ad23e33efc627b84c2d23745388853f4713,},},Ready:true,RestartCount:17,Image:k8s.gcr.io/serve_hostname:latest,ImageID:k8s.gcr.io/serve_hostname@sha256:07ab315083303397079209c526f6ed02f731d2fa7ffa0ad5c40b49410b105fee,ContainerID:containerd://4170e84aa7d295062775542d9b11a8482b3c1dc5c41616caa6a93a7d494a9d04,Started:*true,},},QOSClass:BestEffort,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.98.201,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.98.201"}} | |
2021-12-07 00:26:11.492 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(ksa.kube-system.statefulset-controller) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.statefulset-controller", GenerateName:"", Namespace:"", SelfLink:"", UID:"b9bfdbf7-24d9-4bb4-a4c5-340dd5880e3a", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000300, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"statefulset-controller"}}} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(ksa.kube-system.statefulset-controller) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.statefulset-controller", GenerateName:"", Namespace:"", SelfLink:"", UID:"b9bfdbf7-24d9-4bb4-a4c5-340dd5880e3a", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000300, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"statefulset-controller"}}} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=ksa.kube-system.token-cleaner) value=map[string]string{"pcsa.projectcalico.org/name":"token-cleaner"} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=ksa.kube-system.token-cleaner) value=map[string]string{"pcsa.projectcalico.org/name":"token-cleaner"} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=ksa.kube-system.token-cleaner) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=ksa.kube-system.token-cleaner) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(ksa.kube-system.token-cleaner) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.token-cleaner", GenerateName:"", Namespace:"", SelfLink:"", UID:"277bfa31-dc07-4fdb-8e28-14a7c5177058", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000301, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"token-cleaner"}}} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{hello-minikube-6ddfcc9757-sp9xc hello-minikube-6ddfcc9757- default 76584ce6-d84b-4024-a48d-f4ba55aba012 559962 0 2021-12-06 22:59:09 +0000 UTC <nil> <nil> map[app:hello-minikube pod-template-hash:6ddfcc9757] map[cni.projectcalico.org/containerID:5f7702168d6b69bc7884f5679b8cb55bc89a91b75f0e5919b9c5f8241e6a2147 cni.projectcalico.org/podIP:172.16.98.202/32 cni.projectcalico.org/podIPs:172.16.98.202/32] [{apps/v1 ReplicaSet hello-minikube-6ddfcc9757 ea27b970-a1c6-4f58-9aa6-5f16329ff0dc 0xc000ae1687 0xc000ae1688}] [] [{kube-controller-manager Update v1 2021-12-06 22:59:09 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"ea27b970-a1c6-4f58-9aa6-5f16329ff0dc\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"echoserver\"}":{".":{},"f:image":{},"f:imagePullPolicy":{},"f:name":{},"f:resources":{},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:terminationGracePeriodSeconds":{}}}} {calico Update v1 2021-12-06 22:59:10 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-07 00:22:13 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:message":{},"f:reason":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:message":{},"f:reason":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.98.202\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:kube-api-access-6nqrs,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:echoserver,Image:k8s.gcr.io/echoserver:1.4,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-6nqrs,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{},ServiceAccountName:default,DeprecatedServiceAccount:default,NodeName:node3.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:,Priority:*0,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:False,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:22:12 +0000 UTC,Reason:ContainersNotReady,Message:containers with unready status: [echoserver],},PodCondition{Type:ContainersReady,Status:False,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:22:12 +0000 UTC,Reason:ContainersNotReady,Message:containers with unready status: [echoserver],},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.91.105.84,PodIP:172.16.98.202,StartTime:2021-12-06 22:59:09 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:echoserver,State:ContainerState{Waiting:&ContainerStateWaiting{Reason:CrashLoopBackOff,Message:back-off 5m0s restarting failed container=echoserver pod=hello-minikube-6ddfcc9757-sp9xc_default(76584ce6-d84b-4024-a48d-f4ba55aba012),},Running:nil,Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:&ContainerStateTerminated{ExitCode:0,Signal:0,Reason:Completed,Message:,StartedAt:2021-12-07 00:20:49 +0000 UTC,FinishedAt:2021-12-07 00:22:10 +0000 UTC,ContainerID:containerd://a2db30fc9d4fbde62ad29aff293e64242cf06a8cee6e48ee68163f10d08a62bb,},},Ready:false,RestartCount:16,Image:k8s.gcr.io/echoserver:1.4,ImageID:sha256:523cad1a4df732d41406c9de49f932cd60d56ffd50619158a2977fd1066028f9,ContainerID:containerd://a2db30fc9d4fbde62ad29aff293e64242cf06a8cee6e48ee68163f10d08a62bb,Started:*false,},},QOSClass:BestEffort,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.98.202,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(ksa.kube-system.token-cleaner) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.token-cleaner", GenerateName:"", Namespace:"", SelfLink:"", UID:"277bfa31-dc07-4fdb-8e28-14a7c5177058", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000301, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"token-cleaner"}}} | |
2021-12-07 00:26:11.501 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=ksa.kube-system.ttl-after-finished-controller) value=map[string]string{"pcsa.projectcalico.org/name":"ttl-after-finished-controller"} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=ksa.kube-system.ttl-after-finished-controller) value=map[string]string{"pcsa.projectcalico.org/name":"ttl-after-finished-controller"} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.98.202"}} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/async_calc_graph.go 123: Got 135 updates; queueing | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=ksa.kube-system.ttl-after-finished-controller) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="calico-node-s9sd9" | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="kube-proxy-jrdlv" | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=ksa.kube-system.ttl-after-finished-controller) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(ksa.kube-system.ttl-after-finished-controller) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.ttl-after-finished-controller", GenerateName:"", Namespace:"", SelfLink:"", UID:"51c77c19-0fea-4725-965d-68b25f7390fa", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000312, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"ttl-after-finished-controller"}}} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(ksa.kube-system.ttl-after-finished-controller) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.ttl-after-finished-controller", GenerateName:"", Namespace:"", SelfLink:"", UID:"51c77c19-0fea-4725-965d-68b25f7390fa", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000312, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"ttl-after-finished-controller"}}} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=ksa.kube-system.ttl-controller) value=map[string]string{"pcsa.projectcalico.org/name":"ttl-controller"} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{metrics-server-dbf765b9b-n9l7r metrics-server-dbf765b9b- kube-system 2f4b42b3-f365-49ee-9916-cc7f7ab105f2 454480 0 2021-12-05 23:53:34 +0000 UTC <nil> <nil> map[k8s-app:metrics-server pod-template-hash:dbf765b9b] map[cni.projectcalico.org/containerID:fd82e80c92e0bb814b49460f4fb885c865ca340701d0319e820c2b4b44fcf6ce cni.projectcalico.org/podIP:172.16.117.199/32 cni.projectcalico.org/podIPs:172.16.117.199/32] [{apps/v1 ReplicaSet metrics-server-dbf765b9b e0924dfc-a5d2-4665-9f9d-39a0f588ab41 0xc000ae7f97 0xc000ae7f98}] [] [{kube-controller-manager Update v1 2021-12-05 23:53:34 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:k8s-app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"e0924dfc-a5d2-4665-9f9d-39a0f588ab41\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"metrics-server\"}":{".":{},"f:args":{},"f:image":{},"f:imagePullPolicy":{},"f:livenessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:name":{},"f:ports":{".":{},"k:{\"containerPort\":4443,\"protocol\":\"TCP\"}":{".":{},"f:containerPort":{},"f:name":{},"f:protocol":{}}},"f:readinessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:initialDelaySeconds":{},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:resources":{".":{},"f:requests":{".":{},"f:cpu":{},"f:memory":{}}},"f:securityContext":{".":{},"f:readOnlyRootFilesystem":{},"f:runAsNonRoot":{},"f:runAsUser":{}},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{},"f:volumeMounts":{".":{},"k:{\"mountPath\":\"/tmp\"}":{".":{},"f:mountPath":{},"f:name":{}}}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:nodeSelector":{},"f:priorityClassName":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:serviceAccount":{},"f:serviceAccountName":{},"f:terminationGracePeriodSeconds":{},"f:volumes":{".":{},"k:{\"name\":\"tmp-dir\"}":{".":{},"f:emptyDir":{},"f:name":{}}}}}} {calico Update v1 2021-12-05 23:53:36 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-05 23:53:48 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:message":{},"f:reason":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:message":{},"f:reason":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.117.199\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:tmp-dir,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:&EmptyDirVolumeSource{Medium:,SizeLimit:<nil>,},GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:nil,StorageOS:nil,CSI:nil,Ephemeral:nil,},},Volume{Name:kube-api-access-kkfrg,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:metrics-server,Image:k8s.gcr.io/metrics-server/metrics-server:v0.5.2,Command:[],Args:[--cert-dir=/tmp --secure-port=4443 --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --kubelet-use-node-status-port --metric-resolution=15s],WorkingDir:,Ports:[]ContainerPort{ContainerPort{Name:https,HostPort:0,ContainerPort:4443,Protocol:TCP,HostIP:,},},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{cpu: {{100 -3} {<nil>} 100m DecimalSI},memory: {{209715200 0} {<nil>} BinarySI},},},VolumeMounts:[]VolumeMount{VolumeMount{Name:tmp-dir,ReadOnly:false,MountPath:/tmp,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kkfrg,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/livez,Port:{1 0 https},Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:0,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/readyz,Port:{1 0 https},Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:20,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:nil,SELinuxOptions:nil,RunAsUser:*1000,RunAsNonRoot:*true,ReadOnlyRootFilesystem:*true,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{kubernetes.io/os: linux,},ServiceAccountName:metrics-server,DeprecatedServiceAccount:metrics-server,NodeName:node1.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:system-cluster-critical,Priority:*2000000000,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 23:53:34 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:False,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 23:53:34 +0000 UTC,Reason:ContainersNotReady,Message:containers with unready status: [metrics-server],},PodCondition{Type:ContainersReady,Status:False,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 23:53:34 +0000 UTC,Reason:ContainersNotReady,Message:containers with unready status: [metrics-server],},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 23:53:34 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.64.226.74,PodIP:172.16.117.199,StartTime:2021-12-05 23:53:34 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:metrics-server,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-05 23:53:47 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:nil,},Ready:false,RestartCount:0,Image:k8s.gcr.io/metrics-server/metrics-server:v0.5.2,ImageID:docker-pullable://k8s.gcr.io/metrics-server/metrics-server@sha256:6385aec64bb97040a5e692947107b81e178555c7a5b71caa90d733e4130efc10,ContainerID:docker://30151f3f9e45d89fa20c1fb1527ee65109487c88990c3f2da33a19c2dceafe71,Started:*true,},},QOSClass:Burstable,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.117.199,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=ksa.kube-system.ttl-controller) value=map[string]string{"pcsa.projectcalico.org/name":"ttl-controller"} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=ksa.kube-system.ttl-controller) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=ksa.kube-system.ttl-controller) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.117.199"}} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(ksa.kube-system.ttl-controller) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.ttl-controller", GenerateName:"", Namespace:"", SelfLink:"", UID:"61f5134b-933f-45a5-9c16-dd046b8a32af", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000300, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"ttl-controller"}}} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(ksa.kube-system.ttl-controller) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kube-system.ttl-controller", GenerateName:"", Namespace:"", SelfLink:"", UID:"61f5134b-933f-45a5-9c16-dd046b8a32af", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000300, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"ttl-controller"}}} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=ksa.kubernetes-dashboard.admin-user) value=map[string]string{"pcsa.projectcalico.org/name":"admin-user"} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=ksa.kubernetes-dashboard.admin-user) value=map[string]string{"pcsa.projectcalico.org/name":"admin-user"} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=ksa.kubernetes-dashboard.admin-user) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=ksa.kubernetes-dashboard.admin-user) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(ksa.kubernetes-dashboard.admin-user) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kubernetes-dashboard.admin-user", GenerateName:"", Namespace:"", SelfLink:"", UID:"2bbdf423-8448-461a-8886-1543e5165086", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000471, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"admin-user"}}} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(ksa.kubernetes-dashboard.admin-user) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kubernetes-dashboard.admin-user", GenerateName:"", Namespace:"", SelfLink:"", UID:"2bbdf423-8448-461a-8886-1543e5165086", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000471, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"admin-user"}}} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=ksa.kubernetes-dashboard.default) value=map[string]string{"pcsa.projectcalico.org/name":"default"} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=ksa.kubernetes-dashboard.default) value=map[string]string{"pcsa.projectcalico.org/name":"default"} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=ksa.kubernetes-dashboard.default) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=ksa.kubernetes-dashboard.default) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(ksa.kubernetes-dashboard.default) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kubernetes-dashboard.default", GenerateName:"", Namespace:"", SelfLink:"", UID:"0caf6519-40c4-4e36-a6fe-b19556ce90f2", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000423, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"default"}}} | |
2021-12-07 00:26:11.502 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{hostnames-57b79fc5df-vzx9w hostnames-57b79fc5df- default 85dd066a-b492-47c7-8cc3-883263adba4b 560081 0 2021-12-06 22:59:09 +0000 UTC <nil> <nil> map[app:hostnames pod-template-hash:57b79fc5df] map[cni.projectcalico.org/containerID:d383ab5096767a768009246a32907f91c39c10916b5e41107ac3ab57f9fd8677 cni.projectcalico.org/podIP:172.16.98.204/32 cni.projectcalico.org/podIPs:172.16.98.204/32] [{apps/v1 ReplicaSet hostnames-57b79fc5df ba500662-d7ce-4cbf-a28d-54a373b686ef 0xc000aea857 0xc000aea858}] [] [{kube-controller-manager Update v1 2021-12-06 22:59:09 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"ba500662-d7ce-4cbf-a28d-54a373b686ef\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"serve-hostname-42szp\"}":{".":{},"f:image":{},"f:imagePullPolicy":{},"f:name":{},"f:resources":{},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:terminationGracePeriodSeconds":{}}}} {calico Update v1 2021-12-06 22:59:10 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-07 00:23:39 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.98.204\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:kube-api-access-c7x7t,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:serve-hostname-42szp,Image:k8s.gcr.io/serve_hostname,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-c7x7t,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:Always,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{},ServiceAccountName:default,DeprecatedServiceAccount:default,NodeName:node3.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:,Priority:*0,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:23:39 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-07 00:23:39 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 22:59:09 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.91.105.84,PodIP:172.16.98.204,StartTime:2021-12-06 22:59:09 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:serve-hostname-42szp,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-07 00:23:39 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:&ContainerStateTerminated{ExitCode:2,Signal:0,Reason:Error,Message:,StartedAt:2021-12-07 00:17:27 +0000 UTC,FinishedAt:2021-12-07 00:18:31 +0000 UTC,ContainerID:containerd://72b07fee8346dbc0171b8bb6ac63d27bbbd148f62da5e4410a222d838f5b6215,},},Ready:true,RestartCount:18,Image:k8s.gcr.io/serve_hostname:latest,ImageID:k8s.gcr.io/serve_hostname@sha256:07ab315083303397079209c526f6ed02f731d2fa7ffa0ad5c40b49410b105fee,ContainerID:containerd://644aa82ee52a8aa0c6ec3567b86b68e1ebffc8793a1d9a32a94e818435a84878,Started:*true,},},QOSClass:BestEffort,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.98.204,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(ksa.kubernetes-dashboard.default) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kubernetes-dashboard.default", GenerateName:"", Namespace:"", SelfLink:"", UID:"0caf6519-40c4-4e36-a6fe-b19556ce90f2", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000423, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.projectcalico.org/name":"default"}}} | |
2021-12-07 00:26:11.503 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileLabels(name=ksa.kubernetes-dashboard.kubernetes-dashboard) value=map[string]string{"pcsa.k8s-app":"kubernetes-dashboard", "pcsa.projectcalico.org/name":"kubernetes-dashboard"} | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileLabels(name=ksa.kubernetes-dashboard.kubernetes-dashboard) value=map[string]string{"pcsa.k8s-app":"kubernetes-dashboard", "pcsa.projectcalico.org/name":"kubernetes-dashboard"} | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=ProfileRules(name=ksa.kubernetes-dashboard.kubernetes-dashboard) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/validation_filter.go 57: Use v1 validator key=ProfileRules(name=ksa.kubernetes-dashboard.kubernetes-dashboard) value=&model.ProfileRules{InboundRules:[]model.Rule(nil), OutboundRules:[]model.Rule(nil)} | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.98.204"}} | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="calico-node-796g8" | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/validation_filter.go 51: Validating KV pair. key=Profile(ksa.kubernetes-dashboard.kubernetes-dashboard) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kubernetes-dashboard.kubernetes-dashboard", GenerateName:"", Namespace:"", SelfLink:"", UID:"e950bfff-3334-49bd-896e-fc04363e4375", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000423, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.k8s-app":"kubernetes-dashboard", "pcsa.projectcalico.org/name":"kubernetes-dashboard"}}} | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/validation_filter.go 54: Use v3 validator key=Profile(ksa.kubernetes-dashboard.kubernetes-dashboard) value=&v3.Profile{TypeMeta:v1.TypeMeta{Kind:"Profile", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ksa.kubernetes-dashboard.kubernetes-dashboard", GenerateName:"", Namespace:"", SelfLink:"", UID:"e950bfff-3334-49bd-896e-fc04363e4375", ResourceVersion:"", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{wall:0x0, ext:63774000423, loc:(*time.Location)(0x4a164c0)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ClusterName:"", ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.ProfileSpec{Ingress:[]v3.Rule(nil), Egress:[]v3.Rule(nil), LabelsToApply:map[string]string{"pcsa.k8s-app":"kubernetes-dashboard", "pcsa.projectcalico.org/name":"kubernetes-dashboard"}}} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/async_calc_graph.go 145: Pulled []KVPair off channel | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/async_calc_graph.go 123: Got 14 updates; queueing | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=projectcalico-default-allow) 0xc000b6a280 0 <nil> 0s} 1} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.504 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{coredns-78fcd69978-kfckw coredns-78fcd69978- kube-system a75bf0c2-ee45-405c-b793-5a5c396daf84 453843 0 2021-12-05 22:20:32 +0000 UTC <nil> <nil> map[k8s-app:kube-dns pod-template-hash:78fcd69978] map[cni.projectcalico.org/containerID:bdef6123337ef3f29254c1d9be6e7282fd2878d62ae7264acd246fa708a940e1 cni.projectcalico.org/podIP:172.16.117.197/32 cni.projectcalico.org/podIPs:172.16.117.197/32] [{apps/v1 ReplicaSet coredns-78fcd69978 9e18901d-723b-408d-ac04-085248ab38ea 0xc000be27a7 0xc000be27a8}] [] [{kube-controller-manager Update v1 2021-12-05 22:20:32 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:k8s-app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"9e18901d-723b-408d-ac04-085248ab38ea\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"coredns\"}":{".":{},"f:args":{},"f:image":{},"f:imagePullPolicy":{},"f:livenessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:initialDelaySeconds":{},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:name":{},"f:ports":{".":{},"k:{\"containerPort\":53,\"protocol\":\"TCP\"}":{".":{},"f:containerPort":{},"f:name":{},"f:protocol":{}},"k:{\"containerPort\":53,\"protocol\":\"UDP\"}":{".":{},"f:containerPort":{},"f:name":{},"f:protocol":{}},"k:{\"containerPort\":9153,\"protocol\":\"TCP\"}":{".":{},"f:containerPort":{},"f:name":{},"f:protocol":{}}},"f:readinessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:resources":{".":{},"f:limits":{".":{},"f:memory":{}},"f:requests":{".":{},"f:cpu":{},"f:memory":{}}},"f:securityContext":{".":{},"f:allowPrivilegeEscalation":{},"f:capabilities":{".":{},"f:add":{},"f:drop":{}},"f:readOnlyRootFilesystem":{}},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{},"f:volumeMounts":{".":{},"k:{\"mountPath\":\"/etc/coredns\"}":{".":{},"f:mountPath":{},"f:name":{},"f:readOnly":{}}}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:nodeSelector":{},"f:priorityClassName":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:serviceAccount":{},"f:serviceAccountName":{},"f:terminationGracePeriodSeconds":{},"f:tolerations":{},"f:volumes":{".":{},"k:{\"name\":\"config-volume\"}":{".":{},"f:configMap":{".":{},"f:defaultMode":{},"f:items":{},"f:name":{}},"f:name":{}}}}}} {calico Update v1 2021-12-05 22:20:37 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-05 22:20:38 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.117.197\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:config-volume,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:&ConfigMapVolumeSource{LocalObjectReference:LocalObjectReference{Name:coredns,},Items:[]KeyToPath{KeyToPath{Key:Corefile,Path:Corefile,Mode:nil,},},DefaultMode:*420,Optional:nil,},VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:nil,StorageOS:nil,CSI:nil,Ephemeral:nil,},},Volume{Name:kube-api-access-7hnzf,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:coredns,Image:k8s.gcr.io/coredns/coredns:v1.8.4,Command:[],Args:[-conf /etc/coredns/Corefile],WorkingDir:,Ports:[]ContainerPort{ContainerPort{Name:dns,HostPort:0,ContainerPort:53,Protocol:UDP,HostIP:,},ContainerPort{Name:dns-tcp,HostPort:0,ContainerPort:53,Protocol:TCP,HostIP:,},ContainerPort{Name:metrics,HostPort:0,ContainerPort:9153,Protocol:TCP,HostIP:,},},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{memory: {{178257920 0} {<nil>} 170Mi BinarySI},},Requests:ResourceList{cpu: {{100 -3} {<nil>} 100m DecimalSI},memory: {{73400320 0} {<nil>} 70Mi BinarySI},},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config-volume,ReadOnly:true,MountPath:/etc/coredns,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7hnzf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/health,Port:{0 8080 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:60,TimeoutSeconds:5,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/ready,Port:{0 8181 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:0,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[NET_BIND_SERVICE],Drop:[all],},Privileged:nil,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:*true,AllowPrivilegeEscalation:*false,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:Default,NodeSelector:map[string]string{kubernetes.io/os: linux,},ServiceAccountName:coredns,DeprecatedServiceAccount:coredns,NodeName:node1.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:CriticalAddonsOnly,Operator:Exists,Value:,Effect:,TolerationSeconds:nil,},Toleration{Key:node-role.kubernetes.io/master,Operator:,Value:,Effect:NoSchedule,TolerationSeconds:nil,},Toleration{Key:node-role.kubernetes.io/control-plane,Operator:,Value:,Effect:NoSchedule,TolerationSeconds:nil,},Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:system-cluster-critical,Priority:*2000000000,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:32 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:38 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:38 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:32 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.64.226.74,PodIP:172.16.117.197,StartTime:2021-12-05 22:20:32 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:coredns,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-05 22:20:37 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:nil,},Ready:true,RestartCount:0,Image:k8s.gcr.io/coredns/coredns:v1.8.4,ImageID:docker-pullable://k8s.gcr.io/coredns/coredns@sha256:6e5a02c21641597998b4be7cb5eb1e7b02c0d8d23cce4dd09f4682d463798890,ContainerID:docker://894bf5f37eeca45fb0b1cf6116231ed61d36d1dc695bcd87d704ecdf2049751b,Started:*true,},},QOSClass:Burstable,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.117.197,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: projectcalico-default-allow | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=1 | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(projectcalico-default-allow) 0xc0000d6840 0 <nil> 0s} 1} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.117.197"}} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(projectcalico-default-allow) | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="calico-node-52q7q" | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=kns.default) map[pcns.kubernetes.io/metadata.name:default pcns.projectcalico.org/name:default] 204/ <nil> 0s} 1} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=kns.default) | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=kns.default) | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=kns.default)" | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/event_sequencer.go 739: Namespace update key=proto.NamespaceID{Name:"default"} labels=map[string]string{"kubernetes.io/metadata.name":"default", "projectcalico.org/name":"default"} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{coredns-78fcd69978-jrwnw coredns-78fcd69978- kube-system 043ff623-b983-42d3-b215-f1cd106891e2 522175 0 2021-12-05 22:20:31 +0000 UTC <nil> <nil> map[k8s-app:kube-dns pod-template-hash:78fcd69978] map[cni.projectcalico.org/containerID:68aef63bdf5df465605dcae74835b5ef5ccde4506c27a331e38ef9edbe1e4fe1 cni.projectcalico.org/podIP:172.16.117.196/32 cni.projectcalico.org/podIPs:172.16.117.196/32] [{apps/v1 ReplicaSet coredns-78fcd69978 9e18901d-723b-408d-ac04-085248ab38ea 0xc000bf0ac7 0xc000bf0ac8}] [] [{kube-controller-manager Update v1 2021-12-05 22:20:31 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:k8s-app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"9e18901d-723b-408d-ac04-085248ab38ea\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"coredns\"}":{".":{},"f:args":{},"f:image":{},"f:imagePullPolicy":{},"f:livenessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:initialDelaySeconds":{},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:name":{},"f:ports":{".":{},"k:{\"containerPort\":53,\"protocol\":\"TCP\"}":{".":{},"f:containerPort":{},"f:name":{},"f:protocol":{}},"k:{\"containerPort\":53,\"protocol\":\"UDP\"}":{".":{},"f:containerPort":{},"f:name":{},"f:protocol":{}},"k:{\"containerPort\":9153,\"protocol\":\"TCP\"}":{".":{},"f:containerPort":{},"f:name":{},"f:protocol":{}}},"f:readinessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:resources":{".":{},"f:limits":{".":{},"f:memory":{}},"f:requests":{".":{},"f:cpu":{},"f:memory":{}}},"f:securityContext":{".":{},"f:allowPrivilegeEscalation":{},"f:capabilities":{".":{},"f:add":{},"f:drop":{}},"f:readOnlyRootFilesystem":{}},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{},"f:volumeMounts":{".":{},"k:{\"mountPath\":\"/etc/coredns\"}":{".":{},"f:mountPath":{},"f:name":{},"f:readOnly":{}}}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:nodeSelector":{},"f:priorityClassName":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:serviceAccount":{},"f:serviceAccountName":{},"f:terminationGracePeriodSeconds":{},"f:tolerations":{},"f:volumes":{".":{},"k:{\"name\":\"config-volume\"}":{".":{},"f:configMap":{".":{},"f:defaultMode":{},"f:items":{},"f:name":{}},"f:name":{}}}}}} {calico Update v1 2021-12-05 22:20:36 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-05 22:20:38 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.117.196\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:config-volume,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:&ConfigMapVolumeSource{LocalObjectReference:LocalObjectReference{Name:coredns,},Items:[]KeyToPath{KeyToPath{Key:Corefile,Path:Corefile,Mode:nil,},},DefaultMode:*420,Optional:nil,},VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:nil,StorageOS:nil,CSI:nil,Ephemeral:nil,},},Volume{Name:kube-api-access-t64l7,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:coredns,Image:k8s.gcr.io/coredns/coredns:v1.8.4,Command:[],Args:[-conf /etc/coredns/Corefile],WorkingDir:,Ports:[]ContainerPort{ContainerPort{Name:dns,HostPort:0,ContainerPort:53,Protocol:UDP,HostIP:,},ContainerPort{Name:dns-tcp,HostPort:0,ContainerPort:53,Protocol:TCP,HostIP:,},ContainerPort{Name:metrics,HostPort:0,ContainerPort:9153,Protocol:TCP,HostIP:,},},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{memory: {{178257920 0} {<nil>} 170Mi BinarySI},},Requests:ResourceList{cpu: {{100 -3} {<nil>} 100m DecimalSI},memory: {{73400320 0} {<nil>} 70Mi BinarySI},},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config-volume,ReadOnly:true,MountPath:/etc/coredns,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-t64l7,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/health,Port:{0 8080 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:60,TimeoutSeconds:5,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:5,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/ready,Port:{0 8181 },Host:,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:0,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[NET_BIND_SERVICE],Drop:[all],},Privileged:nil,SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:*true,AllowPrivilegeEscalation:*false,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:Default,NodeSelector:map[string]string{kubernetes.io/os: linux,},ServiceAccountName:coredns,DeprecatedServiceAccount:coredns,NodeName:node1.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:CriticalAddonsOnly,Operator:Exists,Value:,Effect:,TolerationSeconds:nil,},Toleration{Key:node-role.kubernetes.io/master,Operator:,Value:,Effect:NoSchedule,TolerationSeconds:nil,},Toleration{Key:node-role.kubernetes.io/control-plane,Operator:,Value:,Effect:NoSchedule,TolerationSeconds:nil,},Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:system-cluster-critical,Priority:*2000000000,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:32 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:38 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:38 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-05 22:20:31 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.64.226.74,PodIP:172.16.117.196,StartTime:2021-12-05 22:20:32 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:coredns,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-05 22:20:37 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:nil,},Ready:true,RestartCount:0,Image:k8s.gcr.io/coredns/coredns:v1.8.4,ImageID:docker-pullable://k8s.gcr.io/coredns/coredns@sha256:6e5a02c21641597998b4be7cb5eb1e7b02c0d8d23cce4dd09f4682d463798890,ContainerID:docker://b57374ceffb4c5d4585226f5fd6bc6d431f4a9478ebd8c20712639bc5445f05f,Started:*true,},},QOSClass:Burstable,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.117.196,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=kns.default) 0xc000b6a4b0 204/ <nil> 0s} 1} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: kns.default | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=2 | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.117.196"}} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(kns.default) 0xc000bd6580 204/ <nil> 0s} 1} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(kns.default) | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=kns.kube-node-lease) map[pcns.kubernetes.io/metadata.name:kube-node-lease pcns.projectcalico.org/name:kube-node-lease] 46/ <nil> 0s} 1} | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=kns.kube-node-lease) | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=kns.kube-node-lease) | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=kns.kube-node-lease)" | |
2021-12-07 00:26:11.505 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{kubernetes-dashboard-576cb95f94-mc6nn kubernetes-dashboard-576cb95f94- kubernetes-dashboard af22c47f-f7c9-4c90-90ef-69ae638dd250 455978 0 2021-12-02 05:37:38 +0000 UTC <nil> <nil> map[k8s-app:kubernetes-dashboard pod-template-hash:576cb95f94] map[cni.projectcalico.org/containerID:ec485085d4e8dafec6e8dc6037cdc0c03c176b84012c3d246527cf82621152af cni.projectcalico.org/podIP:172.16.117.133/32 cni.projectcalico.org/podIPs:172.16.117.133/32] [{apps/v1 ReplicaSet kubernetes-dashboard-576cb95f94 f3a9e936-000a-4949-84dd-a8c620e80c9d 0xc000bf142a 0xc000bf142b}] [] [{kube-controller-manager Update v1 2021-12-02 05:37:38 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:k8s-app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"f3a9e936-000a-4949-84dd-a8c620e80c9d\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"kubernetes-dashboard\"}":{".":{},"f:args":{},"f:image":{},"f:imagePullPolicy":{},"f:livenessProbe":{".":{},"f:failureThreshold":{},"f:httpGet":{".":{},"f:path":{},"f:port":{},"f:scheme":{}},"f:initialDelaySeconds":{},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:name":{},"f:ports":{".":{},"k:{\"containerPort\":8443,\"protocol\":\"TCP\"}":{".":{},"f:containerPort":{},"f:protocol":{}}},"f:resources":{},"f:securityContext":{".":{},"f:allowPrivilegeEscalation":{},"f:readOnlyRootFilesystem":{},"f:runAsGroup":{},"f:runAsUser":{}},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{},"f:volumeMounts":{".":{},"k:{\"mountPath\":\"/certs\"}":{".":{},"f:mountPath":{},"f:name":{}},"k:{\"mountPath\":\"/tmp\"}":{".":{},"f:mountPath":{},"f:name":{}}}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:nodeSelector":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:serviceAccount":{},"f:serviceAccountName":{},"f:terminationGracePeriodSeconds":{},"f:tolerations":{},"f:volumes":{".":{},"k:{\"name\":\"kubernetes-dashboard-certs\"}":{".":{},"f:name":{},"f:secret":{".":{},"f:defaultMode":{},"f:secretName":{}}},"k:{\"name\":\"tmp-volume\"}":{".":{},"f:emptyDir":{},"f:name":{}}}}}} {calico Update v1 2021-12-02 05:37:41 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-06 00:54:22 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.117.133\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:kubernetes-dashboard-certs,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:&SecretVolumeSource{SecretName:kubernetes-dashboard-certs,Items:[]KeyToPath{},DefaultMode:*420,Optional:nil,},NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:nil,StorageOS:nil,CSI:nil,Ephemeral:nil,},},Volume{Name:tmp-volume,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:&EmptyDirVolumeSource{Medium:,SizeLimit:<nil>,},GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:nil,StorageOS:nil,CSI:nil,Ephemeral:nil,},},Volume{Name:kube-api-access-l45pz,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:kubernetes-dashboard,Image:kubernetesui/dashboard:v2.4.0,Command:[],Args:[--auto-generate-certificates --namespace=kubernetes-dashboard],WorkingDir:,Ports:[]ContainerPort{ContainerPort{Name:,HostPort:0,ContainerPort:8443,Protocol:TCP,HostIP:,},},Env:[]EnvVar{},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kubernetes-dashboard-certs,ReadOnly:false,MountPath:/certs,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:tmp-volume,ReadOnly:false,MountPath:/tmp,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-l45pz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{Handler:Handler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/,Port:{0 8443 },Host:,Scheme:HTTPS,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,},InitialDelaySeconds:30,TimeoutSeconds:30,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:Always,SecurityContext:&SecurityContext{Capabilities:nil,Privileged:nil,SELinuxOptions:nil,RunAsUser:*1001,RunAsNonRoot:nil,ReadOnlyRootFilesystem:*true,AllowPrivilegeEscalation:*false,RunAsGroup:*2001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{kubernetes.io/os: linux,},ServiceAccountName:kubernetes-dashboard,DeprecatedServiceAccount:kubernetes-dashboard,NodeName:node1.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:node-role.kubernetes.io/master,Operator:,Value:,Effect:NoSchedule,TolerationSeconds:nil,},Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:,Priority:*0,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:38 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 00:54:22 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 00:54:22 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:38 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.64.226.74,PodIP:172.16.117.133,StartTime:2021-12-02 05:37:38 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:kubernetes-dashboard,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-06 00:54:21 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:&ContainerStateTerminated{ExitCode:2,Signal:0,Reason:Error,Message:,StartedAt:2021-12-06 00:53:30 +0000 UTC,FinishedAt:2021-12-06 00:54:00 +0000 UTC,ContainerID:docker://3c2f4e08a2fc532d3909fea24c3565bf8a33df30af539af7d8bb4362fe18bda6,},},Ready:true,RestartCount:2,Image:kubernetesui/dashboard:v2.4.0,ImageID:docker-pullable://kubernetesui/dashboard@sha256:526850ae4ea9aba360e72b6df69fd3126b129d446efe83ac5250282b85f95b7f,ContainerID:docker://a43fb9b1a1fc79fcfa175e0c03c10ebd702ac378b3dd43e8bad6f938e1d1a834,Started:*true,},},QOSClass:BestEffort,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.117.133,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.506 [DEBUG][63] felix/event_sequencer.go 739: Namespace update key=proto.NamespaceID{Name:"kube-node-lease"} labels=map[string]string{"kubernetes.io/metadata.name":"kube-node-lease", "projectcalico.org/name":"kube-node-lease"} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=kns.kube-node-lease) 0xc000b6a7d0 46/ <nil> 0s} 1} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: kns.kube-node-lease | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=3 | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(kns.kube-node-lease) 0xc000bd66e0 46/ <nil> 0s} 1} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(kns.kube-node-lease) | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.117.133"}} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=kns.kube-public) map[pcns.kubernetes.io/metadata.name:kube-public pcns.projectcalico.org/name:kube-public] 42/ <nil> 0s} 1} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=kns.kube-public) | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=kns.kube-public) | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=kns.kube-public)" | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/event_sequencer.go 739: Namespace update key=proto.NamespaceID{Name:"kube-public"} labels=map[string]string{"kubernetes.io/metadata.name":"kube-public", "projectcalico.org/name":"kube-public"} | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=kns.kube-public) 0xc000b6ac30 42/ <nil> 0s} 1} | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: kns.kube-public | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=4 | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(kns.kube-public) 0xc000bd6840 42/ <nil> 0s} 1} | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(kns.kube-public) | |
2021-12-07 00:26:11.508 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.507 [DEBUG][63] felix/workload_endpoint_default.go 73: Converting pod to WorkloadEndpoint pod=&Pod{ObjectMeta:{calico-kube-controllers-56b8f699d9-pzfdp calico-kube-controllers-56b8f699d9- kube-system ff27be29-d728-480a-9b4d-bf93faf4c618 455925 0 2021-12-02 05:37:38 +0000 UTC <nil> <nil> map[k8s-app:calico-kube-controllers pod-template-hash:56b8f699d9] map[cni.projectcalico.org/containerID:1ce45c038118f3b48a21289ee8c64952d8f41b39cd4287ef079ca7c661ad4016 cni.projectcalico.org/podIP:172.16.117.134/32 cni.projectcalico.org/podIPs:172.16.117.134/32] [{apps/v1 ReplicaSet calico-kube-controllers-56b8f699d9 2d68db03-985d-48e8-8596-80b2e3cd5f77 0xc000bf1c3a 0xc000bf1c3b}] [] [{kube-controller-manager Update v1 2021-12-02 05:37:38 +0000 UTC FieldsV1 {"f:metadata":{"f:generateName":{},"f:labels":{".":{},"f:k8s-app":{},"f:pod-template-hash":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"2d68db03-985d-48e8-8596-80b2e3cd5f77\"}":{}}},"f:spec":{"f:containers":{"k:{\"name\":\"calico-kube-controllers\"}":{".":{},"f:env":{".":{},"k:{\"name\":\"DATASTORE_TYPE\"}":{".":{},"f:name":{},"f:value":{}},"k:{\"name\":\"ENABLED_CONTROLLERS\"}":{".":{},"f:name":{},"f:value":{}}},"f:image":{},"f:imagePullPolicy":{},"f:livenessProbe":{".":{},"f:exec":{".":{},"f:command":{}},"f:failureThreshold":{},"f:initialDelaySeconds":{},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:name":{},"f:readinessProbe":{".":{},"f:exec":{".":{},"f:command":{}},"f:failureThreshold":{},"f:periodSeconds":{},"f:successThreshold":{},"f:timeoutSeconds":{}},"f:resources":{},"f:terminationMessagePath":{},"f:terminationMessagePolicy":{}}},"f:dnsPolicy":{},"f:enableServiceLinks":{},"f:nodeSelector":{},"f:priorityClassName":{},"f:restartPolicy":{},"f:schedulerName":{},"f:securityContext":{},"f:serviceAccount":{},"f:serviceAccountName":{},"f:terminationGracePeriodSeconds":{},"f:tolerations":{}}}} {calico Update v1 2021-12-02 05:37:41 +0000 UTC FieldsV1 {"f:metadata":{"f:annotations":{".":{},"f:cni.projectcalico.org/containerID":{},"f:cni.projectcalico.org/podIP":{},"f:cni.projectcalico.org/podIPs":{}}}}} {kubelet Update v1 2021-12-06 00:53:58 +0000 UTC FieldsV1 {"f:status":{"f:conditions":{"k:{\"type\":\"ContainersReady\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Initialized\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}},"k:{\"type\":\"Ready\"}":{".":{},"f:lastProbeTime":{},"f:lastTransitionTime":{},"f:status":{},"f:type":{}}},"f:containerStatuses":{},"f:hostIP":{},"f:phase":{},"f:podIP":{},"f:podIPs":{".":{},"k:{\"ip\":\"172.16.117.134\"}":{".":{},"f:ip":{}}},"f:startTime":{}}}}]},Spec:PodSpec{Volumes:[]Volume{Volume{Name:kube-api-access-2nkvw,VolumeSource:VolumeSource{HostPath:nil,EmptyDir:nil,GCEPersistentDisk:nil,AWSElasticBlockStore:nil,GitRepo:nil,Secret:nil,NFS:nil,ISCSI:nil,Glusterfs:nil,PersistentVolumeClaim:nil,RBD:nil,FlexVolume:nil,Cinder:nil,CephFS:nil,Flocker:nil,DownwardAPI:nil,FC:nil,AzureFile:nil,ConfigMap:nil,VsphereVolume:nil,Quobyte:nil,AzureDisk:nil,PhotonPersistentDisk:nil,PortworxVolume:nil,ScaleIO:nil,Projected:&ProjectedVolumeSource{Sources:[]VolumeProjection{VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:nil,ServiceAccountToken:&ServiceAccountTokenProjection{Audience:,ExpirationSeconds:*3607,Path:token,},},VolumeProjection{Secret:nil,DownwardAPI:nil,ConfigMap:&ConfigMapProjection{LocalObjectReference:LocalObjectReference{Name:kube-root-ca.crt,},Items:[]KeyToPath{KeyToPath{Key:ca.crt,Path:ca.crt,Mode:nil,},},Optional:nil,},ServiceAccountToken:nil,},VolumeProjection{Secret:nil,DownwardAPI:&DownwardAPIProjection{Items:[]DownwardAPIVolumeFile{DownwardAPIVolumeFile{Path:namespace,FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,Mode:nil,},},},ConfigMap:nil,ServiceAccountToken:nil,},},DefaultMode:*420,},StorageOS:nil,CSI:nil,Ephemeral:nil,},},},Containers:[]Container{Container{Name:calico-kube-controllers,Image:docker.io/calico/kube-controllers:v3.21.1,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:ENABLED_CONTROLLERS,Value:node,ValueFrom:nil,},EnvVar{Name:DATASTORE_TYPE,Value:kubernetes,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-2nkvw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{Handler:Handler{Exec:&ExecAction{Command:[/usr/bin/check-status -l],},HTTPGet:nil,TCPSocket:nil,},InitialDelaySeconds:10,TimeoutSeconds:10,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:6,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{Handler:Handler{Exec:&ExecAction{Command:[/usr/bin/check-status -r],},HTTPGet:nil,TCPSocket:nil,},InitialDelaySeconds:0,TimeoutSeconds:1,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,},},RestartPolicy:Always,TerminationGracePeriodSeconds:*30,ActiveDeadlineSeconds:nil,DNSPolicy:ClusterFirst,NodeSelector:map[string]string{kubernetes.io/os: linux,},ServiceAccountName:calico-kube-controllers,DeprecatedServiceAccount:calico-kube-controllers,NodeName:node1.tpurchas.gmail.com.beta.tailscale.net,HostNetwork:false,HostPID:false,HostIPC:false,SecurityContext:&PodSecurityContext{SELinuxOptions:nil,RunAsUser:nil,RunAsNonRoot:nil,SupplementalGroups:[],FSGroup:nil,RunAsGroup:nil,Sysctls:[]Sysctl{},WindowsOptions:nil,FSGroupChangePolicy:nil,SeccompProfile:nil,},ImagePullSecrets:[]LocalObjectReference{},Hostname:,Subdomain:,Affinity:nil,SchedulerName:default-scheduler,InitContainers:[]Container{},AutomountServiceAccountToken:nil,Tolerations:[]Toleration{Toleration{Key:CriticalAddonsOnly,Operator:Exists,Value:,Effect:,TolerationSeconds:nil,},Toleration{Key:node-role.kubernetes.io/master,Operator:,Value:,Effect:NoSchedule,TolerationSeconds:nil,},Toleration{Key:node.kubernetes.io/not-ready,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},Toleration{Key:node.kubernetes.io/unreachable,Operator:Exists,Value:,Effect:NoExecute,TolerationSeconds:*300,},},HostAliases:[]HostAlias{},PriorityClassName:system-cluster-critical,Priority:*2000000000,DNSConfig:nil,ShareProcessNamespace:nil,ReadinessGates:[]PodReadinessGate{},RuntimeClassName:nil,EnableServiceLinks:*true,PreemptionPolicy:*PreemptLowerPriority,Overhead:ResourceList{},TopologySpreadConstraints:[]TopologySpreadConstraint{},EphemeralContainers:[]EphemeralContainer{},SetHostnameAsFQDN:nil,},Status:PodStatus{Phase:Running,Conditions:[]PodCondition{PodCondition{Type:Initialized,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:38 +0000 UTC,Reason:,Message:,},PodCondition{Type:Ready,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 00:53:58 +0000 UTC,Reason:,Message:,},PodCondition{Type:ContainersReady,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-06 00:53:58 +0000 UTC,Reason:,Message:,},PodCondition{Type:PodScheduled,Status:True,LastProbeTime:0001-01-01 00:00:00 +0000 UTC,LastTransitionTime:2021-12-02 05:37:38 +0000 UTC,Reason:,Message:,},},Message:,Reason:,HostIP:100.64.226.74,PodIP:172.16.117.134,StartTime:2021-12-02 05:37:38 +0000 UTC,ContainerStatuses:[]ContainerStatus{ContainerStatus{Name:calico-kube-controllers,State:ContainerState{Waiting:nil,Running:&ContainerStateRunning{StartedAt:2021-12-06 00:53:49 +0000 UTC,},Terminated:nil,},LastTerminationState:ContainerState{Waiting:nil,Running:nil,Terminated:&ContainerStateTerminated{ExitCode:2,Signal:0,Reason:Error,Message:,StartedAt:2021-12-02 05:37:41 +0000 UTC,FinishedAt:2021-12-06 00:53:48 +0000 UTC,ContainerID:docker://0c54548851b20621fe374682273cdbb45861cabb01d1ee211de31dcce172bfbf,},},Ready:true,RestartCount:1,Image:calico/kube-controllers:v3.21.1,ImageID:docker-pullable://calico/kube-controllers@sha256:3953b37967396c434d40719d5f86232da44ea2b2f177116d350a34c4009caab2,ContainerID:docker://b064eaf59e3747fd6a5fe5e6a1b0874590289e8b70184dfdc2da81a4d7b05937,Started:*true,},},QOSClass:BestEffort,InitContainerStatuses:[]ContainerStatus{},NominatedNodeName:,PodIPs:[]PodIP{PodIP{IP:172.16.117.134,},},EphemeralContainerStatuses:[]ContainerStatus{},},} | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=kns.kube-system) map[pcns.kubernetes.io/metadata.name:kube-system pcns.projectcalico.org/name:kube-system] 18/ <nil> 0s} 1} | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/conversion.go 204: PodIPs field filled in ips=[]v1.PodIP{v1.PodIP{IP:"172.16.117.134"}} | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=kns.kube-system) | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/workload_endpoint_default.go 55: Using prefix to create a WorkloadEndpoint veth name prefix="cali" | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=kns.kube-system) | |
2021-12-07 00:26:11.509 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="kube-proxy-6v5vz" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=kns.kube-system)" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="kube-apiserver-node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="kube-controller-manager-node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/event_sequencer.go 739: Namespace update key=proto.NamespaceID{Name:"kube-system"} labels=map[string]string{"kubernetes.io/metadata.name":"kube-system", "projectcalico.org/name":"kube-system"} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/conversion.go 132: Pod is host networked. pod="kube-scheduler-node1.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/dashboard-metrics-scraper-c45b7869d-lhzdg, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=kns.kube-system) 0xc000b6af50 18/ <nil> 0s} 1} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: kns.kube-system | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=5 | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/metrics-server-dbf765b9b-n9l7r, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(kns.kube-system) 0xc000bd69a0 18/ <nil> 0s} 1} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-kfckw, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(kns.kube-system) | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-jrwnw, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/kubernetes-dashboard-576cb95f94-mc6nn, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=kns.kubernetes-dashboard) map[pcns.kubernetes.io/metadata.name:kubernetes-dashboard pcns.projectcalico.org/name:kubernetes-dashboard] 872/ <nil> 0s} 1} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/watchercache.go 363: Cache entry added, sending syncer update Key="WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/calico-kube-controllers-56b8f699d9-pzfdp, name=eth0)" ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.510 [INFO][63] felix/watchercache.go 273: Sending synced update ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=kns.kubernetes-dashboard) | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/k8s.go 657: Performing 'Watch' for WorkloadEndpoint model.ResourceListOptions | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=kns.kubernetes-dashboard) | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=kns.kubernetes-dashboard)" | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/event_sequencer.go 739: Namespace update key=proto.NamespaceID{Name:"kubernetes-dashboard"} labels=map[string]string{"kubernetes.io/metadata.name":"kubernetes-dashboard", "projectcalico.org/name":"kubernetes-dashboard"} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=kns.kubernetes-dashboard) 0xc000b6b270 872/ <nil> 0s} 1} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: kns.kubernetes-dashboard | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=6 | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.510 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(kns.kubernetes-dashboard) 0xc000bd6b00 872/ <nil> 0s} 1} | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(kns.kubernetes-dashboard) | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.default.default) map[pcsa.projectcalico.org/name:default] /395 <nil> 0s} 1} | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.default.default) | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.default.default) | |
2021-12-07 00:26:11.511 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.default.default)" | |
... dropped 134 logs ... | |
2021-12-07 00:26:11.514 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.calico-kube-controllers) map[pcsa.projectcalico.org/name:calico-kube-controllers] /607 <nil> 0s} 1} | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.calico-kube-controllers) | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/watchersyncer.go 234: Sending syncer updates (if any to send) NumUpdates=0 | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.calico-kube-controllers) | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.calico-kube-controllers)" | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"calico-kube-controllers"} labels=map[string]string{"projectcalico.org/name":"calico-kube-controllers"} | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.calico-kube-controllers) 0xc000c0f130 /607 <nil> 0s} 1} | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/watchercache.go 251: Resync completed, now watching for change events ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/watchercache.go 81: Starting main event processing loop ListRoot="/calico/resources/v3/projectcalico.org/workloadendpoints" | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/watcher.go 94: Kubernetes watcher/converter started resource="Pod" | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.calico-kube-controllers | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=12 | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.515 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.calico-kube-controllers) 0xc00056d8c0 /607 <nil> 0s} 1} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.calico-kube-controllers) | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.calico-node) map[pcsa.projectcalico.org/name:calico-node] /585 <nil> 0s} 1} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.calico-node) | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.calico-node) | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.calico-node)" | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"calico-node"} labels=map[string]string{"projectcalico.org/name":"calico-node"} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.calico-node) 0xc000c0f450 /585 <nil> 0s} 1} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.calico-node | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=13 | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.calico-node) 0xc00056da20 /585 <nil> 0s} 1} | |
2021-12-07 00:26:11.516 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.calico-node) | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.certificate-controller) map[pcsa.projectcalico.org/name:certificate-controller] /256 <nil> 0s} 1} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.certificate-controller) | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.certificate-controller) | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.certificate-controller)" | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"certificate-controller"} labels=map[string]string{"projectcalico.org/name":"certificate-controller"} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.certificate-controller) 0xc000c0f770 /256 <nil> 0s} 1} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.certificate-controller | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=14 | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.certificate-controller) 0xc00056db80 /256 <nil> 0s} 1} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.certificate-controller) | |
2021-12-07 00:26:11.517 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.clusterrole-aggregation-controller) map[pcsa.projectcalico.org/name:clusterrole-aggregation-controller] /365 <nil> 0s} 1} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.clusterrole-aggregation-controller) | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.clusterrole-aggregation-controller) | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.clusterrole-aggregation-controller)" | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"clusterrole-aggregation-controller"} labels=map[string]string{"projectcalico.org/name":"clusterrole-aggregation-controller"} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.clusterrole-aggregation-controller) 0xc000c0fae0 /365 <nil> 0s} 1} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.clusterrole-aggregation-controller | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=15 | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.clusterrole-aggregation-controller) 0xc00056dce0 /365 <nil> 0s} 1} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.clusterrole-aggregation-controller) | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.coredns) map[pcsa.projectcalico.org/name:coredns] /264 <nil> 0s} 1} | |
2021-12-07 00:26:11.518 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.coredns) | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.coredns) | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.coredns)" | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"coredns"} labels=map[string]string{"projectcalico.org/name":"coredns"} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.coredns) 0xc000c0fe00 /264 <nil> 0s} 1} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.coredns | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=16 | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.coredns) 0xc000926000 /264 <nil> 0s} 1} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.coredns) | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.cronjob-controller) map[pcsa.projectcalico.org/name:cronjob-controller] /314 <nil> 0s} 1} | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.519 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.cronjob-controller) | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.cronjob-controller) | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.cronjob-controller)" | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"cronjob-controller"} labels=map[string]string{"projectcalico.org/name":"cronjob-controller"} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.cronjob-controller) 0xc000910140 /314 <nil> 0s} 1} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.cronjob-controller | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=17 | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.cronjob-controller) 0xc000926160 /314 <nil> 0s} 1} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.cronjob-controller) | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.daemon-set-controller) map[pcsa.projectcalico.org/name:daemon-set-controller] /354 <nil> 0s} 1} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.daemon-set-controller) | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.daemon-set-controller) | |
2021-12-07 00:26:11.520 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.daemon-set-controller)" | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"daemon-set-controller"} labels=map[string]string{"projectcalico.org/name":"daemon-set-controller"} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.daemon-set-controller) 0xc000910550 /354 <nil> 0s} 1} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.daemon-set-controller | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=18 | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.daemon-set-controller) 0xc0009262c0 /354 <nil> 0s} 1} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.daemon-set-controller) | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.default) map[pcsa.projectcalico.org/name:default] /385 <nil> 0s} 1} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.default) | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.default) | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.default)" | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"default"} labels=map[string]string{"projectcalico.org/name":"default"} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.default) 0xc0009109b0 /385 <nil> 0s} 1} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.default | |
2021-12-07 00:26:11.521 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=19 | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.default) 0xc000926420 /385 <nil> 0s} 1} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.default) | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.deployment-controller) map[pcsa.projectcalico.org/name:deployment-controller] /311 <nil> 0s} 1} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.deployment-controller) | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.deployment-controller) | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.deployment-controller)" | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"deployment-controller"} labels=map[string]string{"projectcalico.org/name":"deployment-controller"} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.deployment-controller) 0xc000911040 /311 <nil> 0s} 1} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.deployment-controller | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=20 | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.522 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.deployment-controller) 0xc000926580 /311 <nil> 0s} 1} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.deployment-controller) | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.disruption-controller) map[pcsa.projectcalico.org/name:disruption-controller] /291 <nil> 0s} 1} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.disruption-controller) | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.disruption-controller) | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.disruption-controller)" | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"disruption-controller"} labels=map[string]string{"projectcalico.org/name":"disruption-controller"} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.disruption-controller) 0xc000911360 /291 <nil> 0s} 1} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.disruption-controller | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=21 | |
2021-12-07 00:26:11.523 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.disruption-controller) 0xc0009266e0 /291 <nil> 0s} 1} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.disruption-controller) | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.endpoint-controller) map[pcsa.projectcalico.org/name:endpoint-controller] /302 <nil> 0s} 1} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.endpoint-controller) | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.endpoint-controller) | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.endpoint-controller)" | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"endpoint-controller"} labels=map[string]string{"projectcalico.org/name":"endpoint-controller"} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.endpoint-controller) 0xc000911680 /302 <nil> 0s} 1} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.endpoint-controller | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=22 | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.524 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.endpoint-controller) 0xc000926840 /302 <nil> 0s} 1} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.endpoint-controller) | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.endpointslice-controller) map[pcsa.projectcalico.org/name:endpointslice-controller] /244 <nil> 0s} 1} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.endpointslice-controller) | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.endpointslice-controller) | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.endpointslice-controller)" | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"endpointslice-controller"} labels=map[string]string{"projectcalico.org/name":"endpointslice-controller"} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.endpointslice-controller) 0xc0009119a0 /244 <nil> 0s} 1} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.endpointslice-controller | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=23 | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.endpointslice-controller) 0xc0009269a0 /244 <nil> 0s} 1} | |
2021-12-07 00:26:11.525 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.endpointslice-controller) | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.endpointslicemirroring-controller) map[pcsa.projectcalico.org/name:endpointslicemirroring-controller] /377 <nil> 0s} 1} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.endpointslicemirroring-controller) | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.endpointslicemirroring-controller) | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.endpointslicemirroring-controller)" | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"endpointslicemirroring-controller"} labels=map[string]string{"projectcalico.org/name":"endpointslicemirroring-controller"} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.endpointslicemirroring-controller) 0xc000911f40 /377 <nil> 0s} 1} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.endpointslicemirroring-controller | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=24 | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.endpointslicemirroring-controller) 0xc000926b00 /377 <nil> 0s} 1} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.endpointslicemirroring-controller) | |
2021-12-07 00:26:11.526 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.ephemeral-volume-controller) map[pcsa.projectcalico.org/name:ephemeral-volume-controller] /368 <nil> 0s} 1} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.ephemeral-volume-controller) | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.ephemeral-volume-controller) | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.ephemeral-volume-controller)" | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"ephemeral-volume-controller"} labels=map[string]string{"projectcalico.org/name":"ephemeral-volume-controller"} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.ephemeral-volume-controller) 0xc0000a0e10 /368 <nil> 0s} 1} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.ephemeral-volume-controller | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=25 | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.ephemeral-volume-controller) 0xc000926c60 /368 <nil> 0s} 1} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.ephemeral-volume-controller) | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.expand-controller) map[pcsa.projectcalico.org/name:expand-controller] /362 <nil> 0s} 1} | |
2021-12-07 00:26:11.527 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.expand-controller) | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.expand-controller) | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.expand-controller)" | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"expand-controller"} labels=map[string]string{"projectcalico.org/name":"expand-controller"} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.expand-controller) 0xc0000a12c0 /362 <nil> 0s} 1} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.expand-controller | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=26 | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.expand-controller) 0xc0009271e0 /362 <nil> 0s} 1} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.expand-controller) | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.generic-garbage-collector) map[pcsa.projectcalico.org/name:generic-garbage-collector] /234 <nil> 0s} 1} | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.528 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.534 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.generic-garbage-collector) | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.generic-garbage-collector) | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.generic-garbage-collector)" | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"generic-garbage-collector"} labels=map[string]string{"projectcalico.org/name":"generic-garbage-collector"} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.generic-garbage-collector) 0xc0000a19a0 /234 <nil> 0s} 1} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.generic-garbage-collector | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=27 | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.generic-garbage-collector) 0xc000927340 /234 <nil> 0s} 1} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.generic-garbage-collector) | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.horizontal-pod-autoscaler) map[pcsa.projectcalico.org/name:horizontal-pod-autoscaler] /235 <nil> 0s} 1} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.horizontal-pod-autoscaler) | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.horizontal-pod-autoscaler) | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.horizontal-pod-autoscaler)" | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"horizontal-pod-autoscaler"} labels=map[string]string{"projectcalico.org/name":"horizontal-pod-autoscaler"} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.horizontal-pod-autoscaler) 0xc0000a1d10 /235 <nil> 0s} 1} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.horizontal-pod-autoscaler | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=28 | |
2021-12-07 00:26:11.535 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.horizontal-pod-autoscaler) 0xc00064a420 /235 <nil> 0s} 1} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.horizontal-pod-autoscaler) | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.job-controller) map[pcsa.projectcalico.org/name:job-controller] /279 <nil> 0s} 1} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.job-controller) | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.job-controller) | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.job-controller)" | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"job-controller"} labels=map[string]string{"projectcalico.org/name":"job-controller"} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.job-controller) 0xc000a7e0a0 /279 <nil> 0s} 1} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.job-controller | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=29 | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.job-controller) 0xc00064a840 /279 <nil> 0s} 1} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.job-controller) | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.kube-proxy) map[pcsa.projectcalico.org/name:kube-proxy] /272 <nil> 0s} 1} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.kube-proxy) | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.kube-proxy) | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.kube-proxy)" | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"kube-proxy"} labels=map[string]string{"projectcalico.org/name":"kube-proxy"} | |
2021-12-07 00:26:11.536 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.kube-proxy) 0xc000a7e3c0 /272 <nil> 0s} 1} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.kube-proxy | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=30 | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.kube-proxy) 0xc00064ab00 /272 <nil> 0s} 1} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.kube-proxy) | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.metrics-server) map[pcsa.k8s-app:metrics-server pcsa.projectcalico.org/name:metrics-server] /451479 <nil> 0s} 1} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.metrics-server) | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.metrics-server) | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.metrics-server)" | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"metrics-server"} labels=map[string]string{"k8s-app":"metrics-server", "projectcalico.org/name":"metrics-server"} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.metrics-server) 0xc000a7e7d0 /451479 <nil> 0s} 1} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.metrics-server | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=31 | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.metrics-server) 0xc00064b1e0 /451479 <nil> 0s} 1} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.metrics-server) | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.namespace-controller) map[pcsa.projectcalico.org/name:namespace-controller] /243 <nil> 0s} 1} | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.537 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.538 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.namespace-controller) | |
... dropped 22 logs ... | |
2021-12-07 00:26:11.539 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"node-controller"} labels=map[string]string{"projectcalico.org/name":"node-controller"} | |
2021-12-07 00:26:11.540 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.node-controller) 0xc000a7efa0 /233 <nil> 0s} 1} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.node-controller | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=33 | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.node-controller) 0xc00064b760 /233 <nil> 0s} 1} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.node-controller) | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.persistent-volume-binder) map[pcsa.projectcalico.org/name:persistent-volume-binder] /308 <nil> 0s} 1} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.persistent-volume-binder) | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.persistent-volume-binder) | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.persistent-volume-binder)" | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"persistent-volume-binder"} labels=map[string]string{"projectcalico.org/name":"persistent-volume-binder"} | |
2021-12-07 00:26:11.541 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.persistent-volume-binder) 0xc000a7f310 /308 <nil> 0s} 1} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.persistent-volume-binder | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=34 | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.persistent-volume-binder) 0xc00064ba20 /308 <nil> 0s} 1} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.persistent-volume-binder) | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.pod-garbage-collector) map[pcsa.projectcalico.org/name:pod-garbage-collector] /242 <nil> 0s} 1} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.pod-garbage-collector) | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.pod-garbage-collector) | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.pod-garbage-collector)" | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"pod-garbage-collector"} labels=map[string]string{"projectcalico.org/name":"pod-garbage-collector"} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.pod-garbage-collector) 0xc000b42000 /242 <nil> 0s} 1} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.pod-garbage-collector | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=35 | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.542 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.pod-garbage-collector) 0xc00064bb80 /242 <nil> 0s} 1} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.pod-garbage-collector) | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.pv-protection-controller) map[pcsa.projectcalico.org/name:pv-protection-controller] /371 <nil> 0s} 1} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.pv-protection-controller) | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.pv-protection-controller) | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.pv-protection-controller)" | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"pv-protection-controller"} labels=map[string]string{"projectcalico.org/name":"pv-protection-controller"} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.pv-protection-controller) 0xc000b42320 /371 <nil> 0s} 1} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.pv-protection-controller | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=36 | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.543 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.pv-protection-controller) 0xc00064bce0 /371 <nil> 0s} 1} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.pv-protection-controller) | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.pvc-protection-controller) map[pcsa.projectcalico.org/name:pvc-protection-controller] /344 <nil> 0s} 1} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.pvc-protection-controller) | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.pvc-protection-controller) | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.pvc-protection-controller)" | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"pvc-protection-controller"} labels=map[string]string{"projectcalico.org/name":"pvc-protection-controller"} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.pvc-protection-controller) 0xc000b42640 /344 <nil> 0s} 1} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.pvc-protection-controller | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=37 | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.544 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.pvc-protection-controller) 0xc00064be40 /344 <nil> 0s} 1} | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.pvc-protection-controller) | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.replicaset-controller) map[pcsa.projectcalico.org/name:replicaset-controller] /284 <nil> 0s} 1} | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.replicaset-controller) | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.replicaset-controller) | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.replicaset-controller)" | |
2021-12-07 00:26:11.545 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"replicaset-controller"} labels=map[string]string{"projectcalico.org/name":"replicaset-controller"} | |
2021-12-07 00:26:11.546 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
... dropped 83 logs ... | |
2021-12-07 00:26:11.552 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.service-account-controller | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=42 | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.service-account-controller) 0xc000a249a0 /348 <nil> 0s} 1} | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.service-account-controller) | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.service-controller) map[pcsa.projectcalico.org/name:service-controller] /380 <nil> 0s} 1} | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.556 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.557 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.service-controller) | |
2021-12-07 00:26:11.557 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.service-controller) | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.service-controller)" | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"service-controller"} labels=map[string]string{"projectcalico.org/name":"service-controller"} | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.service-controller) 0xc000b43900 /380 <nil> 0s} 1} | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.service-controller | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=43 | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.559 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.service-controller) 0xc000a24f20 /380 <nil> 0s} 1} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.service-controller) | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.statefulset-controller) map[pcsa.projectcalico.org/name:statefulset-controller] /236 <nil> 0s} 1} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.statefulset-controller) | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.statefulset-controller) | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.statefulset-controller)" | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"statefulset-controller"} labels=map[string]string{"projectcalico.org/name":"statefulset-controller"} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.statefulset-controller) 0xc000b43c20 /236 <nil> 0s} 1} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.statefulset-controller | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=44 | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.statefulset-controller) 0xc000a25080 /236 <nil> 0s} 1} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.560 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.statefulset-controller) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.token-cleaner) map[pcsa.projectcalico.org/name:token-cleaner] /305 <nil> 0s} 1} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.token-cleaner) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.token-cleaner) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.token-cleaner)" | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"token-cleaner"} labels=map[string]string{"projectcalico.org/name":"token-cleaner"} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileRules(name=ksa.kube-system.token-cleaner) 0xc000b43f40 /305 <nil> 0s} 1} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileRulesKey | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820)} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/active_rules_calculator.go 162: Profile rules updated while inactive: ksa.kube-system.token-cleaner | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/stats_collector.go 167: Number of policies/profiles changed numALPPolicies=0 numPolicies=0 numProfiles=45 | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{Profile(ksa.kube-system.token-cleaner) 0xc000a254a0 /305 <nil> 0s} 1} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 95: Type: model.ResourceKey | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a61360), (dispatcher.UpdateHandler)(0x1a9cc40), (dispatcher.UpdateHandler)(0x1a9cd60), (dispatcher.UpdateHandler)(0x1a9d440)} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dataplane_passthru.go 96: Ignoring v3 resource other than global BGPConfiguration key=Profile(ksa.kube-system.token-cleaner) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{ProfileLabels(name=ksa.kube-system.ttl-after-finished-controller) map[pcsa.projectcalico.org/name:ttl-after-finished-controller] /374 <nil> 0s} 1} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 95: Type: model.ProfileLabelsKey | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d220)} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/label_inheritance_index.go 164: Updating InheritIndex for profile labels ProfileLabels(name=ksa.kube-system.ttl-after-finished-controller) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/named_port_index.go 321: Updating NamedPortIndex for profile labels ProfileLabels(name=ksa.kube-system.ttl-after-finished-controller) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/profile_decoder.go 47: Decoding ProfileLabels key="ProfileLabels(name=ksa.kube-system.ttl-after-finished-controller)" | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/event_sequencer.go 697: ServiceAccount update key=proto.ServiceAccountID{Namespace:"kube-system", Name:"ttl-after-finished-controller"} labels=map[string]string{"projectcalico.org/name":"ttl-after-finished-controller"} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 211: Not throttled: flushing event buffer | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/event_sequencer.go 670: Done flushing IP address deltas | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/event_sequencer.go 664: Done flushing IP set removes | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.561 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.562 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"horizontal-pod-autoscaler" > labels:<key:"projectcalico.org/name" value:"horizontal-pod-autoscaler" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"horizontal-pod-autoscaler" > labels:<key:"projectcalico.org/name" value:"horizontal-pod-autoscaler" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"horizontal-pod-autoscaler" > labels:<key:"projectcalico.org/name" value:"horizontal-pod-autoscaler" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"horizontal-pod-autoscaler" > labels:<key:"projectcalico.org/name" value:"horizontal-pod-autoscaler" > | |
2021-12-07 00:26:11.562 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"daemon-set-controller" > labels:<key:"projectcalico.org/name" value:"daemon-set-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"daemon-set-controller" > labels:<key:"projectcalico.org/name" value:"daemon-set-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"daemon-set-controller" > labels:<key:"projectcalico.org/name" value:"daemon-set-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"daemon-set-controller" > labels:<key:"projectcalico.org/name" value:"daemon-set-controller" > | |
2021-12-07 00:26:11.562 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"endpoint-controller" > labels:<key:"projectcalico.org/name" value:"endpoint-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"endpoint-controller" > labels:<key:"projectcalico.org/name" value:"endpoint-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"endpoint-controller" > labels:<key:"projectcalico.org/name" value:"endpoint-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"endpoint-controller" > labels:<key:"projectcalico.org/name" value:"endpoint-controller" > | |
2021-12-07 00:26:11.562 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"coredns" > labels:<key:"projectcalico.org/name" value:"coredns" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"coredns" > labels:<key:"projectcalico.org/name" value:"coredns" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"coredns" > labels:<key:"projectcalico.org/name" value:"coredns" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"coredns" > labels:<key:"projectcalico.org/name" value:"coredns" > | |
2021-12-07 00:26:11.562 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"metrics-server" > labels:<key:"k8s-app" value:"metrics-server" > labels:<key:"projectcalico.org/name" value:"metrics-server" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"metrics-server" > labels:<key:"k8s-app" value:"metrics-server" > labels:<key:"projectcalico.org/name" value:"metrics-server" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"metrics-server" > labels:<key:"k8s-app" value:"metrics-server" > labels:<key:"projectcalico.org/name" value:"metrics-server" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"metrics-server" > labels:<key:"k8s-app" value:"metrics-server" > labels:<key:"projectcalico.org/name" value:"metrics-server" > | |
2021-12-07 00:26:11.562 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"pv-protection-controller" > labels:<key:"projectcalico.org/name" value:"pv-protection-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"pv-protection-controller" > labels:<key:"projectcalico.org/name" value:"pv-protection-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"pv-protection-controller" > labels:<key:"projectcalico.org/name" value:"pv-protection-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"pv-protection-controller" > labels:<key:"projectcalico.org/name" value:"pv-protection-controller" > | |
2021-12-07 00:26:11.563 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"bootstrap-signer" > labels:<key:"projectcalico.org/name" value:"bootstrap-signer" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"bootstrap-signer" > labels:<key:"projectcalico.org/name" value:"bootstrap-signer" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"bootstrap-signer" > labels:<key:"projectcalico.org/name" value:"bootstrap-signer" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"bootstrap-signer" > labels:<key:"projectcalico.org/name" value:"bootstrap-signer" > | |
2021-12-07 00:26:11.563 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"calico-node" > labels:<key:"projectcalico.org/name" value:"calico-node" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"calico-node" > labels:<key:"projectcalico.org/name" value:"calico-node" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"calico-node" > labels:<key:"projectcalico.org/name" value:"calico-node" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"calico-node" > labels:<key:"projectcalico.org/name" value:"calico-node" > | |
2021-12-07 00:26:11.563 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"endpointslicemirroring-controller" > labels:<key:"projectcalico.org/name" value:"endpointslicemirroring-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"endpointslicemirroring-controller" > labels:<key:"projectcalico.org/name" value:"endpointslicemirroring-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"endpointslicemirroring-controller" > labels:<key:"projectcalico.org/name" value:"endpointslicemirroring-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"endpointslicemirroring-controller" > labels:<key:"projectcalico.org/name" value:"endpointslicemirroring-controller" > | |
2021-12-07 00:26:11.563 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"namespace-controller" > labels:<key:"projectcalico.org/name" value:"namespace-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"namespace-controller" > labels:<key:"projectcalico.org/name" value:"namespace-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"namespace-controller" > labels:<key:"projectcalico.org/name" value:"namespace-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"namespace-controller" > labels:<key:"projectcalico.org/name" value:"namespace-controller" > | |
2021-12-07 00:26:11.563 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"service-controller" > labels:<key:"projectcalico.org/name" value:"service-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"service-controller" > labels:<key:"projectcalico.org/name" value:"service-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"service-controller" > labels:<key:"projectcalico.org/name" value:"service-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"service-controller" > labels:<key:"projectcalico.org/name" value:"service-controller" > | |
2021-12-07 00:26:11.563 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"statefulset-controller" > labels:<key:"projectcalico.org/name" value:"statefulset-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"statefulset-controller" > labels:<key:"projectcalico.org/name" value:"statefulset-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"statefulset-controller" > labels:<key:"projectcalico.org/name" value:"statefulset-controller" > | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"statefulset-controller" > labels:<key:"projectcalico.org/name" value:"statefulset-controller" > | |
2021-12-07 00:26:11.562 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.563 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.563 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"clusterrole-aggregation-controller" > labels:<key:"projectcalico.org/name" value:"clusterrole-aggregation-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"clusterrole-aggregation-controller" > labels:<key:"projectcalico.org/name" value:"clusterrole-aggregation-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"clusterrole-aggregation-controller" > labels:<key:"projectcalico.org/name" value:"clusterrole-aggregation-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"clusterrole-aggregation-controller" > labels:<key:"projectcalico.org/name" value:"clusterrole-aggregation-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"cronjob-controller" > labels:<key:"projectcalico.org/name" value:"cronjob-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"cronjob-controller" > labels:<key:"projectcalico.org/name" value:"cronjob-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"cronjob-controller" > labels:<key:"projectcalico.org/name" value:"cronjob-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"cronjob-controller" > labels:<key:"projectcalico.org/name" value:"cronjob-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"attachdetach-controller" > labels:<key:"projectcalico.org/name" value:"attachdetach-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"attachdetach-controller" > labels:<key:"projectcalico.org/name" value:"attachdetach-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"attachdetach-controller" > labels:<key:"projectcalico.org/name" value:"attachdetach-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"attachdetach-controller" > labels:<key:"projectcalico.org/name" value:"attachdetach-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"node-controller" > labels:<key:"projectcalico.org/name" value:"node-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"node-controller" > labels:<key:"projectcalico.org/name" value:"node-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"node-controller" > labels:<key:"projectcalico.org/name" value:"node-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"node-controller" > labels:<key:"projectcalico.org/name" value:"node-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"pod-garbage-collector" > labels:<key:"projectcalico.org/name" value:"pod-garbage-collector" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"pod-garbage-collector" > labels:<key:"projectcalico.org/name" value:"pod-garbage-collector" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"pod-garbage-collector" > labels:<key:"projectcalico.org/name" value:"pod-garbage-collector" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"pod-garbage-collector" > labels:<key:"projectcalico.org/name" value:"pod-garbage-collector" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"service-account-controller" > labels:<key:"projectcalico.org/name" value:"service-account-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"service-account-controller" > labels:<key:"projectcalico.org/name" value:"service-account-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"service-account-controller" > labels:<key:"projectcalico.org/name" value:"service-account-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"service-account-controller" > labels:<key:"projectcalico.org/name" value:"service-account-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"token-cleaner" > labels:<key:"projectcalico.org/name" value:"token-cleaner" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"token-cleaner" > labels:<key:"projectcalico.org/name" value:"token-cleaner" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"token-cleaner" > labels:<key:"projectcalico.org/name" value:"token-cleaner" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"token-cleaner" > labels:<key:"projectcalico.org/name" value:"token-cleaner" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"deployment-controller" > labels:<key:"projectcalico.org/name" value:"deployment-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"deployment-controller" > labels:<key:"projectcalico.org/name" value:"deployment-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"deployment-controller" > labels:<key:"projectcalico.org/name" value:"deployment-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"deployment-controller" > labels:<key:"projectcalico.org/name" value:"deployment-controller" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/event_sequencer.go 730: Done flushing Service Accounts | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"generic-garbage-collector" > labels:<key:"projectcalico.org/name" value:"generic-garbage-collector" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"generic-garbage-collector" > labels:<key:"projectcalico.org/name" value:"generic-garbage-collector" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"generic-garbage-collector" > labels:<key:"projectcalico.org/name" value:"generic-garbage-collector" > | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.564 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"generic-garbage-collector" > labels:<key:"projectcalico.org/name" value:"generic-garbage-collector" > | |
2021-12-07 00:26:11.565 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.565 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.565 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"expand-controller" > labels:<key:"projectcalico.org/name" value:"expand-controller" > | |
2021-12-07 00:26:11.565 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.565 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"expand-controller" > labels:<key:"projectcalico.org/name" value:"expand-controller" > | |
2021-12-07 00:26:11.565 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
... dropped 193 logs ... | |
2021-12-07 00:26:11.573 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.573 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.573 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.573 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.573 [INFO][63] felix/int_dataplane.go 1506: Received *proto.NamespaceUpdate update from calculation graph msg=id:<name:"default" > labels:<key:"kubernetes.io/metadata.name" value:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.573 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<name:"default" > labels:<key:"kubernetes.io/metadata.name" value:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.573 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<name:"default" > labels:<key:"kubernetes.io/metadata.name" value:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<name:"default" > labels:<key:"kubernetes.io/metadata.name" value:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/event_sequencer.go 730: Done flushing Service Accounts | |
2021-12-07 00:26:11.574 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kubernetes-dashboard" name:"admin-user" > labels:<key:"projectcalico.org/name" value:"admin-user" > | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/event_sequencer.go 804: Done flushing Namespaces | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/event_sequencer.go 881: Done flushing route deletes | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kubernetes-dashboard" name:"admin-user" > labels:<key:"projectcalico.org/name" value:"admin-user" > | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/event_sequencer.go 831: Done flushing VTEP removes | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kubernetes-dashboard" name:"admin-user" > labels:<key:"projectcalico.org/name" value:"admin-user" > | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/event_sequencer.go 840: Done flushing VTEP adds | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/event_sequencer.go 869: Done flushing route adds | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kubernetes-dashboard" name:"admin-user" > labels:<key:"projectcalico.org/name" value:"admin-user" > | |
2021-12-07 00:26:11.574 [DEBUG][63] felix/async_calc_graph.go 145: Pulled []KVPair off channel | |
2021-12-07 00:26:11.574 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kubernetes-dashboard" name:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kubernetes-dashboard" name:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/dashboard-metrics-scraper-c45b7869d-lhzdg, name=eth0) 0xc0001600f0 453825 <nil> 0s} 1} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kubernetes-dashboard" name:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kubernetes-dashboard" name:"default" > labels:<key:"projectcalico.org/name" value:"default" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/dashboard-metrics-scraper-c45b7869d-lhzdg, name=eth0) 0xc0001600f0 453825 <nil> 0s} 1} | |
2021-12-07 00:26:11.575 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kubernetes-dashboard" name:"kubernetes-dashboard" > labels:<key:"k8s-app" value:"kubernetes-dashboard" > labels:<key:"projectcalico.org/name" value:"kubernetes-dashboard" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kubernetes-dashboard" name:"kubernetes-dashboard" > labels:<key:"k8s-app" value:"kubernetes-dashboard" > labels:<key:"projectcalico.org/name" value:"kubernetes-dashboard" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/dashboard-metrics-scraper-c45b7869d-lhzdg, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kubernetes-dashboard" name:"kubernetes-dashboard" > labels:<key:"k8s-app" value:"kubernetes-dashboard" > labels:<key:"projectcalico.org/name" value:"kubernetes-dashboard" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kubernetes-dashboard" name:"kubernetes-dashboard" > labels:<key:"k8s-app" value:"kubernetes-dashboard" > labels:<key:"projectcalico.org/name" value:"kubernetes-dashboard" > | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x83}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/dashboard-metrics-scraper-c45b7869d-lhzdg, name=eth0) newLabels=map[string]string{"k8s-app":"dashboard-metrics-scraper", "pod-template-hash":"c45b7869d", "projectcalico.org/namespace":"kubernetes-dashboard", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"kubernetes-dashboard"} parentIDs=[]string{"kns.kubernetes-dashboard", "ksa.kubernetes-dashboard.kubernetes-dashboard"} ports=[]model.EndpointPort{} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node1.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/dashboard-metrics-scraper-c45b7869d-lhzdg, name=eth0) newCount=2 | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) 0xc0001601e0 559922 <nil> 0s} 1} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) 0xc0001601e0 559922 <nil> 0s} 1} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.575 [INFO][63] felix/calc_graph.go 445: Local endpoint updated id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/active_rules_calculator.go 125: Updating ARC with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/active_rules_calculator.go 253: Endpoint model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hostnames-57b79fc5df-6sw8n", EndpointID:"eth0"} now has profile IDs: [kns.default ksa.default.default] | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/active_rules_calculator.go 315: Sending profile update for profile kns.default (known: true, active: true) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/rule_scanner.go 175: Scanning rules (1 in, 1 out) for key ProfileRules(name=kns.default) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/active_rules_calculator.go 315: Sending profile update for profile ksa.default.default (known: true, active: true) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/rule_scanner.go 175: Scanning rules (0 in, 0 out) for key ProfileRules(name=ksa.default.default) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 143: Updating InheritIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 214: Inherit index updating labels for WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 215: Num dirty items 0 items | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 287: Updating parents id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) newParents=[]*labelindex.parentData{(*labelindex.parentData)(0xc000c1a2c0), (*labelindex.parentData)(0xc000658d40)} oldParents=[]*labelindex.parentData(nil) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 362: Flushing model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hostnames-57b79fc5df-6sw8n", EndpointID:"eth0"} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 377: Flushing update of item WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 393: Scanning all (0) selectors against labels WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/label_inheritance_index.go 245: Num ending dirty items 0 items | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/policy_resolver.go 148: Not in sync, skipping flush | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/l3_route_resolver.go 197: Workload update newCIDRs=[]net.IPNet{net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x62, 0xcb}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xff}}}} workload=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.98.203/32 | |
2021-12-07 00:26:11.575 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.98.203/32 type=VXLAN | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.98.203/32 | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/l3_route_resolver.go 663: Local workload route. cidr=172.16.98.203/32 | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.203/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.98.203/32"} | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x62, 0xcb}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) newLabels=map[string]string{"app":"hostnames", "pod-template-hash":"57b79fc5df", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"} parentIDs=[]string{"kns.default", "ksa.default.default"} ports=[]model.EndpointPort{} | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node3.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) newCount=4 | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.576 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ServiceAccountUpdate update from calculation graph msg=id:<namespace:"kube-system" name:"ttl-controller" > labels:<key:"projectcalico.org/name" value:"ttl-controller" > | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) 0xc0001602d0 559949 <nil> 0s} 1} | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<namespace:"kube-system" name:"ttl-controller" > labels:<key:"projectcalico.org/name" value:"ttl-controller" > | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) 0xc0001602d0 559949 <nil> 0s} 1} | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<namespace:"kube-system" name:"ttl-controller" > labels:<key:"projectcalico.org/name" value:"ttl-controller" > | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<namespace:"kube-system" name:"ttl-controller" > labels:<key:"projectcalico.org/name" value:"ttl-controller" > | |
2021-12-07 00:26:11.576 [INFO][63] felix/calc_graph.go 445: Local endpoint updated id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/active_rules_calculator.go 125: Updating ARC with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/active_rules_calculator.go 253: Endpoint model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hostnames-57b79fc5df-2l5ln", EndpointID:"eth0"} now has profile IDs: [kns.default ksa.default.default] | |
2021-12-07 00:26:11.576 [DEBUG][63] felix/label_inheritance_index.go 143: Updating InheritIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/label_inheritance_index.go 214: Inherit index updating labels for WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/label_inheritance_index.go 215: Num dirty items 0 items | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/label_inheritance_index.go 287: Updating parents id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) newParents=[]*labelindex.parentData{(*labelindex.parentData)(0xc000c1a2c0), (*labelindex.parentData)(0xc000658d40)} oldParents=[]*labelindex.parentData(nil) | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/label_inheritance_index.go 362: Flushing model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hostnames-57b79fc5df-2l5ln", EndpointID:"eth0"} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/label_inheritance_index.go 377: Flushing update of item WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/label_inheritance_index.go 393: Scanning all (0) selectors against labels WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/label_inheritance_index.go 245: Num ending dirty items 0 items | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/policy_resolver.go 148: Not in sync, skipping flush | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 197: Workload update newCIDRs=[]net.IPNet{net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x62, 0xc9}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xff}}}} workload=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.98.201/32 | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.98.201/32 type=VXLAN | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.98.201/32 | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 663: Local workload route. cidr=172.16.98.201/32 | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.201/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.98.201/32"} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x62, 0xc9}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) newLabels=map[string]string{"app":"hostnames", "pod-template-hash":"57b79fc5df", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"} parentIDs=[]string{"kns.default", "ksa.default.default"} ports=[]model.EndpointPort{} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node3.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) newCount=5 | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) 0xc0001603c0 559962 <nil> 0s} 1} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) 0xc0001603c0 559962 <nil> 0s} 1} | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.577 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.577 [INFO][63] felix/calc_graph.go 445: Local endpoint updated id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/active_rules_calculator.go 125: Updating ARC with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/active_rules_calculator.go 253: Endpoint model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointID:"eth0"} now has profile IDs: [kns.default ksa.default.default] | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 143: Updating InheritIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 214: Inherit index updating labels for WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 215: Num dirty items 0 items | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 287: Updating parents id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) newParents=[]*labelindex.parentData{(*labelindex.parentData)(0xc000c1a2c0), (*labelindex.parentData)(0xc000658d40)} oldParents=[]*labelindex.parentData(nil) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 362: Flushing model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointID:"eth0"} | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 377: Flushing update of item WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 393: Scanning all (0) selectors against labels WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/label_inheritance_index.go 245: Num ending dirty items 0 items | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/policy_resolver.go 148: Not in sync, skipping flush | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/l3_route_resolver.go 197: Workload update newCIDRs=[]net.IPNet{net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x62, 0xca}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xff}}}} workload=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.98.202/32 | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.98.202/32 type=VXLAN | |
2021-12-07 00:26:11.578 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.98.202/32 | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/l3_route_resolver.go 663: Local workload route. cidr=172.16.98.202/32 | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.202/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.98.202/32"} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x62, 0xca}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) newLabels=map[string]string{"app":"hello-minikube", "pod-template-hash":"6ddfcc9757", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"} parentIDs=[]string{"kns.default", "ksa.default.default"} ports=[]model.EndpointPort{} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node3.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) newCount=6 | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/metrics-server-dbf765b9b-n9l7r, name=eth0) 0xc0001604b0 454480 <nil> 0s} 1} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/metrics-server-dbf765b9b-n9l7r, name=eth0) 0xc0001604b0 454480 <nil> 0s} 1} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/metrics-server-dbf765b9b-n9l7r, name=eth0) | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0xc7}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/metrics-server-dbf765b9b-n9l7r, name=eth0) newLabels=map[string]string{"k8s-app":"metrics-server", "pod-template-hash":"dbf765b9b", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"metrics-server"} parentIDs=[]string{"kns.kube-system", "ksa.kube-system.metrics-server"} ports=[]model.EndpointPort{model.EndpointPort{Name:"https", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"tcp"}, Port:0x115b}} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node1.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/metrics-server-dbf765b9b-n9l7r, name=eth0) newCount=3 | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) 0xc0001605a0 560081 <nil> 0s} 1} | |
2021-12-07 00:26:11.579 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) 0xc0001605a0 560081 <nil> 0s} 1} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.580 [INFO][63] felix/calc_graph.go 445: Local endpoint updated id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/active_rules_calculator.go 125: Updating ARC with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/active_rules_calculator.go 253: Endpoint model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hostnames-57b79fc5df-vzx9w", EndpointID:"eth0"} now has profile IDs: [kns.default ksa.default.default] | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 143: Updating InheritIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 214: Inherit index updating labels for WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 215: Num dirty items 0 items | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 287: Updating parents id=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) newParents=[]*labelindex.parentData{(*labelindex.parentData)(0xc000c1a2c0), (*labelindex.parentData)(0xc000658d40)} oldParents=[]*labelindex.parentData(nil) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 362: Flushing model.WorkloadEndpointKey{Hostname:"node3.tpurchas.gmail.com.beta.tailscale.net", OrchestratorID:"k8s", WorkloadID:"default/hostnames-57b79fc5df-vzx9w", EndpointID:"eth0"} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 377: Flushing update of item WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 393: Scanning all (0) selectors against labels WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/label_inheritance_index.go 245: Num ending dirty items 0 items | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/policy_resolver.go 148: Not in sync, skipping flush | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 197: Workload update newCIDRs=[]net.IPNet{net.IPNet{IPNet:net.IPNet{IP:net.IP{0xac, 0x10, 0x62, 0xcc}, Mask:net.IPMask{0xff, 0xff, 0xff, 0xff}}}} workload=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref(nil), WasSent:false} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 613: Flushing dirty route cidr=172.16.98.204/32 | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 649: Found containing IP pool. cidr=172.16.98.204/32 type=VXLAN | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 653: NAT outgoing enabled on this CIDR. cidr=172.16.98.204/32 | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 663: Local workload route. cidr=172.16.98.204/32 | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 734: Sending route route=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.204/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/event_sequencer.go 847: Route update id=calc.routeID{dst:"172.16.98.204/32"} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/l3_route_resolver.go 955: Route updated, marking dirty. new=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:true} old=calc.RouteInfo{Pool:struct { Type proto.IPPoolType; NATOutgoing bool; CrossSubnet bool }{Type:0, NATOutgoing:false, CrossSubnet:false}, Block:struct { NodeName string }{NodeName:""}, Host:struct { NodeNames []string }{NodeNames:[]string(nil)}, Refs:[]calc.Ref{calc.Ref{RefCount:1, RefType:0x0, NodeName:"node3.tpurchas.gmail.com.beta.tailscale.net"}}, WasSent:false} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x62, 0xcc}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) newLabels=map[string]string{"app":"hostnames", "pod-template-hash":"57b79fc5df", "projectcalico.org/namespace":"default", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"} parentIDs=[]string{"kns.default", "ksa.default.default"} ports=[]model.EndpointPort{} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node3.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) newCount=7 | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-kfckw, name=eth0) 0xc000160690 453843 <nil> 0s} 1} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-kfckw, name=eth0) 0xc000160690 453843 <nil> 0s} 1} | |
2021-12-07 00:26:11.580 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-kfckw, name=eth0) | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0xc5}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-kfckw, name=eth0) newLabels=map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"78fcd69978", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"} parentIDs=[]string{"kns.kube-system", "ksa.kube-system.coredns"} ports=[]model.EndpointPort{model.EndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"udp"}, Port:0x35}, model.EndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"tcp"}, Port:0x35}, model.EndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"tcp"}, Port:0x23c1}} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node1.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-kfckw, name=eth0) newCount=4 | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-jrwnw, name=eth0) 0xc000160780 522175 <nil> 0s} 1} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-jrwnw, name=eth0) 0xc000160780 522175 <nil> 0s} 1} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-jrwnw, name=eth0) | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0xc4}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-jrwnw, name=eth0) newLabels=map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"78fcd69978", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"} parentIDs=[]string{"kns.kube-system", "ksa.kube-system.coredns"} ports=[]model.EndpointPort{model.EndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"udp"}, Port:0x35}, model.EndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"tcp"}, Port:0x35}, model.EndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"tcp"}, Port:0x23c1}} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node1.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/coredns-78fcd69978-jrwnw, name=eth0) newCount=5 | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/kubernetes-dashboard-576cb95f94-mc6nn, name=eth0) 0xc000160870 455978 <nil> 0s} 1} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/kubernetes-dashboard-576cb95f94-mc6nn, name=eth0) 0xc000160870 455978 <nil> 0s} 1} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/kubernetes-dashboard-576cb95f94-mc6nn, name=eth0) | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x85}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/kubernetes-dashboard-576cb95f94-mc6nn, name=eth0) newLabels=map[string]string{"k8s-app":"kubernetes-dashboard", "pod-template-hash":"576cb95f94", "projectcalico.org/namespace":"kubernetes-dashboard", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"kubernetes-dashboard"} parentIDs=[]string{"kns.kubernetes-dashboard", "ksa.kubernetes-dashboard.kubernetes-dashboard"} ports=[]model.EndpointPort{} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node1.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kubernetes-dashboard/kubernetes-dashboard-576cb95f94-mc6nn, name=eth0) newCount=6 | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/calico-kube-controllers-56b8f699d9-pzfdp, name=eth0) 0xc000160960 455925 <nil> 0s} 1} | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.581 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9c9a0), (dispatcher.UpdateHandler)(0x19ddc60), (dispatcher.UpdateHandler)(0x1a9d2c0)} | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/dispatcher.go 93: Dispatching {{WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/calico-kube-controllers-56b8f699d9-pzfdp, name=eth0) 0xc000160960 455925 <nil> 0s} 1} | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/dispatcher.go 95: Type: model.WorkloadEndpointKey | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/dispatcher.go 100: Looked up type-specific handlers typeSpecificHandlers=dispatcher.updateHandlers{(dispatcher.UpdateHandler)(0x1a9caa0), (dispatcher.UpdateHandler)(0x1a9c820), (dispatcher.UpdateHandler)(0x1a9d080), (dispatcher.UpdateHandler)(0x1a9cf40)} | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/named_port_index.go 274: Updating NamedPortIndex with endpoint WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/calico-kube-controllers-56b8f699d9-pzfdp, name=eth0) | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/named_port_index.go 514: Updating endpoint/network set CIDRs=[]ip.CIDR{ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x86}, prefix:0x20}} endpointOrSetID=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/calico-kube-controllers-56b8f699d9-pzfdp, name=eth0) newLabels=map[string]string{"k8s-app":"calico-kube-controllers", "pod-template-hash":"56b8f699d9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"} parentIDs=[]string{"kns.kube-system", "ksa.kube-system.calico-kube-controllers"} ports=[]model.EndpointPort{} | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/stats_collector.go 135: Host-specific key added host="node1.tpurchas.gmail.com.beta.tailscale.net" key=WorkloadEndpoint(node=node1.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=kube-system/calico-kube-controllers-56b8f699d9-pzfdp, name=eth0) newCount=7 | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/async_calc_graph.go 211: Not throttled: flushing event buffer | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/event_sequencer.go 670: Done flushing IP address deltas | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/rule_convert.go 212: Converted rule to protobuf format. in=&calc.ParsedRule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), SrcNets:[]*net.IPNet(nil), SrcPorts:[]numorstring.Port(nil), SrcNamedPortIPSetIDs:[]string(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstNamedPortIPSetIDs:[]string(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), SrcIPSetIDs:[]string(nil), DstIPSetIDs:[]string(nil), DstIPPortSetIDs:[]string(nil), NotProtocol:(*numorstring.Protocol)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcPorts:[]numorstring.Port(nil), NotSrcNamedPortIPSetIDs:[]string(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), NotDstNamedPortIPSetIDs:[]string(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), NotSrcIPSetIDs:[]string(nil), NotDstIPSetIDs:[]string(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", OriginalSrcService:"", OriginalSrcServiceNamespace:"", OriginalDstService:"", OriginalDstServiceNamespace:"", HTTPMatch:(*model.HTTPMatch)(nil), Metadata:(*model.RuleMetadata)(nil)} out=action:"allow" | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/rule_convert.go 84: Calculated rule ID action="allow" position=0 rule=action:"allow" ruleID="aBMQCbsUMESPKGRp" seed="prof-in-kns.default" | |
2021-12-07 00:26:11.582 [DEBUG][63] felix/rule_convert.go 212: Converted rule to protobuf format. in=&calc.ParsedRule{Action:"allow", IPVersion:(*int)(nil), Protocol:(*numorstring.Protocol)(nil), SrcNets:[]*net.IPNet(nil), SrcPorts:[]numorstring.Port(nil), SrcNamedPortIPSetIDs:[]string(nil), DstNets:[]*net.IPNet(nil), DstPorts:[]numorstring.Port(nil), DstNamedPortIPSetIDs:[]string(nil), ICMPType:(*int)(nil), ICMPCode:(*int)(nil), SrcIPSetIDs:[]string(nil), DstIPSetIDs:[]string(nil), DstIPPortSetIDs:[]string(nil), NotProtocol:(*numorstring.Protocol)(nil), NotSrcNets:[]*net.IPNet(nil), NotSrcPorts:[]numorstring.Port(nil), NotSrcNamedPortIPSetIDs:[]string(nil), NotDstNets:[]*net.IPNet(nil), NotDstPorts:[]numorstring.Port(nil), NotDstNamedPortIPSetIDs:[]string(nil), NotICMPType:(*int)(nil), NotICMPCode:(*int)(nil), NotSrcIPSetIDs:[]string(nil), NotDstIPSetIDs:[]string(nil), OriginalSrcSelector:"", OriginalSrcNamespaceSelector:"", OriginalDstSelector:"", OriginalDstNamespaceSelector:"", OriginalNotSrcSelector:"", OriginalNotDstSelector:"", OriginalSrcServiceAccountNames:[]string(nil), OriginalSrcServiceAccountSelector:"", OriginalDstServiceAccountNames:[]string(nil), OriginalDstServiceAccountSelector:"", OriginalSrcService:"", OriginalSrcServiceNamespace:"", OriginalDstService:"", OriginalDstServiceNamespace:"", HTTPMatch:(*model.HTTPMatch)(nil), Metadata:(*model.RuleMetadata)(nil)} out=action:"allow" | |
2021-12-07 00:26:11.591 [DEBUG][63] felix/rule_convert.go 84: Calculated rule ID action="allow" position=0 rule=action:"allow" ruleID="8iYOzpfn3SU3eATK" seed="prof-out-kns.default" | |
2021-12-07 00:26:11.591 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/event_sequencer.go 664: Done flushing IP set removes | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/event_sequencer.go 730: Done flushing Service Accounts | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/event_sequencer.go 804: Done flushing Namespaces | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/event_sequencer.go 881: Done flushing route deletes | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/event_sequencer.go 831: Done flushing VTEP removes | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/event_sequencer.go 840: Done flushing VTEP adds | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.592 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ActiveProfileUpdate update from calculation graph msg=id:<name:"kns.default" > profile:<inbound_rules:<action:"allow" rule_id:"aBMQCbsUMESPKGRp" > outbound_rules:<action:"allow" rule_id:"8iYOzpfn3SU3eATK" > > | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<name:"kns.default" > profile:<inbound_rules:<action:"allow" rule_id:"aBMQCbsUMESPKGRp" > outbound_rules:<action:"allow" rule_id:"8iYOzpfn3SU3eATK" > > | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/policy_mgr.go 132: Updating profile chains id=name:"kns.default" | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.592 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-pri-kns.default" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/event_sequencer.go 869: Done flushing route adds | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/async_calc_graph.go 161: Pulled status update off channel status=in-sync | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.592 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-pro-kns.default" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/policy_resolver.go 159: Sending tier update for endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/policy_resolver.go 187: Endpoint tier update: WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-2l5ln, name=eth0) -> [] | |
2021-12-07 00:26:11.592 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-pro-kns.default" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="mangle" | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/policy_resolver.go 159: Sending tier update for endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/policy_resolver.go 187: Endpoint tier update: WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hello-minikube-6ddfcc9757-sp9xc, name=eth0) -> [] | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<name:"kns.default" > profile:<inbound_rules:<action:"allow" rule_id:"aBMQCbsUMESPKGRp" > outbound_rules:<action:"allow" rule_id:"8iYOzpfn3SU3eATK" > > | |
2021-12-07 00:26:11.592 [DEBUG][63] felix/policy_resolver.go 159: Sending tier update for endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<name:"kns.default" > profile:<inbound_rules:<action:"allow" rule_id:"aBMQCbsUMESPKGRp" > outbound_rules:<action:"allow" rule_id:"8iYOzpfn3SU3eATK" > > | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/policy_resolver.go 187: Endpoint tier update: WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-vzx9w, name=eth0) -> [] | |
2021-12-07 00:26:11.593 [INFO][63] felix/int_dataplane.go 1506: Received *proto.ActiveProfileUpdate update from calculation graph msg=id:<name:"ksa.default.default" > profile:<> | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/policy_resolver.go 159: Sending tier update for endpoint WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<name:"ksa.default.default" > profile:<> | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/policy_resolver.go 187: Endpoint tier update: WorkloadEndpoint(node=node3.tpurchas.gmail.com.beta.tailscale.net, orchestrator=k8s, workload=default/hostnames-57b79fc5df-6sw8n, name=eth0) -> [] | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/policy_mgr.go 132: Updating profile chains id=name:"ksa.default.default" | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_batcher.go 102: Datamodel in sync, flushing config update | |
2021-12-07 00:26:11.593 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-pri-ksa.default.default" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_batcher.go 112: Sending config update global: map[CalicoVersion:v3.21.1 ClusterGUID:96a762c646134e919aef229e6713a6c9 ClusterType:k8s,bgp,kubeadm,kdd IpInIpEnabled:true LogSeverityScreen:Info ReportingIntervalSecs:0 VXLANEnabled:true], host: map[IPv4VXLANTunnelAddr:172.16.98.192 LogSeverityScreen:Debug]. | |
2021-12-07 00:26:11.593 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-pro-ksa.default.default" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/stats_collector.go 103: Datastore status updated status=in-sync | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/stats_collector.go 175: Checking whether we should send an update | |
2021-12-07 00:26:11.593 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-pro-ksa.default.default" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="mangle" | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/stats_collector.go 193: Sent stats update stats=calc.StatsUpdate{NumHosts:3, NumWorkloadEndpoints:10, NumHostEndpoints:0, NumPolicies:0, NumProfiles:50, NumALPPolicies:0} | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<name:"ksa.default.default" > profile:<> | |
2021-12-07 00:26:11.593 [INFO][63] felix/async_calc_graph.go 166: First time we've been in sync | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<name:"ksa.default.default" > profile:<> | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:true} | |
2021-12-07 00:26:11.593 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.203/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [INFO][63] felix/health.go 133: Health of component changed lastReport=health.HealthReport{Live:true, Ready:false} name="async_calc_graph" newReport=&health.HealthReport{Live:true, Ready:true} | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.203/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/async_calc_graph.go 211: Not throttled: flushing event buffer | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.203/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [INFO][63] felix/event_sequencer.go 234: Possible config update. global=map[string]string{"CalicoVersion":"v3.21.1", "ClusterGUID":"96a762c646134e919aef229e6713a6c9", "ClusterType":"k8s,bgp,kubeadm,kdd", "IpInIpEnabled":"true", "LogSeverityScreen":"Info", "ReportingIntervalSecs":"0", "VXLANEnabled":"true"} host=map[string]string{"IPv4VXLANTunnelAddr":"172.16.98.192", "LogSeverityScreen":"Debug"} | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.203/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.203/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 396: Merging in config from datastore (global): map[CalicoVersion:v3.21.1 ClusterGUID:96a762c646134e919aef229e6713a6c9 ClusterType:k8s,bgp,kubeadm,kdd IpInIpEnabled:true LogSeverityScreen:Info ReportingIntervalSecs:0 VXLANEnabled:true] | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 81: RouteUpdate is a workload update | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 503: Parsing value for VXLANMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard.go 323: RouteUpdate cidr=172.16.98.203/32 name="node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 539: Parsed value for VXLANMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard.go 325: Not enabled - ignoring cidr=172.16.98.203/32 name="node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.593 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.201/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 503: Parsing value for HealthEnabled: true (from environment variable) | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 539: Parsed value for HealthEnabled: true (from environment variable) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.201/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.201/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 503: Parsing value for FelixHostname: node3.tpurchas.gmail.com.beta.tailscale.net (from environment variable) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.201/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 539: Parsed value for FelixHostname: node3.tpurchas.gmail.com.beta.tailscale.net (from environment variable) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.201/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 503: Parsing value for DefaultEndpointToHostAction: ACCEPT (from environment variable) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard_mgr.go 81: RouteUpdate is a workload update | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard.go 323: RouteUpdate cidr=172.16.98.201/32 name="node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 539: Parsed value for DefaultEndpointToHostAction: ACCEPT (from environment variable) | |
2021-12-07 00:26:11.593 [DEBUG][63] felix/wireguard.go 325: Not enabled - ignoring cidr=172.16.98.201/32 name="node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.593 [INFO][63] felix/config_params.go 503: Parsing value for IpInIpMtu: 1210 (from environment variable) | |
2021-12-07 00:26:11.594 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.202/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for IpInIpMtu: 1210 (from environment variable) | |
2021-12-07 00:26:11.594 [DEBUG][63] felix/xdp_state.go 134: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.202/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 503: Parsing value for WireguardMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.594 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.202/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for WireguardMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.594 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.202/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 503: Parsing value for DatastoreType: kubernetes (from environment variable) | |
2021-12-07 00:26:11.594 [DEBUG][63] felix/wireguard_mgr.go 65: RouteUpdate update msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.202/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for DatastoreType: kubernetes (from environment variable) | |
2021-12-07 00:26:11.594 [DEBUG][63] felix/wireguard_mgr.go 81: RouteUpdate is a workload update | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 503: Parsing value for Ipv6Support: false (from environment variable) | |
2021-12-07 00:26:11.594 [DEBUG][63] felix/wireguard.go 323: RouteUpdate cidr=172.16.98.202/32 name="node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.594 [DEBUG][63] felix/wireguard.go 325: Not enabled - ignoring cidr=172.16.98.202/32 name="node3.tpurchas.gmail.com.beta.tailscale.net" | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for Ipv6Support: false (from environment variable) | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 503: Parsing value for MetadataAddr: None (from config file) | |
2021-12-07 00:26:11.594 [INFO][63] felix/int_dataplane.go 1506: Received *proto.RouteUpdate update from calculation graph msg=type:LOCAL_WORKLOAD ip_pool_type:VXLAN dst:"172.16.98.204/32" dst_node_name:"node3.tpurchas.gmail.com.beta.tailscale.net" dst_node_ip:"100.91.105.84" nat_outgoing:true local_workload:true | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 520: Value set to 'none', replacing with zero-value: "". | |
... dropped 13 logs ... | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for LogSeverityFile: (from config file) | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 503: Parsing value for LogSeveritySys: None (from config file) | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 520: Value set to 'none', replacing with zero-value: "". | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for LogSeveritySys: (from config file) | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 503: Parsing value for LogSeverityScreen: Debug (from datastore (per-host)) | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for LogSeverityScreen: DEBUG (from datastore (per-host)) | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 503: Parsing value for IPv4VXLANTunnelAddr: 172.16.98.192 (from datastore (per-host)) | |
2021-12-07 00:26:11.594 [INFO][63] felix/config_params.go 539: Parsed value for IPv4VXLANTunnelAddr: 172.16.98.192 (from datastore (per-host)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for ClusterType: k8s,bgp,kubeadm,kdd (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for ClusterType: k8s,bgp,kubeadm,kdd (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for CalicoVersion: v3.21.1 (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for CalicoVersion: v3.21.1 (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for LogSeverityScreen: Info (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for LogSeverityScreen: INFO (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 542: Skipping config value for LogSeverityScreen from datastore (global); already have a value from datastore (per-host) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for IpInIpEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for IpInIpEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for VXLANEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for VXLANEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for ReportingIntervalSecs: 0 (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for ReportingIntervalSecs: 0s (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for ClusterGUID: 96a762c646134e919aef229e6713a6c9 (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for ClusterGUID: 96a762c646134e919aef229e6713a6c9 (from datastore (global)) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 396: Merging in config from datastore (per-host): map[IPv4VXLANTunnelAddr:172.16.98.192 LogSeverityScreen:Debug] | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 503: Parsing value for HealthEnabled: true (from environment variable) | |
2021-12-07 00:26:11.595 [INFO][63] felix/config_params.go 539: Parsed value for HealthEnabled: true (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for FelixHostname: node3.tpurchas.gmail.com.beta.tailscale.net (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for FelixHostname: node3.tpurchas.gmail.com.beta.tailscale.net (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for DefaultEndpointToHostAction: ACCEPT (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for DefaultEndpointToHostAction: ACCEPT (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for IpInIpMtu: 1210 (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for IpInIpMtu: 1210 (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for WireguardMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for WireguardMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for DatastoreType: kubernetes (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for DatastoreType: kubernetes (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for Ipv6Support: false (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for Ipv6Support: false (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for VXLANMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for VXLANMTU: 1210 (from environment variable) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for LogSeveritySys: None (from config file) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 520: Value set to 'none', replacing with zero-value: "". | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for LogSeveritySys: (from config file) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for MetadataAddr: None (from config file) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 520: Value set to 'none', replacing with zero-value: "". | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for MetadataAddr: (from config file) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for LogFilePath: None (from config file) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 520: Value set to 'none', replacing with zero-value: "". | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 539: Parsed value for LogFilePath: (from config file) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 503: Parsing value for LogSeverityFile: None (from config file) | |
2021-12-07 00:26:11.596 [INFO][63] felix/config_params.go 520: Value set to 'none', replacing with zero-value: "". | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for LogSeverityFile: (from config file) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for LogSeverityScreen: Debug (from datastore (per-host)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for LogSeverityScreen: DEBUG (from datastore (per-host)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for IPv4VXLANTunnelAddr: 172.16.98.192 (from datastore (per-host)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for IPv4VXLANTunnelAddr: 172.16.98.192 (from datastore (per-host)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for ReportingIntervalSecs: 0 (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for ReportingIntervalSecs: 0s (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for ClusterGUID: 96a762c646134e919aef229e6713a6c9 (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for ClusterGUID: 96a762c646134e919aef229e6713a6c9 (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for ClusterType: k8s,bgp,kubeadm,kdd (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for ClusterType: k8s,bgp,kubeadm,kdd (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for CalicoVersion: v3.21.1 (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for CalicoVersion: v3.21.1 (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for LogSeverityScreen: Info (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for LogSeverityScreen: INFO (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 542: Skipping config value for LogSeverityScreen from datastore (global); already have a value from datastore (per-host) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for IpInIpEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for IpInIpEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 503: Parsing value for VXLANEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.597 [INFO][63] felix/config_params.go 539: Parsed value for VXLANEnabled: true (from datastore (global)) | |
2021-12-07 00:26:11.598 [DEBUG][63] felix/event_sequencer.go 670: Done flushing IP address deltas | |
2021-12-07 00:26:11.598 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.598 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.598 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.598 [DEBUG][63] felix/daemon.go 555: Buffer: stats update received stats=calc.StatsUpdate{NumHosts:3, NumWorkloadEndpoints:10, NumHostEndpoints:0, NumPolicies:0, NumProfiles:50, NumALPPolicies:0} | |
2021-12-07 00:26:11.598 [DEBUG][63] felix/daemon.go 560: Buffer: stats update sent stats=calc.StatsUpdate{NumHosts:3, NumWorkloadEndpoints:10, NumHostEndpoints:0, NumPolicies:0, NumProfiles:50, NumALPPolicies:0} | |
2021-12-07 00:26:11.598 [DEBUG][63] felix/usagerep.go 108: Received stats update stats=calc.StatsUpdate{NumHosts:3, NumWorkloadEndpoints:10, NumHostEndpoints:0, NumPolicies:0, NumProfiles:50, NumALPPolicies:0} | |
2021-12-07 00:26:11.598 [INFO][63] felix/usagerep.go 91: Waiting before first check-in delay=5m0.344s | |
2021-12-07 00:26:11.599 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.599 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.599 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.599 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/event_sequencer.go 664: Done flushing IP set removes | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/event_sequencer.go 730: Done flushing Service Accounts | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/event_sequencer.go 804: Done flushing Namespaces | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/event_sequencer.go 881: Done flushing route deletes | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/event_sequencer.go 831: Done flushing VTEP removes | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/event_sequencer.go 840: Done flushing VTEP adds | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/event_sequencer.go 869: Done flushing route adds | |
2021-12-07 00:26:11.600 [INFO][63] felix/async_calc_graph.go 220: First flush after becoming in sync, sending InSync message. | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/async_calc_graph.go 231: Sending output event on channel(s) | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/async_calc_graph.go 251: Sent output event on channel(s) | |
2021-12-07 00:26:11.600 [INFO][63] felix/daemon.go 1107: Datastore now in sync. | |
2021-12-07 00:26:11.600 [INFO][63] felix/daemon.go 1109: Datastore in sync for first time, sending message to status reporter. | |
2021-12-07 00:26:11.600 [INFO][63] felix/int_dataplane.go 1506: Received *proto.WorkloadEndpointUpdate update from calculation graph msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-2l5ln" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali3879dac72fe" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.201/32" > | |
2021-12-07 00:26:11.600 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-2l5ln" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali3879dac72fe" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.201/32" > | |
2021-12-07 00:26:11.601 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-2l5ln" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali3879dac72fe" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.201/32" > | |
2021-12-07 00:26:11.601 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-2l5ln" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali3879dac72fe" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.201/32" > | |
2021-12-07 00:26:11.601 [INFO][63] felix/int_dataplane.go 1506: Received *proto.WorkloadEndpointUpdate update from calculation graph msg=id:<orchestrator_id:"k8s" workload_id:"default/hello-minikube-6ddfcc9757-sp9xc" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali380a5b9c304" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.202/32" > | |
2021-12-07 00:26:11.601 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hello-minikube-6ddfcc9757-sp9xc" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali380a5b9c304" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.202/32" > | |
2021-12-07 00:26:11.601 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hello-minikube-6ddfcc9757-sp9xc" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali380a5b9c304" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.202/32" > | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hello-minikube-6ddfcc9757-sp9xc" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali380a5b9c304" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.202/32" > | |
2021-12-07 00:26:11.605 [INFO][63] felix/int_dataplane.go 1506: Received *proto.WorkloadEndpointUpdate update from calculation graph msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-vzx9w" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali96535058867" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.204/32" > | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-vzx9w" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali96535058867" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.204/32" > | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-vzx9w" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali96535058867" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.204/32" > | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-vzx9w" endpoint_id:"eth0" > endpoint:<state:"active" name:"cali96535058867" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.204/32" > | |
2021-12-07 00:26:11.605 [INFO][63] felix/int_dataplane.go 1506: Received *proto.WorkloadEndpointUpdate update from calculation graph msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-6sw8n" endpoint_id:"eth0" > endpoint:<state:"active" name:"caliac313fa0db4" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.203/32" > | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/xdp_state.go 134: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-6sw8n" endpoint_id:"eth0" > endpoint:<state:"active" name:"caliac313fa0db4" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.203/32" > | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-6sw8n" endpoint_id:"eth0" > endpoint:<state:"active" name:"caliac313fa0db4" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.203/32" > | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-6sw8n" endpoint_id:"eth0" > endpoint:<state:"active" name:"caliac313fa0db4" profile_ids:"kns.default" profile_ids:"ksa.default.default" ipv4_nets:"172.16.98.203/32" > | |
2021-12-07 00:26:11.605 [INFO][63] felix/int_dataplane.go 1506: Received *proto.InSync update from calculation graph msg= | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/xdp_state.go 134: Received message msg= | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/endpoint_mgr.go 323: Received message msg= | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/wireguard_mgr.go 56: Received message msg= | |
2021-12-07 00:26:11.605 [INFO][63] felix/int_dataplane.go 1514: Datastore in sync, flushing the dataplane for the first time... timeSinceStart=312.554598ms | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/int_dataplane.go 1634: Applying dataplane updates | |
2021-12-07 00:26:11.605 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="lo" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="eth0" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="tailscale0" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="vxlan.calico" | |
2021-12-07 00:26:11.606 [INFO][63] felix/endpoint_mgr.go 366: Workload interface came up, marking for reconfiguration. ifaceName="cali3879dac72fe" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="cali3879dac72fe" | |
2021-12-07 00:26:11.606 [INFO][63] felix/endpoint_mgr.go 366: Workload interface came up, marking for reconfiguration. ifaceName="cali380a5b9c304" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="cali380a5b9c304" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="tunl0" | |
2021-12-07 00:26:11.606 [INFO][63] felix/endpoint_mgr.go 366: Workload interface came up, marking for reconfiguration. ifaceName="cali96535058867" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="cali96535058867" | |
2021-12-07 00:26:11.606 [INFO][63] felix/endpoint_mgr.go 366: Workload interface came up, marking for reconfiguration. ifaceName="caliac313fa0db4" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 427: Ignoring interface state change for unknown interface. ifaceName="caliac313fa0db4" | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/endpoint_mgr.go 383: Host endpoints updated, resolving them. | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.606 [DEBUG][63] felix/vxlan_mgr.go 330: VTEPs are dirty, collecting the allowed VXLAN source set | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 351: VXLAN manager sending L2 updates l2routes=[]routetable.L2Target{routetable.L2Target{IP:ip.V4Addr{0x64, 0x40, 0xe2, 0x4a}, VTEPMAC:net.HardwareAddr{0x66, 0x25, 0xfc, 0xe3, 0xf1, 0xb2}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}}, routetable.L2Target{IP:ip.V4Addr{0x64, 0x6e, 0x6e, 0x57}, VTEPMAC:net.HardwareAddr{0x66, 0x4d, 0x12, 0x81, 0x74, 0xcd}, GW:ip.V4Addr{0xac, 0x10, 0x38, 0x0}}} | |
2021-12-07 00:26:11.607 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="all-vxlan-net" setType="hash:net" | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 400: adding vxlan route to list for addition route=routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x38, 0x0}, prefix:0x1a}, GW:ip.V4Addr{0xac, 0x10, 0x38, 0x0}, DestMAC:net.HardwareAddr(nil)} | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 400: adding vxlan route to list for addition route=routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x83}, prefix:0x20}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)} | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 400: adding vxlan route to list for addition route=routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x85}, prefix:0x20}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)} | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 400: adding vxlan route to list for addition route=routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x86}, prefix:0x20}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)} | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 400: adding vxlan route to list for addition route=routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, prefix:0x1a}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)} | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 404: VXLAN manager sending VXLAN L3 updates vxlanroutes=[]routetable.Target{routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x38, 0x0}, prefix:0x1a}, GW:ip.V4Addr{0xac, 0x10, 0x38, 0x0}, DestMAC:net.HardwareAddr(nil)}, routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x83}, prefix:0x20}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)}, routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x85}, prefix:0x20}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)}, routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0x86}, prefix:0x20}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)}, routetable.Target{Type:"vxlan", CIDR:ip.V4CIDR{addr:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, prefix:0x1a}, GW:ip.V4Addr{0xac, 0x10, 0x75, 0xc0}, DestMAC:net.HardwareAddr(nil)}} | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.56.0/26 | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.117.131/32 | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.117.133/32 | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.117.134/32 | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.117.192/26 | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/vxlan_mgr.go 317: calculated blackholes [{blackhole 172.16.98.192/26 <nil> }] | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.98.192/26 | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/int_dataplane.go 1746: couldn't complete deferred work for manager, will try again later error=no encap route table not set, will defer adding routes manager="" | |
2021-12-07 00:26:11.607 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.608 [INFO][63] felix/endpoint_mgr.go 584: Updating per-endpoint chains. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointId:"eth0"} | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-tw-cali380a5b9c304" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-kns.default" | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-pri-kns.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-fw-cali380a5b9c304" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-kns.default" | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-pro-kns.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.608 [INFO][63] felix/endpoint_mgr.go 615: Updating endpoint routes. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointId:"eth0"} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/endpoint_mgr.go 650: Endpoint up, adding routes id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointId:"eth0"} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.98.202/32 | |
2021-12-07 00:26:11.608 [INFO][63] felix/endpoint_mgr.go 584: Updating per-endpoint chains. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-vzx9w", EndpointId:"eth0"} | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-tw-cali96535058867" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-kns.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-fw-cali96535058867" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-kns.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.608 [INFO][63] felix/endpoint_mgr.go 615: Updating endpoint routes. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-vzx9w", EndpointId:"eth0"} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/endpoint_mgr.go 650: Endpoint up, adding routes id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-vzx9w", EndpointId:"eth0"} | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.98.204/32 | |
2021-12-07 00:26:11.608 [INFO][63] felix/endpoint_mgr.go 584: Updating per-endpoint chains. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-6sw8n", EndpointId:"eth0"} | |
2021-12-07 00:26:11.608 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-tw-caliac313fa0db4" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-kns.default" | |
2021-12-07 00:26:11.608 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.609 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-fw-caliac313fa0db4" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-kns.default" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.609 [INFO][63] felix/endpoint_mgr.go 615: Updating endpoint routes. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-6sw8n", EndpointId:"eth0"} | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/endpoint_mgr.go 650: Endpoint up, adding routes id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-6sw8n", EndpointId:"eth0"} | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.98.203/32 | |
2021-12-07 00:26:11.609 [INFO][63] felix/endpoint_mgr.go 584: Updating per-endpoint chains. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-2l5ln", EndpointId:"eth0"} | |
2021-12-07 00:26:11.609 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-tw-cali3879dac72fe" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-kns.default" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.609 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-fw-cali3879dac72fe" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-kns.default" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.609 [INFO][63] felix/endpoint_mgr.go 615: Updating endpoint routes. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-2l5ln", EndpointId:"eth0"} | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/endpoint_mgr.go 650: Endpoint up, adding routes id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-2l5ln", EndpointId:"eth0"} | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/route_table.go 362: New target for CIDR: 172.16.98.201/32 | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 31: Rendering workload dispatch chains numEndpoints=4 | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 282: Rendering endpoint dispatch chains ifaceNames=[]string{"cali380a5b9c304", "cali96535058867", "caliac313fa0db4", "cali3879dac72fe"} | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 557: Calculated common prefix commonPrefix="cali" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 476: Considering prefix namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 486: Multiple interfaces with prefix, rendering child chain childChainName="cali-from-wl-dispatch-3" ifaceMatch="cali3+" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 500: Adding rule to child chain childChainName="cali-from-wl-dispatch-3" ifaceMatch="cali3+" ifaceName="cali380a5b9c304" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 500: Adding rule to child chain childChainName="cali-from-wl-dispatch-3" ifaceMatch="cali3+" ifaceName="cali3879dac72fe" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 512: Adding end rules at end of child chain childChainName="cali-from-wl-dispatch-3" ifaceMatch="cali3+" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 476: Considering prefix namesWithPrefix=[]string{"cali96535058867"} prefix="cali9" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 526: Adding rule to root chains ifaceName="cali96535058867" namesWithPrefix=[]string{"cali96535058867"} prefix="cali9" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 476: Considering prefix namesWithPrefix=[]string{"caliac313fa0db4"} prefix="calia" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 526: Adding rule to root chains ifaceName="caliac313fa0db4" namesWithPrefix=[]string{"caliac313fa0db4"} prefix="calia" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 476: Considering prefix namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 486: Multiple interfaces with prefix, rendering child chain childChainName="cali-to-wl-dispatch-3" ifaceMatch="cali3+" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 500: Adding rule to child chain childChainName="cali-to-wl-dispatch-3" ifaceMatch="cali3+" ifaceName="cali380a5b9c304" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 500: Adding rule to child chain childChainName="cali-to-wl-dispatch-3" ifaceMatch="cali3+" ifaceName="cali3879dac72fe" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 512: Adding end rules at end of child chain childChainName="cali-to-wl-dispatch-3" ifaceMatch="cali3+" namesWithPrefix=[]string{"cali380a5b9c304", "cali3879dac72fe"} prefix="cali3" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 476: Considering prefix namesWithPrefix=[]string{"cali96535058867"} prefix="cali9" | |
2021-12-07 00:26:11.609 [DEBUG][63] felix/dispatch.go 526: Adding rule to root chains ifaceName="cali96535058867" namesWithPrefix=[]string{"cali96535058867"} prefix="cali9" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/dispatch.go 476: Considering prefix namesWithPrefix=[]string{"caliac313fa0db4"} prefix="calia" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/dispatch.go 526: Adding rule to root chains ifaceName="caliac313fa0db4" namesWithPrefix=[]string{"caliac313fa0db4"} prefix="calia" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-from-wl-dispatch-3" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-fw-cali380a5b9c304" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-fw-cali380a5b9c304" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-fw-cali3879dac72fe" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-fw-cali3879dac72fe" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-from-wl-dispatch" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-from-wl-dispatch-3" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-from-wl-dispatch-3" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-fw-cali96535058867" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-fw-cali96535058867" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-fw-caliac313fa0db4" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-fw-caliac313fa0db4" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-to-wl-dispatch-3" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-tw-cali380a5b9c304" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-tw-cali380a5b9c304" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-tw-cali3879dac72fe" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-tw-cali3879dac72fe" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-to-wl-dispatch" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-to-wl-dispatch-3" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-to-wl-dispatch-3" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-tw-cali96535058867" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-tw-cali96535058867" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 577: Incref chain chainName="cali-tw-caliac313fa0db4" | |
2021-12-07 00:26:11.610 [INFO][63] felix/table.go 580: Chain became referenced, marking it for programming chainName="cali-tw-caliac313fa0db4" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.610 [WARNING][63] felix/endpoint_mgr.go 1175: Could not set accept_ra: <nil> ifaceName="cali3879dac72fe" | |
2021-12-07 00:26:11.610 [INFO][63] felix/endpoint_mgr.go 1179: Applying /proc/sys configuration to interface. ifaceName="cali3879dac72fe" | |
2021-12-07 00:26:11.610 [WARNING][63] felix/endpoint_mgr.go 1175: Could not set accept_ra: <nil> ifaceName="cali380a5b9c304" | |
2021-12-07 00:26:11.610 [INFO][63] felix/endpoint_mgr.go 1179: Applying /proc/sys configuration to interface. ifaceName="cali380a5b9c304" | |
2021-12-07 00:26:11.610 [WARNING][63] felix/endpoint_mgr.go 1175: Could not set accept_ra: <nil> ifaceName="cali96535058867" | |
2021-12-07 00:26:11.610 [INFO][63] felix/endpoint_mgr.go 1179: Applying /proc/sys configuration to interface. ifaceName="cali96535058867" | |
2021-12-07 00:26:11.610 [WARNING][63] felix/endpoint_mgr.go 1175: Could not set accept_ra: <nil> ifaceName="caliac313fa0db4" | |
2021-12-07 00:26:11.610 [INFO][63] felix/endpoint_mgr.go 1179: Applying /proc/sys configuration to interface. ifaceName="caliac313fa0db4" | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/endpoint_mgr.go 395: Host endpoints updated, resolving them. | |
2021-12-07 00:26:11.610 [DEBUG][63] felix/endpoint_mgr.go 1069: Rewrite raw dispatch chains? resolvedHostEpIds=map[string]proto.HostEndpointID{} | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 167: Rendering host dispatch chains numEndpoints=0 | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 282: Rendering endpoint dispatch chains ifaceNames=[]string{} | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 557: Calculated common prefix commonPrefix="" | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
2021-12-07 00:26:11.611 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-from-host-endpoint" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="raw" | |
2021-12-07 00:26:11.611 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-to-host-endpoint" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="raw" | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/endpoint_mgr.go 1086: Rewrite filter dispatch chains? resolvedHostEpIds=map[string]proto.HostEndpointID{} | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 167: Rendering host dispatch chains numEndpoints=0 | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 282: Rendering endpoint dispatch chains ifaceNames=[]string{} | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 557: Calculated common prefix commonPrefix="" | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 282: Rendering endpoint dispatch chains ifaceNames=[]string{} | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 557: Calculated common prefix commonPrefix="" | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
2021-12-07 00:26:11.611 [DEBUG][63] felix/dispatch.go 535: Adding end rules at end of root chain | |
... dropped 27 logs ... | |
2021-12-07 00:26:11.611 [INFO][63] felix/endpoint_mgr.go 477: Re-evaluated workload endpoint status adminUp=true failed=false known=true operUp=true status="up" workloadEndpointID=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-6sw8n", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [INFO][63] felix/status_combiner.go 58: Storing endpoint status update ipVersion=0x4 status="up" workload=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-6sw8n", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/endpoint_mgr.go 449: Re-evaluating workload endpoint status workloadEndpointID=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-2l5ln", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [INFO][63] felix/endpoint_mgr.go 477: Re-evaluated workload endpoint status adminUp=true failed=false known=true operUp=true status="up" workloadEndpointID=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-2l5ln", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [INFO][63] felix/status_combiner.go 58: Storing endpoint status update ipVersion=0x4 status="up" workload=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-2l5ln", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/endpoint_mgr.go 449: Re-evaluating workload endpoint status workloadEndpointID=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [INFO][63] felix/endpoint_mgr.go 477: Re-evaluated workload endpoint status adminUp=true failed=false known=true operUp=true status="up" workloadEndpointID=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [INFO][63] felix/status_combiner.go 58: Storing endpoint status update ipVersion=0x4 status="up" workload=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hello-minikube-6ddfcc9757-sp9xc", EndpointId:"eth0"} | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.613 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-fip-dnat" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="nat" | |
2021-12-07 00:26:11.613 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-fip-snat" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="nat" | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.613 [INFO][63] felix/masq_mgr.go 145: IPAM pools updated, refreshing iptables rule ipVersion=0x4 | |
2021-12-07 00:26:11.613 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-nat-outgoing" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="nat" | |
2021-12-07 00:26:11.613 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.614 [INFO][63] felix/ipip_mgr.go 221: All-hosts IP set out-of sync, refreshing it. | |
2021-12-07 00:26:11.614 [INFO][63] felix/ipsets.go 130: Queueing IP set for creation family="inet" setID="all-hosts-net" setType="hash:net" | |
2021-12-07 00:26:11.614 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.614 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.614 [INFO][63] felix/table.go 506: Queueing update of chain. chainName="cali-cidr-block" ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.614 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="chain update" table="filter" | |
2021-12-07 00:26:11.614 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.614 [DEBUG][63] felix/xdp_state.go 1037: Processing pending diff state. cs=&intdataplane.xdpSystemState{IfaceNameToData:map[string]intdataplane.xdpIfaceData{}, XDPEligiblePolicies:map[proto.PolicyID]intdataplane.xdpRules{}} family=4 | |
2021-12-07 00:26:11.614 [DEBUG][63] felix/xdp_state.go 1270: Finished processing pending diff state. bpfActions=intdataplane.xdpBPFActions{CreateMap:set.mapSet{}, RemoveMap:set.mapSet{}, AddToMap:map[string]map[string]uint32{}, RemoveFromMap:map[string]map[string]uint32{}, InstallXDP:set.mapSet{}, UninstallXDP:set.mapSet{}, MembersToDrop:map[string]map[string]uint32{}, MembersToAdd:map[string]map[string]uint32{}} family=4 newCS=&intdataplane.xdpSystemState{IfaceNameToData:map[string]intdataplane.xdpIfaceData{}, XDPEligiblePolicies:map[proto.PolicyID]intdataplane.xdpRules{}} | |
2021-12-07 00:26:11.614 [DEBUG][63] felix/xdp_state.go 202: Resyncing XDP state with dataplane. | |
2021-12-07 00:26:11.640 [DEBUG][63] felix/bpf.go 154: running: ip link add calico_tmp_A type veth peer name calico_tmp_B | |
2021-12-07 00:26:11.647 [DEBUG][63] felix/bpf.go 154: running: bpftool prog load /usr/lib/calico/bpf/filter.o /sys/fs/bpf/calico/xdp/prefilter_v1_calico_tmp_A type xdp | |
2021-12-07 00:26:11.662 [DEBUG][63] felix/bpf.go 1805: out: | |
2021-12-07 00:26:11.662 [DEBUG][63] felix/bpf.go 154: running: ip link set dev calico_tmp_A xdpgeneric pinned /sys/fs/bpf/calico/xdp/prefilter_v1_calico_tmp_A | |
2021-12-07 00:26:11.663 [DEBUG][63] felix/update_filter.go 183: FilterUpdates: examining updates for interface. ifaceIdx=136 | |
2021-12-07 00:26:11.663 [DEBUG][63] felix/update_filter.go 199: FilterUpdates: update not ready. update=ifacemonitor.timestampedUpd{ReadyAt:time.Time{wall:0xc063c868ed7b90d2, ext:635246713, loc:(*time.Location)(0x4a164c0)}, Update:netlink.LinkUpdate{IfInfomsg:nl.IfInfomsg{IfInfomsg:unix.IfInfomsg{Family:0x0, _:0x0, Type:0x1, Index:136, Flags:0x1002, Change:0xffffffff}}, Header:unix.NlMsghdr{Len:0x54c, Type:0x10, Flags:0x0, Seq:0x0, Pid:0x0}, Link:(*netlink.Veth)(0xc000bd69a0)}} | |
2021-12-07 00:26:11.663 [DEBUG][63] felix/update_filter.go 210: FilterUpdates: still updates for interface. ifaceIdx=136 num=1 | |
2021-12-07 00:26:11.663 [DEBUG][63] felix/update_filter.go 226: FilterUpdates: calculated delay. delay=99.858909ms | |
2021-12-07 00:26:11.663 [DEBUG][63] felix/update_filter.go 177: FilterUpdates: timer already set. | |
2021-12-07 00:26:11.663 [DEBUG][63] felix/update_filter.go 177: FilterUpdates: timer already set. | |
2021-12-07 00:26:11.663 [DEBUG][63] felix/update_filter.go 177: FilterUpdates: timer already set. | |
2021-12-07 00:26:11.665 [DEBUG][63] felix/bpf.go 987: out: | |
2021-12-07 00:26:11.665 [DEBUG][63] felix/bpf.go 154: running: bpftool --json --pretty prog show pinned /sys/fs/bpf/calico/xdp/prefilter_v1_calico_tmp_A | |
2021-12-07 00:26:11.666 [DEBUG][63] felix/bpf.go 154: running: ip link set dev calico_tmp_A xdpgeneric off | |
2021-12-07 00:26:11.667 [DEBUG][63] felix/bpf.go 154: running: ip link del calico_tmp_A | |
2021-12-07 00:26:11.669 [DEBUG][63] felix/update_filter.go 177: FilterUpdates: timer already set. | |
2021-12-07 00:26:11.669 [DEBUG][63] felix/update_filter.go 177: FilterUpdates: timer already set. | |
2021-12-07 00:26:11.677 [DEBUG][63] felix/health.go 148: GET /readiness | |
2021-12-07 00:26:11.677 [DEBUG][63] felix/health.go 182: Checking state of reporter reporter=&health.reporterState{name:"felix-startup", reports:health.HealthReport{Live:true, Ready:true}, timeout:0, latest:health.HealthReport{Live:true, Ready:true}, timestamp:time.Time{wall:0xc063c868d346a84c, ext:195571689, loc:(*time.Location)(0x4a164c0)}} | |
2021-12-07 00:26:11.677 [DEBUG][63] felix/health.go 182: Checking state of reporter reporter=&health.reporterState{name:"int_dataplane", reports:health.HealthReport{Live:true, Ready:true}, timeout:20000000000, latest:health.HealthReport{Live:true, Ready:false}, timestamp:time.Time{wall:0xc063c868e49f5e7d, ext:486598170, loc:(*time.Location)(0x4a164c0)}} | |
2021-12-07 00:26:11.677 [WARNING][63] felix/health.go 188: Reporter is not ready. name="int_dataplane" | |
2021-12-07 00:26:11.677 [DEBUG][63] felix/health.go 182: Checking state of reporter reporter=&health.reporterState{name:"async_calc_graph", reports:health.HealthReport{Live:true, Ready:true}, timeout:20000000000, latest:health.HealthReport{Live:true, Ready:true}, timestamp:time.Time{wall:0xc063c868e3602aab, ext:465678920, loc:(*time.Location)(0x4a164c0)}} | |
2021-12-07 00:26:11.677 [INFO][63] felix/health.go 196: Overall health status changed newStatus=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.677 [DEBUG][63] felix/health.go 199: Calculated health summary healthResult=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.677 [WARNING][63] felix/health.go 154: Health: not ready | |
2021-12-07 00:26:11.692 [DEBUG][63] felix/bpf.go 154: running: ip link show | |
2021-12-07 00:26:11.694 [DEBUG][63] felix/bpf.go 154: running: ip link show dev lo | |
2021-12-07 00:26:11.695 [DEBUG][63] felix/bpf.go 154: running: ip link show dev eth0 | |
2021-12-07 00:26:11.696 [DEBUG][63] felix/bpf.go 154: running: ip link show dev tailscale0 | |
2021-12-07 00:26:11.697 [DEBUG][63] felix/bpf.go 154: running: ip link show dev tunl0 | |
2021-12-07 00:26:11.698 [DEBUG][63] felix/bpf.go 154: running: ip link show dev vxlan.calico | |
2021-12-07 00:26:11.700 [DEBUG][63] felix/bpf.go 154: running: ip link show dev cali3879dac72fe | |
2021-12-07 00:26:11.701 [DEBUG][63] felix/bpf.go 154: running: ip link show dev cali96535058867 | |
2021-12-07 00:26:11.702 [DEBUG][63] felix/bpf.go 154: running: ip link show dev caliac313fa0db4 | |
2021-12-07 00:26:11.703 [DEBUG][63] felix/bpf.go 154: running: ip link show dev cali380a5b9c304 | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 466: Interfaces with XDP program installed. family=4 ifaces=[]string(nil) | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 481: Interfaces with BPF blacklist maps. family=4 ifaces=[]string(nil) | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 591: Finished XDP resync. family=4 resyncDuration=11.919475ms | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 1801: Processing BPF actions. family="ipv4" | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 1939: Finished processing BPF actions. family="ipv4" | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 962: Processing member updates. family=4 | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 1608: Getting member changes. family=4 oldMembers=map[string]set.Set{} | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/xdp_state.go 998: Updating ipsetIDsToMembers cache. family=4 | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.704 [INFO][63] felix/wireguard.go 1617: Trying to connect to linkClient | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/route_table.go 475: Check interfaces matching regex | |
2021-12-07 00:26:11.704 [INFO][63] felix/route_table.go 432: Trying to connect to netlink | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/wireguard.go 590: Wireguard is not enabled, skipping sync | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/wireguard.go 592: Wireguard is not in-sync - verifying wireguard configuration is removed | |
2021-12-07 00:26:11.704 [DEBUG][63] felix/route_table.go 475: Check interfaces matching regex | |
2021-12-07 00:26:11.705 [INFO][63] felix/route_table.go 432: Trying to connect to netlink | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 498: Resync: found calico-owned interface ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 936: Syncing interface L2 routes ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 938: Have updated targets. ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 525: Flag no OIF for full re-sync | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 601: Syncing interface routes ifaceName="*NoOIF*" ifaceRegex="^wireguard.cali$" ipVersion=0x4 tableIndex=1 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 1041: Programmed ARP entry=172.16.117.192 66:25:fc:e3:f1:b2 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 627: Reconcile against kernel programming ifaceName="*NoOIF*" ifaceRegex="^wireguard.cali$" ipVersion=0x4 tableIndex=1 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 1055: Programmed FDB entry=100.64.226.74 66:25:fc:e3:f1:b2 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 1041: Programmed ARP entry=172.16.56.0 66:4d:12:81:74:cd | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 554: Synchronised routes on interface ifaceName="*NoOIF*" ifaceRegex="^wireguard.cali$" ipVersion=0x4 tableIndex=1 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 1055: Programmed FDB entry=100.110.110.87 66:4d:12:81:74:cd | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 601: Syncing interface routes ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 525: Flag no OIF for full re-sync | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 627: Reconcile against kernel programming ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 601: Syncing interface routes ifaceName="*NoOIF*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.117.192/26 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 627: Reconcile against kernel programming ifaceName="*NoOIF*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.56.0/26 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.98.192/26 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.117.131/32 | |
2021-12-07 00:26:11.705 [INFO][63] felix/route_table.go 432: Trying to connect to netlink | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.117.133/32 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.117.134/32 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 851: Processing route: 254 0 172.16.98.192/26 ifaceName="*NoOIF*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.98.192/26 ifaceName="*NoOIF*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 851: Processing route: 254 7 172.16.56.0/26 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 554: Synchronised routes on interface ifaceName="*NoOIF*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.56.0/26 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 851: Processing route: 254 7 172.16.117.131/32 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 475: Check interfaces matching regex | |
2021-12-07 00:26:11.705 [INFO][63] felix/route_table.go 432: Trying to connect to netlink | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.117.131/32 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 851: Processing route: 254 7 172.16.117.133/32 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.117.133/32 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 851: Processing route: 254 7 172.16.117.134/32 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.117.134/32 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 851: Processing route: 254 7 172.16.117.192/26 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 498: Resync: found calico-owned interface ifaceName="cali3879dac72fe" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.117.192/26 ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 498: Resync: found calico-owned interface ifaceName="cali96535058867" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 554: Synchronised routes on interface ifaceName="vxlan.calico" ifaceRegex="^vxlan.calico$" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 498: Resync: found calico-owned interface ifaceName="caliac313fa0db4" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 498: Resync: found calico-owned interface ifaceName="cali380a5b9c304" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 601: Syncing interface routes ifaceName="cali3879dac72fe" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/ipsets.go 317: Resyncing ipsets with dataplane. family="inet" | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 627: Reconcile against kernel programming ifaceName="cali3879dac72fe" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.705 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.98.201/32 | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 851: Processing route: 254 130 172.16.98.201/32 ifaceName="cali3879dac72fe" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.98.201/32 ifaceName="cali3879dac72fe" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 554: Synchronised routes on interface ifaceName="cali3879dac72fe" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 601: Syncing interface routes ifaceName="cali96535058867" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 627: Reconcile against kernel programming ifaceName="cali96535058867" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.98.204/32 | |
2021-12-07 00:26:11.706 [INFO][63] felix/route_rule.go 176: Trying to connect to netlink | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 851: Processing route: 254 131 172.16.98.204/32 ifaceName="cali96535058867" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.706 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.98.204/32 ifaceName="cali96535058867" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 554: Synchronised routes on interface ifaceName="cali96535058867" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 601: Syncing interface routes ifaceName="caliac313fa0db4" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/wireguard.go 1429: Wireguard is disabled and does not exist ifaceName="wireguard.cali" | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 627: Reconcile against kernel programming ifaceName="caliac313fa0db4" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [INFO][63] felix/wireguard.go 570: Public key out of sync or updated ourPublicKey=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.98.203/32 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/daemon.go 948: New message from dataplane payload= | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/daemon.go 973: Finished handling message from front-end | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/daemon.go 1073: Wireguard status update from dataplane driver: | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 851: Processing route: 254 134 172.16.98.203/32 ifaceName="caliac313fa0db4" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.98.203/32 ifaceName="caliac313fa0db4" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/k8s.go 627: Performing 'Get' for Node(node3.tpurchas.gmail.com.beta.tailscale.net) | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 554: Synchronised routes on interface ifaceName="caliac313fa0db4" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/node.go 117: Received Get request on Node type | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 601: Syncing interface routes ifaceName="cali380a5b9c304" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 627: Reconcile against kernel programming ifaceName="cali380a5b9c304" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 737: Added or updated CIDR: 172.16.98.202/32 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 851: Processing route: 254 135 172.16.98.202/32 ifaceName="cali380a5b9c304" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 886: Route is correct dest=172.16.98.202/32 ifaceName="cali380a5b9c304" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/route_table.go 554: Synchronised routes on interface ifaceName="cali380a5b9c304" ifaceRegex="^cali.*" ipVersion=0x4 tableIndex=0 | |
2021-12-07 00:26:11.707 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 429: Parsing IP set. family="inet" setName="cali40this-host" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 442: Skipping IP set, either not ours or about to rewrite family="inet" setName="cali40this-host" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 429: Parsing IP set. family="inet" setName="cali40all-vxlan-net" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 442: Skipping IP set, either not ours or about to rewrite family="inet" setName="cali40all-vxlan-net" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 429: Parsing IP set. family="inet" setName="cali40all-hosts-net" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 442: Skipping IP set, either not ours or about to rewrite family="inet" setName="cali40all-hosts-net" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 429: Parsing IP set. family="inet" setName="cali40all-ipam-pools" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 442: Skipping IP set, either not ours or about to rewrite family="inet" setName="cali40all-ipam-pools" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 429: Parsing IP set. family="inet" setName="cali40masq-ipam-pools" | |
2021-12-07 00:26:11.708 [DEBUG][63] felix/ipsets.go 442: Skipping IP set, either not ours or about to rewrite family="inet" setName="cali40masq-ipam-pools" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 594: Whitelisting IP sets. ID="all-ipam-pools" family="inet" mainName="cali40all-ipam-pools" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 594: Whitelisting IP sets. ID="masq-ipam-pools" family="inet" mainName="cali40masq-ipam-pools" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 594: Whitelisting IP sets. ID="this-host" family="inet" mainName="cali40this-host" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 594: Whitelisting IP sets. ID="all-vxlan-net" family="inet" mainName="cali40all-vxlan-net" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 594: Whitelisting IP sets. ID="all-hosts-net" family="inet" mainName="cali40all-hosts-net" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 613: Skipping expected Calico IP set. family="inet" setName="cali40masq-ipam-pools" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 613: Skipping expected Calico IP set. family="inet" setName="cali40this-host" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 613: Skipping expected Calico IP set. family="inet" setName="cali40all-vxlan-net" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 613: Skipping expected Calico IP set. family="inet" setName="cali40all-hosts-net" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 613: Skipping expected Calico IP set. family="inet" setName="cali40all-ipam-pools" | |
2021-12-07 00:26:11.709 [DEBUG][63] felix/ipsets.go 369: Finished IPSets resync family="inet" numInconsistenciesFound=0 resyncDuration=3.501748ms | |
2021-12-07 00:26:11.710 [INFO][63] felix/ipsets.go 785: Doing full IP set rewrite family="inet" numMembersInPendingReplace=1 setID="all-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="create cali4t0 hash:net family inet maxelem 1048576\n" numMembersInPendingReplace=1 setID="all-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t0 172.16.0.0/16\n" numMembersInPendingReplace=1 setID="all-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="swap cali40all-ipam-pools cali4t0\n" numMembersInPendingReplace=1 setID="all-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="destroy cali4t0\n" numMembersInPendingReplace=1 setID="all-ipam-pools" | |
2021-12-07 00:26:11.710 [INFO][63] felix/ipsets.go 785: Doing full IP set rewrite family="inet" numMembersInPendingReplace=1 setID="masq-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="create cali4t1 hash:net family inet maxelem 1048576\n" numMembersInPendingReplace=1 setID="masq-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t1 172.16.0.0/16\n" numMembersInPendingReplace=1 setID="masq-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="swap cali40masq-ipam-pools cali4t1\n" numMembersInPendingReplace=1 setID="masq-ipam-pools" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="destroy cali4t1\n" numMembersInPendingReplace=1 setID="masq-ipam-pools" | |
2021-12-07 00:26:11.710 [INFO][63] felix/ipsets.go 785: Doing full IP set rewrite family="inet" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="create cali4t2 hash:ip family inet maxelem 1048576\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t2 127.0.0.0\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t2 127.0.0.1\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t2 103.175.234.131\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t2 100.91.105.84\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t2 172.16.98.192\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.710 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="swap cali40this-host cali4t2\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="destroy cali4t2\n" numMembersInPendingReplace=5 setID="this-host" | |
2021-12-07 00:26:11.711 [INFO][63] felix/ipsets.go 785: Doing full IP set rewrite family="inet" numMembersInPendingReplace=2 setID="all-vxlan-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="create cali4t3 hash:net family inet maxelem 1048576\n" numMembersInPendingReplace=2 setID="all-vxlan-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t3 100.64.226.74/32\n" numMembersInPendingReplace=2 setID="all-vxlan-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t3 100.110.110.87/32\n" numMembersInPendingReplace=2 setID="all-vxlan-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="swap cali40all-vxlan-net cali4t3\n" numMembersInPendingReplace=2 setID="all-vxlan-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="destroy cali4t3\n" numMembersInPendingReplace=2 setID="all-vxlan-net" | |
2021-12-07 00:26:11.711 [INFO][63] felix/ipsets.go 785: Doing full IP set rewrite family="inet" numMembersInPendingReplace=3 setID="all-hosts-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="create cali4t4 hash:net family inet maxelem 1048576\n" numMembersInPendingReplace=3 setID="all-hosts-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t4 100.64.226.74/32\n" numMembersInPendingReplace=3 setID="all-hosts-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t4 100.110.110.87/32\n" numMembersInPendingReplace=3 setID="all-hosts-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="add cali4t4 100.91.105.84/32\n" numMembersInPendingReplace=3 setID="all-hosts-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="swap cali40all-hosts-net cali4t4\n" numMembersInPendingReplace=3 setID="all-hosts-net" | |
2021-12-07 00:26:11.711 [DEBUG][63] felix/ipsets.go 799: Writing line to ipset restore family="inet" line="destroy cali4t4\n" numMembersInPendingReplace=3 setID="all-hosts-net" | |
2021-12-07 00:26:11.740 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.740 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="refresh timer" table="raw" | |
2021-12-07 00:26:11.740 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="refresh timer" table="mangle" | |
2021-12-07 00:26:11.740 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="refresh timer" table="nat" | |
2021-12-07 00:26:11.740 [DEBUG][63] felix/table.go 939: Would invalidate dataplane cache but it was already invalid. ipVersion=0x4 reason="refresh timer" table="filter" | |
2021-12-07 00:26:11.740 [DEBUG][63] felix/feature_detect.go 106: Refreshing detected iptables features | |
2021-12-07 00:26:11.742 [DEBUG][63] felix/feature_detect.go 166: Ran iptables --version rawVersion="iptables v1.8.4 (legacy)\n" | |
2021-12-07 00:26:11.742 [DEBUG][63] felix/feature_detect.go 179: Parsed iptables version version=1.8.4 | |
2021-12-07 00:26:11.742 [DEBUG][63] felix/lib.go 105: Raw kernel version rawVersion="Linux version 5.10.0-8-amd64 ([email protected]) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.46-4 (2021-08-03)\n" | |
2021-12-07 00:26:11.742 [DEBUG][63] felix/lib.go 113: Parsed kernel version version=5.10.0-8 | |
2021-12-07 00:26:11.742 [DEBUG][63] felix/table.go 602: Loading current iptables state and checking it is correct. ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.742 [DEBUG][63] felix/feature_detect.go 106: Refreshing detected iptables features | |
2021-12-07 00:26:11.742 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.743 [DEBUG][63] felix/feature_detect.go 166: Ran iptables --version rawVersion="iptables v1.8.4 (legacy)\n" | |
2021-12-07 00:26:11.743 [DEBUG][63] felix/feature_detect.go 179: Parsed iptables version version=1.8.4 | |
2021-12-07 00:26:11.743 [DEBUG][63] felix/lib.go 105: Raw kernel version rawVersion="Linux version 5.10.0-8-amd64 ([email protected]) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.46-4 (2021-08-03)\n" | |
2021-12-07 00:26:11.743 [DEBUG][63] felix/lib.go 113: Parsed kernel version version=5.10.0-8 | |
2021-12-07 00:26:11.743 [DEBUG][63] felix/table.go 602: Loading current iptables state and checking it is correct. ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.743 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.743 [DEBUG][63] felix/feature_detect.go 106: Refreshing detected iptables features | |
2021-12-07 00:26:11.745 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="raw" | |
2021-12-07 00:26:11.745 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="raw" | |
2021-12-07 00:26:11.745 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="*raw" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="*raw" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":PREROUTING ACCEPT [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="PREROUTING" ipVersion=0x4 line=":PREROUTING ACCEPT [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="OUTPUT" ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-to-host-endpoint - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-to-host-endpoint" ipVersion=0x4 line=":cali-to-host-endpoint - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-PREROUTING - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-PREROUTING" ipVersion=0x4 line=":cali-PREROUTING - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-OUTPUT - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-OUTPUT" ipVersion=0x4 line=":cali-OUTPUT - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-from-host-endpoint - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-from-host-endpoint" ipVersion=0x4 line=":cali-from-host-endpoint - [0:0]" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="6gwbT8clXdHdC1b1" ipVersion=0x4 line="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="tVnHkvAo15HuiPy0" ipVersion=0x4 line="-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:XFX5xbM8B9qR10JG\" -j MARK --set-xmark 0x0/0xf0000" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="XFX5xbM8B9qR10JG" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:XFX5xbM8B9qR10JG\" -j MARK --set-xmark 0x0/0xf0000" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -i cali+ -m comment --comment \"cali:EWMPb0zVROM-woQp\" -j MARK --set-xmark 0x40000/0x40000" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="EWMPb0zVROM-woQp" ipVersion=0x4 line="-A cali-PREROUTING -i cali+ -m comment --comment \"cali:EWMPb0zVROM-woQp\" -j MARK --set-xmark 0x40000/0x40000" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:mPIOOWmbH3iO0R90\" -m mark --mark 0x40000/0x40000 -m rpfilter --validmark --invert -j DROP" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="mPIOOWmbH3iO0R90" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:mPIOOWmbH3iO0R90\" -m mark --mark 0x40000/0x40000 -m rpfilter --validmark --invert -j DROP" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:8eOxmFpkWr0RjKXR\" -m mark --mark 0x0/0x40000 -j cali-from-host-endpoint" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="8eOxmFpkWr0RjKXR" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:8eOxmFpkWr0RjKXR\" -m mark --mark 0x0/0x40000 -j cali-from-host-endpoint" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:F-nExspj_POyei0v\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="F-nExspj_POyei0v" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:F-nExspj_POyei0v\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:njdnLwYeGqBJyMxW\" -j MARK --set-xmark 0x0/0xf0000" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="njdnLwYeGqBJyMxW" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:njdnLwYeGqBJyMxW\" -j MARK --set-xmark 0x0/0xf0000" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:rz86uTUcEZAfFsh7\" -j cali-to-host-endpoint" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="rz86uTUcEZAfFsh7" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:rz86uTUcEZAfFsh7\" -j cali-to-host-endpoint" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:pN0F5zD0b8yf9W1Z\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 893: Found hash in rule hash="pN0F5zD0b8yf9W1Z" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:pN0F5zD0b8yf9W1Z\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="COMMIT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="COMMIT" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="# Completed on Tue Dec 7 00:26:11 2021" table="raw" | |
2021-12-07 00:26:11.746 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="# Completed on Tue Dec 7 00:26:11 2021" table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 931: Read hashes from dataplane: map[string][]string{"OUTPUT":[]string{"tVnHkvAo15HuiPy0"}, "PREROUTING":[]string{"6gwbT8clXdHdC1b1"}, "cali-OUTPUT":[]string{"njdnLwYeGqBJyMxW", "rz86uTUcEZAfFsh7", "pN0F5zD0b8yf9W1Z"}, "cali-PREROUTING":[]string{"XFX5xbM8B9qR10JG", "EWMPb0zVROM-woQp", "mPIOOWmbH3iO0R90", "8eOxmFpkWr0RjKXR", "F-nExspj_POyei0v"}, "cali-from-host-endpoint":[]string{}, "cali-to-host-endpoint":[]string{}} ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 932: Read rules from dataplane: map[string][]string{"OUTPUT":[]string{"-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT"}, "PREROUTING":[]string{"-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING"}} ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 665: Scanning for unexpected iptables chains ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="PREROUTING" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="OUTPUT" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-to-host-endpoint" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-PREROUTING" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-OUTPUT" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-from-host-endpoint" ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/table.go 697: Finished loading iptables state ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.747 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="*mangle" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="*mangle" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-KUBELET-CANARY - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-KUBELET-CANARY" ipVersion=0x4 line=":KUBE-KUBELET-CANARY - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":PREROUTING ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="PREROUTING" ipVersion=0x4 line=":PREROUTING ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/feature_detect.go 166: Ran iptables --version rawVersion="iptables v1.8.4 (legacy)\n" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":INPUT ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/feature_detect.go 179: Parsed iptables version version=1.8.4 | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="INPUT" ipVersion=0x4 line=":INPUT ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/lib.go 105: Raw kernel version rawVersion="Linux version 5.10.0-8-amd64 ([email protected]) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.46-4 (2021-08-03)\n" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":FORWARD ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/lib.go 113: Parsed kernel version version=5.10.0-8 | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="FORWARD" ipVersion=0x4 line=":FORWARD ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 602: Loading current iptables state and checking it is correct. ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="OUTPUT" ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":POSTROUTING ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="POSTROUTING" ipVersion=0x4 line=":POSTROUTING ACCEPT [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-PROXY-CANARY - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-PROXY-CANARY" ipVersion=0x4 line=":KUBE-PROXY-CANARY - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-from-host-endpoint - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-from-host-endpoint" ipVersion=0x4 line=":cali-from-host-endpoint - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-to-host-endpoint - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-to-host-endpoint" ipVersion=0x4 line=":cali-to-host-endpoint - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/feature_detect.go 106: Refreshing detected iptables features | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-PREROUTING - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-PREROUTING" ipVersion=0x4 line=":cali-PREROUTING - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-POSTROUTING - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-POSTROUTING" ipVersion=0x4 line=":cali-POSTROUTING - [0:0]" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" table="mangle" | |
2021-12-07 00:26:11.748 [DEBUG][63] felix/table.go 893: Found hash in rule hash="6gwbT8clXdHdC1b1" ipVersion=0x4 line="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="O3lYWMrLQYEMJtB5" ipVersion=0x4 line="-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:6BJqBjBC7crtA-7-\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="6BJqBjBC7crtA-7-" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:6BJqBjBC7crtA-7-\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:KX7AGNd6rMcDUai6\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="KX7AGNd6rMcDUai6" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:KX7AGNd6rMcDUai6\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:wNH7KsA3ILKJBsY9\" -j cali-from-host-endpoint" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="wNH7KsA3ILKJBsY9" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:wNH7KsA3ILKJBsY9\" -j cali-from-host-endpoint" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:Cg96MgVuoPm7UMRo\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="Cg96MgVuoPm7UMRo" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:Cg96MgVuoPm7UMRo\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:NX-7roTexQ3fGRfU\" -m mark --mark 0x10000/0x10000 -j RETURN" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="NX-7roTexQ3fGRfU" ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:NX-7roTexQ3fGRfU\" -m mark --mark 0x10000/0x10000 -j RETURN" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:nnqPh8lh2VOogSzX\" -j MARK --set-xmark 0x0/0xf0000" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="nnqPh8lh2VOogSzX" ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:nnqPh8lh2VOogSzX\" -j MARK --set-xmark 0x0/0xf0000" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:nquN8Jw8Tz72pcBW\" -m conntrack --ctstate DNAT -j cali-to-host-endpoint" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="nquN8Jw8Tz72pcBW" ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:nquN8Jw8Tz72pcBW\" -m conntrack --ctstate DNAT -j cali-to-host-endpoint" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:jWrgvDQ0xEZHmta3\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j RETURN" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 893: Found hash in rule hash="jWrgvDQ0xEZHmta3" ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:jWrgvDQ0xEZHmta3\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j RETURN" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="COMMIT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="COMMIT" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="# Completed on Tue Dec 7 00:26:11 2021" table="mangle" | |
2021-12-07 00:26:11.749 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="# Completed on Tue Dec 7 00:26:11 2021" table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 931: Read hashes from dataplane: map[string][]string{"FORWARD":[]string{}, "INPUT":[]string{}, "KUBE-KUBELET-CANARY":[]string{}, "KUBE-PROXY-CANARY":[]string{}, "OUTPUT":[]string{}, "POSTROUTING":[]string{"O3lYWMrLQYEMJtB5"}, "PREROUTING":[]string{"6gwbT8clXdHdC1b1"}, "cali-POSTROUTING":[]string{"NX-7roTexQ3fGRfU", "nnqPh8lh2VOogSzX", "nquN8Jw8Tz72pcBW", "jWrgvDQ0xEZHmta3"}, "cali-PREROUTING":[]string{"6BJqBjBC7crtA-7-", "KX7AGNd6rMcDUai6", "wNH7KsA3ILKJBsY9", "Cg96MgVuoPm7UMRo"}, "cali-from-host-endpoint":[]string{}, "cali-to-host-endpoint":[]string{}} ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 932: Read rules from dataplane: map[string][]string{"POSTROUTING":[]string{"-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING"}, "PREROUTING":[]string{"-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING"}} ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 665: Scanning for unexpected iptables chains ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="PREROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="OUTPUT" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-POSTROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="INPUT" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="FORWARD" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="POSTROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-from-host-endpoint" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-to-host-endpoint" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-PREROUTING" ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/table.go 697: Finished loading iptables state ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.750 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.751 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="nat" | |
2021-12-07 00:26:11.751 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="nat" | |
2021-12-07 00:26:11.751 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="*nat" table="nat" | |
2021-12-07 00:26:11.751 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="*nat" table="nat" | |
2021-12-07 00:26:11.751 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":ts-postrouting - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="ts-postrouting" ipVersion=0x4 line=":ts-postrouting - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":POSTROUTING ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="POSTROUTING" ipVersion=0x4 line=":POSTROUTING ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-MARK-DROP - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-MARK-DROP" ipVersion=0x4 line=":KUBE-MARK-DROP - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-MARK-MASQ - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-MARK-MASQ" ipVersion=0x4 line=":KUBE-MARK-MASQ - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-POSTROUTING - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-POSTROUTING" ipVersion=0x4 line=":KUBE-POSTROUTING - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-KUBELET-CANARY - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-KUBELET-CANARY" ipVersion=0x4 line=":KUBE-KUBELET-CANARY - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":PREROUTING ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="PREROUTING" ipVersion=0x4 line=":PREROUTING ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":INPUT ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="INPUT" ipVersion=0x4 line=":INPUT ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="OUTPUT" ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-PROXY-CANARY - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-PROXY-CANARY" ipVersion=0x4 line=":KUBE-PROXY-CANARY - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SERVICES - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SERVICES" ipVersion=0x4 line=":KUBE-SERVICES - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-NODEPORTS - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-NODEPORTS" ipVersion=0x4 line=":KUBE-NODEPORTS - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-5PDW6RWLUIURNUGN - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-5PDW6RWLUIURNUGN" ipVersion=0x4 line=":KUBE-SEP-5PDW6RWLUIURNUGN - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SVC-Z6GDYMWE5TV2NNJN - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SVC-Z6GDYMWE5TV2NNJN" ipVersion=0x4 line=":KUBE-SVC-Z6GDYMWE5TV2NNJN - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-ANOK6XLR4NI3BVA6 - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-ANOK6XLR4NI3BVA6" ipVersion=0x4 line=":KUBE-SEP-ANOK6XLR4NI3BVA6 - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SVC-CEZPIJSAUFW5MYPQ - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SVC-CEZPIJSAUFW5MYPQ" ipVersion=0x4 line=":KUBE-SVC-CEZPIJSAUFW5MYPQ - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-VO6WBFOXZK72F3MS - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-VO6WBFOXZK72F3MS" ipVersion=0x4 line=":KUBE-SEP-VO6WBFOXZK72F3MS - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SVC-NPX46M4PTMTKRN6Y - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SVC-NPX46M4PTMTKRN6Y" ipVersion=0x4 line=":KUBE-SVC-NPX46M4PTMTKRN6Y - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-VS2VAMUJFU64R4TD - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-VS2VAMUJFU64R4TD" ipVersion=0x4 line=":KUBE-SEP-VS2VAMUJFU64R4TD - [0:0]" table="nat" | |
2021-12-07 00:26:11.752 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-PR4QUMNIVHIYNCCF - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-PR4QUMNIVHIYNCCF" ipVersion=0x4 line=":KUBE-SEP-PR4QUMNIVHIYNCCF - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SVC-TCOU7JCQXEZGVUNU - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SVC-TCOU7JCQXEZGVUNU" ipVersion=0x4 line=":KUBE-SVC-TCOU7JCQXEZGVUNU - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-3MTAHZI7XXDUHRZ2 - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-3MTAHZI7XXDUHRZ2" ipVersion=0x4 line=":KUBE-SEP-3MTAHZI7XXDUHRZ2 - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-TQ7D7CZQ6BXZ4KLJ - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-TQ7D7CZQ6BXZ4KLJ" ipVersion=0x4 line=":KUBE-SEP-TQ7D7CZQ6BXZ4KLJ - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SVC-ERIFXISQEP7F7OF4 - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SVC-ERIFXISQEP7F7OF4" ipVersion=0x4 line=":KUBE-SVC-ERIFXISQEP7F7OF4 - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-DMDL3HZEFUJQK5GE - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-DMDL3HZEFUJQK5GE" ipVersion=0x4 line=":KUBE-SEP-DMDL3HZEFUJQK5GE - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SEP-TW56RVGOAZFJLYSK - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SEP-TW56RVGOAZFJLYSK" ipVersion=0x4 line=":KUBE-SEP-TW56RVGOAZFJLYSK - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SVC-JD5MR3NA4I4DYORP - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SVC-JD5MR3NA4I4DYORP" ipVersion=0x4 line=":KUBE-SVC-JD5MR3NA4I4DYORP - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-fip-dnat - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-fip-dnat" ipVersion=0x4 line=":cali-fip-dnat - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-fip-snat - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-fip-snat" ipVersion=0x4 line=":cali-fip-snat - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-nat-outgoing - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-nat-outgoing" ipVersion=0x4 line=":cali-nat-outgoing - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-PREROUTING - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-PREROUTING" ipVersion=0x4 line=":cali-PREROUTING - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/feature_detect.go 166: Ran iptables --version rawVersion="iptables v1.8.4 (legacy)\n" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-POSTROUTING - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/feature_detect.go 179: Parsed iptables version version=1.8.4 | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-POSTROUTING" ipVersion=0x4 line=":cali-POSTROUTING - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-OUTPUT - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/lib.go 105: Raw kernel version rawVersion="Linux version 5.10.0-8-amd64 ([email protected]) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.46-4 (2021-08-03)\n" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-OUTPUT" ipVersion=0x4 line=":cali-OUTPUT - [0:0]" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/lib.go 113: Parsed kernel version version=5.10.0-8 | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-postrouting -m mark --mark 0x40000 -j MASQUERADE" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 602: Loading current iptables state and checking it is correct. ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 893: Found hash in rule hash="O3lYWMrLQYEMJtB5" ipVersion=0x4 line="-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A POSTROUTING -m comment --comment \"kubernetes postrouting rules\" -j KUBE-POSTROUTING" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A POSTROUTING -j ts-postrouting" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-MARK-DROP -j MARK --set-xmark 0x8000/0x8000" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-MARK-MASQ -j MARK --set-xmark 0x4000/0x4000" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="raw" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-POSTROUTING -m mark ! --mark 0x4000/0x4000 -j RETURN" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="raw" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-POSTROUTING -j MARK --set-xmark 0x4000/0x0" table="nat" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0xf0000 chain="cali-PREROUTING" hash="XFX5xbM8B9qR10JG" position=0 ruleFragment="-A cali-PREROUTING HASH --jump MARK --set-mark 0/0xf0000" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/rules.go 164: Hashed rule action=Set:0x40000 chain="cali-PREROUTING" hash="EWMPb0zVROM-woQp" position=1 ruleFragment="-A cali-PREROUTING HASH --in-interface cali+ --jump MARK --set-mark 0x40000/0x40000" | |
2021-12-07 00:26:11.753 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-POSTROUTING -m comment --comment \"kubernetes service traffic requiring SNAT\" -j MASQUERADE --random-fully" table="nat" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-PREROUTING" hash="mPIOOWmbH3iO0R90" position=2 ruleFragment="-A cali-PREROUTING HASH -m mark --mark 0x40000/0x40000 -m rpfilter --invert --validmark --jump DROP" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" table="nat" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-from-host-endpoint chain="cali-PREROUTING" hash="8eOxmFpkWr0RjKXR" position=3 ruleFragment="-A cali-PREROUTING HASH -m mark --mark 0/0x40000 --jump cali-from-host-endpoint" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 893: Found hash in rule hash="6gwbT8clXdHdC1b1" ipVersion=0x4 line="-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING" table="nat" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-PREROUTING" hash="F-nExspj_POyei0v" position=4 ruleFragment="-A cali-PREROUTING HASH -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A PREROUTING -m comment --comment \"kubernetes service portals\" -j KUBE-SERVICES" table="nat" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"XFX5xbM8B9qR10JG", "EWMPb0zVROM-woQp", "mPIOOWmbH3iO0R90", "8eOxmFpkWr0RjKXR", "F-nExspj_POyei0v"} ipVersion=0x4 previous=[]string{"XFX5xbM8B9qR10JG", "EWMPb0zVROM-woQp", "mPIOOWmbH3iO0R90", "8eOxmFpkWr0RjKXR", "F-nExspj_POyei0v"} table="raw" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT" table="nat" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 893: Found hash in rule hash="tVnHkvAo15HuiPy0" ipVersion=0x4 line="-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT" table="nat" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0xf0000 chain="cali-OUTPUT" hash="njdnLwYeGqBJyMxW" position=0 ruleFragment="-A cali-OUTPUT HASH --jump MARK --set-mark 0/0xf0000" | |
... dropped 4 logs ... | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"njdnLwYeGqBJyMxW", "rz86uTUcEZAfFsh7", "pN0F5zD0b8yf9W1Z"} ipVersion=0x4 previous=[]string{"njdnLwYeGqBJyMxW", "rz86uTUcEZAfFsh7", "pN0F5zD0b8yf9W1Z"} table="raw" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-PREROUTING chain="PREROUTING" hash="6gwbT8clXdHdC1b1" position=0 ruleFragment="-A PREROUTING HASH --jump cali-PREROUTING" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-OUTPUT chain="OUTPUT" hash="tVnHkvAo15HuiPy0" position=0 ruleFragment="-A OUTPUT HASH --jump cali-OUTPUT" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 1234: In nftables mode, restarting transaction between updates and deletions. ipVersion=0x4 table="raw" | |
2021-12-07 00:26:11.754 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SERVICES -d 10.96.0.10/32 -p udp -m comment --comment \"kube-system/kube-dns:dns cluster IP\" -m udp --dport 53 -j KUBE-SVC-TCOU7JCQXEZGVUNU" table="nat" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 1277: Writing to iptables ipVersion=0x4 iptablesInput="*raw\n:cali-from-host-endpoint - -\n:cali-to-host-endpoint - -\nCOMMIT\n" table="raw" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 1303: Using native iptables-restore xtables lock. probeIntervalMicros="50000" timeoutSecs="10" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SERVICES -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp cluster IP\" -m tcp --dport 53 -j KUBE-SVC-ERIFXISQEP7F7OF4" table="nat" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SERVICES -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:metrics cluster IP\" -m tcp --dport 9153 -j KUBE-SVC-JD5MR3NA4I4DYORP" table="nat" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SERVICES -d 10.96.176.188/32 -p tcp -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper cluster IP\" -m tcp --dport 8000 -j KUBE-SVC-Z6GDYMWE5TV2NNJN" table="nat" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SERVICES -d 10.105.55.115/32 -p tcp -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard cluster IP\" -m tcp --dport 443 -j KUBE-SVC-CEZPIJSAUFW5MYPQ" table="nat" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SERVICES -m comment --comment \"kubernetes service nodeports; NOTE: this must be the last rule in this chain\" -m addrtype --dst-type LOCAL -j KUBE-NODEPORTS" table="nat" | |
2021-12-07 00:26:11.755 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-5PDW6RWLUIURNUGN -s 172.16.117.131/32 -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-5PDW6RWLUIURNUGN -p tcp -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper\" -m tcp -j DNAT --to-destination 172.16.117.131:8000" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-Z6GDYMWE5TV2NNJN ! -s 172.16.0.0/16 -d 10.96.176.188/32 -p tcp -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper cluster IP\" -m tcp --dport 8000 -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-Z6GDYMWE5TV2NNJN -m comment --comment \"kubernetes-dashboard/dashboard-metrics-scraper\" -j KUBE-SEP-5PDW6RWLUIURNUGN" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-ANOK6XLR4NI3BVA6 -s 172.16.117.133/32 -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-ANOK6XLR4NI3BVA6 -p tcp -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard\" -m tcp -j DNAT --to-destination 172.16.117.133:8443" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-CEZPIJSAUFW5MYPQ ! -s 172.16.0.0/16 -d 10.105.55.115/32 -p tcp -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard cluster IP\" -m tcp --dport 443 -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-CEZPIJSAUFW5MYPQ -m comment --comment \"kubernetes-dashboard/kubernetes-dashboard\" -j KUBE-SEP-ANOK6XLR4NI3BVA6" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-VO6WBFOXZK72F3MS -s 100.64.226.74/32 -m comment --comment \"default/kubernetes:https\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-VO6WBFOXZK72F3MS -p tcp -m comment --comment \"default/kubernetes:https\" -m tcp -j DNAT --to-destination 100.64.226.74:6443" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-NPX46M4PTMTKRN6Y ! -s 172.16.0.0/16 -d 10.96.0.1/32 -p tcp -m comment --comment \"default/kubernetes:https cluster IP\" -m tcp --dport 443 -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.756 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-NPX46M4PTMTKRN6Y -m comment --comment \"default/kubernetes:https\" -j KUBE-SEP-VO6WBFOXZK72F3MS" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-VS2VAMUJFU64R4TD -s 172.16.117.196/32 -m comment --comment \"kube-system/kube-dns:dns\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-VS2VAMUJFU64R4TD -p udp -m comment --comment \"kube-system/kube-dns:dns\" -m udp -j DNAT --to-destination 172.16.117.196:53" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-PR4QUMNIVHIYNCCF -s 172.16.117.197/32 -m comment --comment \"kube-system/kube-dns:dns\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-PR4QUMNIVHIYNCCF -p udp -m comment --comment \"kube-system/kube-dns:dns\" -m udp -j DNAT --to-destination 172.16.117.197:53" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-TCOU7JCQXEZGVUNU ! -s 172.16.0.0/16 -d 10.96.0.10/32 -p udp -m comment --comment \"kube-system/kube-dns:dns cluster IP\" -m udp --dport 53 -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-TCOU7JCQXEZGVUNU -m comment --comment \"kube-system/kube-dns:dns\" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-VS2VAMUJFU64R4TD" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-TCOU7JCQXEZGVUNU -m comment --comment \"kube-system/kube-dns:dns\" -j KUBE-SEP-PR4QUMNIVHIYNCCF" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-3MTAHZI7XXDUHRZ2 -s 172.16.117.196/32 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-3MTAHZI7XXDUHRZ2 -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp\" -m tcp -j DNAT --to-destination 172.16.117.196:53" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-TQ7D7CZQ6BXZ4KLJ -s 172.16.117.197/32 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.757 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-TQ7D7CZQ6BXZ4KLJ -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp\" -m tcp -j DNAT --to-destination 172.16.117.197:53" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-ERIFXISQEP7F7OF4 ! -s 172.16.0.0/16 -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:dns-tcp cluster IP\" -m tcp --dport 53 -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-ERIFXISQEP7F7OF4 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-3MTAHZI7XXDUHRZ2" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-ERIFXISQEP7F7OF4 -m comment --comment \"kube-system/kube-dns:dns-tcp\" -j KUBE-SEP-TQ7D7CZQ6BXZ4KLJ" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-DMDL3HZEFUJQK5GE -s 172.16.117.196/32 -m comment --comment \"kube-system/kube-dns:metrics\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-DMDL3HZEFUJQK5GE -p tcp -m comment --comment \"kube-system/kube-dns:metrics\" -m tcp -j DNAT --to-destination 172.16.117.196:9153" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-TW56RVGOAZFJLYSK -s 172.16.117.197/32 -m comment --comment \"kube-system/kube-dns:metrics\" -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SEP-TW56RVGOAZFJLYSK -p tcp -m comment --comment \"kube-system/kube-dns:metrics\" -m tcp -j DNAT --to-destination 172.16.117.197:9153" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-JD5MR3NA4I4DYORP ! -s 172.16.0.0/16 -d 10.96.0.10/32 -p tcp -m comment --comment \"kube-system/kube-dns:metrics cluster IP\" -m tcp --dport 9153 -j KUBE-MARK-MASQ" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-JD5MR3NA4I4DYORP -m comment --comment \"kube-system/kube-dns:metrics\" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-DMDL3HZEFUJQK5GE" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A KUBE-SVC-JD5MR3NA4I4DYORP -m comment --comment \"kube-system/kube-dns:metrics\" -j KUBE-SEP-TW56RVGOAZFJLYSK" table="nat" | |
2021-12-07 00:26:11.758 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-nat-outgoing -m comment --comment \"cali:flqWnvo8yq4ULQLa\" -m set --match-set cali40masq-ipam-pools src -m set ! --match-set cali40all-ipam-pools dst -j MASQUERADE --random-fully" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 893: Found hash in rule hash="flqWnvo8yq4ULQLa" ipVersion=0x4 line="-A cali-nat-outgoing -m comment --comment \"cali:flqWnvo8yq4ULQLa\" -m set --match-set cali40masq-ipam-pools src -m set ! --match-set cali40all-ipam-pools dst -j MASQUERADE --random-fully" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:r6XmIziWUJsdOK6Z\" -j cali-fip-dnat" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 893: Found hash in rule hash="r6XmIziWUJsdOK6Z" ipVersion=0x4 line="-A cali-PREROUTING -m comment --comment \"cali:r6XmIziWUJsdOK6Z\" -j cali-fip-dnat" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:Z-c7XtVd2Bq7s_hA\" -j cali-fip-snat" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 893: Found hash in rule hash="Z-c7XtVd2Bq7s_hA" ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:Z-c7XtVd2Bq7s_hA\" -j cali-fip-snat" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:nYKhEzDlr11Jccal\" -j cali-nat-outgoing" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 893: Found hash in rule hash="nYKhEzDlr11Jccal" ipVersion=0x4 line="-A cali-POSTROUTING -m comment --comment \"cali:nYKhEzDlr11Jccal\" -j cali-nat-outgoing" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-POSTROUTING -o vxlan.calico -m comment --comment \"cali:e9dnSgSVNmIcpVhP\" -m addrtype ! --src-type LOCAL --limit-iface-out -m addrtype --src-type LOCAL -j MASQUERADE --random-fully" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 893: Found hash in rule hash="e9dnSgSVNmIcpVhP" ipVersion=0x4 line="-A cali-POSTROUTING -o vxlan.calico -m comment --comment \"cali:e9dnSgSVNmIcpVhP\" -m addrtype ! --src-type LOCAL --limit-iface-out -m addrtype --src-type LOCAL -j MASQUERADE --random-fully" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:GBTAv2p5CwevEyJm\" -j cali-fip-dnat" table="nat" | |
2021-12-07 00:26:11.759 [DEBUG][63] felix/table.go 893: Found hash in rule hash="GBTAv2p5CwevEyJm" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:GBTAv2p5CwevEyJm\" -j cali-fip-dnat" table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="COMMIT" table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="COMMIT" table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="# Completed on Tue Dec 7 00:26:11 2021" table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="# Completed on Tue Dec 7 00:26:11 2021" table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 931: Read hashes from dataplane: map[string][]string{"INPUT":[]string{}, "KUBE-KUBELET-CANARY":[]string{}, "KUBE-MARK-DROP":[]string{""}, "KUBE-MARK-MASQ":[]string{""}, "KUBE-NODEPORTS":[]string{}, "KUBE-POSTROUTING":[]string{"", "", ""}, "KUBE-PROXY-CANARY":[]string{}, "KUBE-SEP-3MTAHZI7XXDUHRZ2":[]string{"", ""}, "KUBE-SEP-5PDW6RWLUIURNUGN":[]string{"", ""}, "KUBE-SEP-ANOK6XLR4NI3BVA6":[]string{"", ""}, "KUBE-SEP-DMDL3HZEFUJQK5GE":[]string{"", ""}, "KUBE-SEP-PR4QUMNIVHIYNCCF":[]string{"", ""}, "KUBE-SEP-TQ7D7CZQ6BXZ4KLJ":[]string{"", ""}, "KUBE-SEP-TW56RVGOAZFJLYSK":[]string{"", ""}, "KUBE-SEP-VO6WBFOXZK72F3MS":[]string{"", ""}, "KUBE-SEP-VS2VAMUJFU64R4TD":[]string{"", ""}, "KUBE-SERVICES":[]string{"", "", "", "", "", "", ""}, "KUBE-SVC-CEZPIJSAUFW5MYPQ":[]string{"", ""}, "KUBE-SVC-ERIFXISQEP7F7OF4":[]string{"", "", ""}, "KUBE-SVC-JD5MR3NA4I4DYORP":[]string{"", "", ""}, "KUBE-SVC-NPX46M4PTMTKRN6Y":[]string{"", ""}, "KUBE-SVC-TCOU7JCQXEZGVUNU":[]string{"", "", ""}, "KUBE-SVC-Z6GDYMWE5TV2NNJN":[]string{"", ""}, "OUTPUT":[]string{"tVnHkvAo15HuiPy0", ""}, "POSTROUTING":[]string{"O3lYWMrLQYEMJtB5", "", ""}, "PREROUTING":[]string{"6gwbT8clXdHdC1b1", ""}, "cali-OUTPUT":[]string{"GBTAv2p5CwevEyJm"}, "cali-POSTROUTING":[]string{"Z-c7XtVd2Bq7s_hA", "nYKhEzDlr11Jccal", "e9dnSgSVNmIcpVhP"}, "cali-PREROUTING":[]string{"r6XmIziWUJsdOK6Z"}, "cali-fip-dnat":[]string{}, "cali-fip-snat":[]string{}, "cali-nat-outgoing":[]string{"flqWnvo8yq4ULQLa"}, "ts-postrouting":[]string{""}} ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 932: Read rules from dataplane: map[string][]string{"OUTPUT":[]string{"-A OUTPUT -m comment --comment \"cali:tVnHkvAo15HuiPy0\" -j cali-OUTPUT", "-"}, "POSTROUTING":[]string{"-A POSTROUTING -m comment --comment \"cali:O3lYWMrLQYEMJtB5\" -j cali-POSTROUTING", "-", "-"}, "PREROUTING":[]string{"-A PREROUTING -m comment --comment \"cali:6gwbT8clXdHdC1b1\" -j cali-PREROUTING", "-"}} ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 665: Scanning for unexpected iptables chains ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="OUTPUT" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-OUTPUT" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="INPUT" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="POSTROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-fip-snat" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-nat-outgoing" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-fip-dnat" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="PREROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.760 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-POSTROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-PREROUTING" ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 697: Finished loading iptables state ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/rules.go 164: Hashed rule action=Masq chain="cali-nat-outgoing" hash="flqWnvo8yq4ULQLa" position=0 ruleFragment="-A cali-nat-outgoing HASH -m set --match-set cali40masq-ipam-pools src -m set ! --match-set cali40all-ipam-pools dst --jump MASQUERADE --random-fully" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"flqWnvo8yq4ULQLa"} ipVersion=0x4 previous=[]string{"flqWnvo8yq4ULQLa"} table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-fip-dnat chain="cali-PREROUTING" hash="r6XmIziWUJsdOK6Z" position=0 ruleFragment="-A cali-PREROUTING HASH --jump cali-fip-dnat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"r6XmIziWUJsdOK6Z"} ipVersion=0x4 previous=[]string{"r6XmIziWUJsdOK6Z"} table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-fip-snat chain="cali-POSTROUTING" hash="Z-c7XtVd2Bq7s_hA" position=0 ruleFragment="-A cali-POSTROUTING HASH --jump cali-fip-snat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-nat-outgoing chain="cali-POSTROUTING" hash="nYKhEzDlr11Jccal" position=1 ruleFragment="-A cali-POSTROUTING HASH --jump cali-nat-outgoing" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/rules.go 164: Hashed rule action=Masq chain="cali-POSTROUTING" hash="e9dnSgSVNmIcpVhP" position=2 ruleFragment="-A cali-POSTROUTING HASH --out-interface vxlan.calico -m addrtype ! --src-type LOCAL --limit-iface-out -m addrtype --src-type LOCAL --jump MASQUERADE --random-fully" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"Z-c7XtVd2Bq7s_hA", "nYKhEzDlr11Jccal", "e9dnSgSVNmIcpVhP"} ipVersion=0x4 previous=[]string{"Z-c7XtVd2Bq7s_hA", "nYKhEzDlr11Jccal", "e9dnSgSVNmIcpVhP"} table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-fip-dnat chain="cali-OUTPUT" hash="GBTAv2p5CwevEyJm" position=0 ruleFragment="-A cali-OUTPUT HASH --jump cali-fip-dnat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"GBTAv2p5CwevEyJm"} ipVersion=0x4 previous=[]string{"GBTAv2p5CwevEyJm"} table="nat" | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.761 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="nat" | |
2021-12-07 00:26:11.762 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-PREROUTING chain="PREROUTING" hash="6gwbT8clXdHdC1b1" position=0 ruleFragment="-A PREROUTING HASH --jump cali-PREROUTING" | |
2021-12-07 00:26:11.762 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-OUTPUT chain="OUTPUT" hash="tVnHkvAo15HuiPy0" position=0 ruleFragment="-A OUTPUT HASH --jump cali-OUTPUT" | |
2021-12-07 00:26:11.762 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-POSTROUTING chain="POSTROUTING" hash="O3lYWMrLQYEMJtB5" position=0 ruleFragment="-A POSTROUTING HASH --jump cali-POSTROUTING" | |
2021-12-07 00:26:11.762 [DEBUG][63] felix/table.go 1234: In nftables mode, restarting transaction between updates and deletions. ipVersion=0x4 table="nat" | |
2021-12-07 00:26:11.762 [DEBUG][63] felix/table.go 1277: Writing to iptables ipVersion=0x4 iptablesInput="*nat\n:cali-fip-snat - -\n:cali-fip-dnat - -\nCOMMIT\n" table="nat" | |
2021-12-07 00:26:11.762 [DEBUG][63] felix/table.go 1303: Using native iptables-restore xtables lock. probeIntervalMicros="50000" timeoutSecs="10" | |
2021-12-07 00:26:11.770 [DEBUG][63] felix/update_filter.go 170: FilterUpdates: timer popped. | |
2021-12-07 00:26:11.770 [DEBUG][63] felix/update_filter.go 183: FilterUpdates: examining updates for interface. ifaceIdx=137 | |
2021-12-07 00:26:11.770 [DEBUG][63] felix/update_filter.go 189: FilterUpdates: update ready to send. update=ifacemonitor.timestampedUpd{ReadyAt:time.Time{wall:0xc063c868ed7e40dc, ext:635422851, loc:(*time.Location)(0x4a164c0)}, Update:netlink.LinkUpdate{IfInfomsg:nl.IfInfomsg{IfInfomsg:unix.IfInfomsg{Family:0x0, _:0x0, Type:0x1, Index:137, Flags:0x1002, Change:0xffffffff}}, Header:unix.NlMsghdr{Len:0x54c, Type:0x10, Flags:0x0, Seq:0x0, Pid:0x0}, Link:(*netlink.Veth)(0xc000bd6b00)}} | |
2021-12-07 00:26:11.770 [DEBUG][63] felix/update_filter.go 189: FilterUpdates: update ready to send. update=ifacemonitor.timestampedUpd{ReadyAt:time.Time{wall:0xc063c868ed7ef228, ext:635468229, loc:(*time.Location)(0x4a164c0)}, Update:netlink.LinkUpdate{IfInfomsg:nl.IfInfomsg{IfInfomsg:unix.IfInfomsg{Family:0x0, _:0x0, Type:0x1, Index:137, Flags:0x1002, Change:0x0}}, Header:unix.NlMsghdr{Len:0x54c, Type:0x10, Flags:0x0, Seq:0x0, Pid:0x0}, Link:(*netlink.Veth)(0xc000bd6dc0)}} | |
2021-12-07 00:26:11.770 [DEBUG][63] felix/update_filter.go 189: FilterUpdates: update ready to send. update=ifacemonitor.timestampedUpd{ReadyAt:time.Time{wall:0xc063c868eddb0f7b, ext:641505048, loc:(*time.Location)(0x4a164c0)}, Update:netlink.LinkUpdate{IfInfomsg:nl.IfInfomsg{IfInfomsg:unix.IfInfomsg{Family:0x0, _:0x0, Type:0x1, Index:137, Flags:0x1002, Change:0xffffffff}}, Header:unix.NlMsghdr{Len:0x254, Type:0x11, Flags:0x0, Seq:0x0, Pid:0x0}, Link:(*netlink.Veth)(0xc000bd6f20)}} | |
... dropped 6 logs ... | |
2021-12-07 00:26:11.773 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="filter" | |
2021-12-07 00:26:11.773 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="# Generated by iptables-nft-save v1.8.4 on Tue Dec 7 00:26:11 2021" table="filter" | |
2021-12-07 00:26:11.773 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="*filter" table="filter" | |
2021-12-07 00:26:11.774 [DEBUG][63] felix/table.go 879: Not an append, skipping ipVersion=0x4 line="*filter" table="filter" | |
2021-12-07 00:26:11.774 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":ts-input - [0:0]" table="filter" | |
2021-12-07 00:26:11.774 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="ts-input" ipVersion=0x4 line=":ts-input - [0:0]" table="filter" | |
2021-12-07 00:26:11.774 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":ts-forward - [0:0]" table="filter" | |
2021-12-07 00:26:11.774 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="ts-forward" ipVersion=0x4 line=":ts-forward - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":INPUT ACCEPT [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="INPUT" ipVersion=0x4 line=":INPUT ACCEPT [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":FORWARD ACCEPT [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="FORWARD" ipVersion=0x4 line=":FORWARD ACCEPT [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-FIREWALL - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-FIREWALL" ipVersion=0x4 line=":KUBE-FIREWALL - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="OUTPUT" ipVersion=0x4 line=":OUTPUT ACCEPT [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-KUBELET-CANARY - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-KUBELET-CANARY" ipVersion=0x4 line=":KUBE-KUBELET-CANARY - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-PROXY-CANARY - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-PROXY-CANARY" ipVersion=0x4 line=":KUBE-PROXY-CANARY - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-EXTERNAL-SERVICES - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-EXTERNAL-SERVICES" ipVersion=0x4 line=":KUBE-EXTERNAL-SERVICES - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-NODEPORTS - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-NODEPORTS" ipVersion=0x4 line=":KUBE-NODEPORTS - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-SERVICES - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-SERVICES" ipVersion=0x4 line=":KUBE-SERVICES - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="mangle" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":KUBE-FORWARD - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="mangle" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="KUBE-FORWARD" ipVersion=0x4 line=":KUBE-FORWARD - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-PREROUTING" hash="6BJqBjBC7crtA-7-" position=0 ruleFragment="-A cali-PREROUTING HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-from-wl-dispatch - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-from-wl-dispatch" ipVersion=0x4 line=":cali-from-wl-dispatch - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-PREROUTING" hash="KX7AGNd6rMcDUai6" position=1 ruleFragment="-A cali-PREROUTING HASH -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-to-hep-forward - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-from-host-endpoint chain="cali-PREROUTING" hash="wNH7KsA3ILKJBsY9" position=2 ruleFragment="-A cali-PREROUTING HASH --jump cali-from-host-endpoint" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-to-hep-forward" ipVersion=0x4 line=":cali-to-hep-forward - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-PREROUTING" hash="Cg96MgVuoPm7UMRo" position=3 ruleFragment="-A cali-PREROUTING HASH -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-cidr-block - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"6BJqBjBC7crtA-7-", "KX7AGNd6rMcDUai6", "wNH7KsA3ILKJBsY9", "Cg96MgVuoPm7UMRo"} ipVersion=0x4 previous=[]string{"6BJqBjBC7crtA-7-", "KX7AGNd6rMcDUai6", "wNH7KsA3ILKJBsY9", "Cg96MgVuoPm7UMRo"} table="mangle" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-cidr-block" ipVersion=0x4 line=":cali-cidr-block - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-wl-to-host - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-wl-to-host" ipVersion=0x4 line=":cali-wl-to-host - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-POSTROUTING" hash="NX-7roTexQ3fGRfU" position=0 ruleFragment="-A cali-POSTROUTING HASH -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-from-host-endpoint - [0:0]" table="filter" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0xf0000 chain="cali-POSTROUTING" hash="nnqPh8lh2VOogSzX" position=1 ruleFragment="-A cali-POSTROUTING HASH --jump MARK --set-mark 0/0xf0000" | |
2021-12-07 00:26:11.775 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-from-host-endpoint" ipVersion=0x4 line=":cali-from-host-endpoint - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-to-host-endpoint chain="cali-POSTROUTING" hash="nquN8Jw8Tz72pcBW" position=2 ruleFragment="-A cali-POSTROUTING HASH -m conntrack --ctstate DNAT --jump cali-to-host-endpoint" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-FORWARD - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-POSTROUTING" hash="jWrgvDQ0xEZHmta3" position=3 ruleFragment="-A cali-POSTROUTING HASH -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-FORWARD" ipVersion=0x4 line=":cali-FORWARD - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"NX-7roTexQ3fGRfU", "nnqPh8lh2VOogSzX", "nquN8Jw8Tz72pcBW", "jWrgvDQ0xEZHmta3"} ipVersion=0x4 previous=[]string{"NX-7roTexQ3fGRfU", "nnqPh8lh2VOogSzX", "nquN8Jw8Tz72pcBW", "jWrgvDQ0xEZHmta3"} table="mangle" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-from-hep-forward - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-from-hep-forward" ipVersion=0x4 line=":cali-from-hep-forward - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-to-wl-dispatch - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-to-wl-dispatch" ipVersion=0x4 line=":cali-to-wl-dispatch - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-PREROUTING chain="PREROUTING" hash="6gwbT8clXdHdC1b1" position=0 ruleFragment="-A PREROUTING HASH --jump cali-PREROUTING" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-to-host-endpoint - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-POSTROUTING chain="POSTROUTING" hash="O3lYWMrLQYEMJtB5" position=0 ruleFragment="-A POSTROUTING HASH --jump cali-POSTROUTING" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-to-host-endpoint" ipVersion=0x4 line=":cali-to-host-endpoint - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 1234: In nftables mode, restarting transaction between updates and deletions. ipVersion=0x4 table="mangle" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-INPUT - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 1277: Writing to iptables ipVersion=0x4 iptablesInput="*mangle\n:cali-from-host-endpoint - -\n:cali-to-host-endpoint - -\nCOMMIT\n" table="mangle" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-INPUT" ipVersion=0x4 line=":cali-INPUT - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-OUTPUT - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 1303: Using native iptables-restore xtables lock. probeIntervalMicros="50000" timeoutSecs="10" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-OUTPUT" ipVersion=0x4 line=":cali-OUTPUT - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-pro-ksa.default.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-pro-ksa.default.default" ipVersion=0x4 line=":cali-pro-ksa.default.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-fw-cali380a5b9c304 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-fw-cali380a5b9c304" ipVersion=0x4 line=":cali-fw-cali380a5b9c304 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-tw-cali380a5b9c304 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-tw-cali380a5b9c304" ipVersion=0x4 line=":cali-tw-cali380a5b9c304 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-pri-kns.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-pri-kns.default" ipVersion=0x4 line=":cali-pri-kns.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-pri-ksa.default.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-pri-ksa.default.default" ipVersion=0x4 line=":cali-pri-ksa.default.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-pro-kns.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-pro-kns.default" ipVersion=0x4 line=":cali-pro-kns.default - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-tw-cali96535058867 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-tw-cali96535058867" ipVersion=0x4 line=":cali-tw-cali96535058867 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-fw-cali96535058867 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-fw-cali96535058867" ipVersion=0x4 line=":cali-fw-cali96535058867 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-fw-cali3879dac72fe - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-fw-cali3879dac72fe" ipVersion=0x4 line=":cali-fw-cali3879dac72fe - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-from-wl-dispatch-3 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-from-wl-dispatch-3" ipVersion=0x4 line=":cali-from-wl-dispatch-3 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-tw-cali3879dac72fe - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-tw-cali3879dac72fe" ipVersion=0x4 line=":cali-tw-cali3879dac72fe - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-to-wl-dispatch-3 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-to-wl-dispatch-3" ipVersion=0x4 line=":cali-to-wl-dispatch-3 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-tw-caliac313fa0db4 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-tw-caliac313fa0db4" ipVersion=0x4 line=":cali-tw-caliac313fa0db4 - [0:0]" table="filter" | |
2021-12-07 00:26:11.776 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line=":cali-fw-caliac313fa0db4 - [0:0]" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 868: Found forward-reference chainName="cali-fw-caliac313fa0db4" ipVersion=0x4 line=":cali-fw-caliac313fa0db4 - [0:0]" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-input -s 100.91.105.84/32 -i lo -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-input -s 100.115.92.0/23 ! -i tailscale0 -j RETURN" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-input -s 100.64.0.0/10 ! -i tailscale0 -j DROP" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-forward -i tailscale0 -j MARK --set-xmark 0x40000/0xffffffff" table="filter" | |
2021-12-07 00:26:11.773 [DEBUG][63] felix/iface_monitor.go 137: Link update update=netlink.LinkUpdate{IfInfomsg:nl.IfInfomsg{IfInfomsg:unix.IfInfomsg{Family:0x0, _:0x0, Type:0x1, Index:137, Flags:0x1002, Change:0xffffffff}}, Header:unix.NlMsghdr{Len:0x54c, Type:0x10, Flags:0x0, Seq:0x0, Pid:0x0}, Link:(*netlink.Veth)(0xc000bd6b00)} | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-forward -m mark --mark 0x40000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-forward -s 100.64.0.0/10 -o tailscale0 -j DROP" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/iface_monitor.go 255: storeAndNotifyLink called ifaceExists=true link=&netlink.Veth{LinkAttrs:netlink.LinkAttrs{Index:137, MTU:1500, TxQLen:1000, Name:"calico_tmp_A", HardwareAddr:net.HardwareAddr{0x46, 0x3, 0x39, 0x30, 0x3d, 0x1e}, Flags:0x12, RawFlags:0x1002, ParentIndex:136, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc000991b00), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc000bf2d38), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x2, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, PeerName:"", PeerHardwareAddr:net.HardwareAddr(nil), PeerNamespace:interface {}(nil)} | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A ts-forward -o tailscale0 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.777 [DEBUG][63] felix/iface_monitor.go 287: storeAndNotifyLinkInner called ifaceExists=true ifaceName="calico_tmp_A" link=&netlink.Veth{LinkAttrs:netlink.LinkAttrs{Index:137, MTU:1500, TxQLen:1000, Name:"calico_tmp_A", HardwareAddr:net.HardwareAddr{0x46, 0x3, 0x39, 0x30, 0x3d, 0x1e}, Flags:0x12, RawFlags:0x1002, ParentIndex:136, MasterIndex:0, Namespace:interface {}(nil), Alias:"", Statistics:(*netlink.LinkStatistics)(0xc000991b00), Promisc:0, Allmulti:0, Multi:1, Xdp:(*netlink.LinkXdp)(0xc000bf2d38), EncapType:"ether", Protinfo:(*netlink.Protinfo)(nil), OperState:0x2, PhysSwitchID:0, NetNsID:-1, NumTxQueues:1, NumRxQueues:1, GSOMaxSize:0x10000, GSOMaxSegs:0xffff, Vfs:[]netlink.VfInfo(nil), Group:0x0, Slave:netlink.LinkSlave(nil)}, PeerName:"", PeerHardwareAddr:net.HardwareAddr(nil), PeerNamespace:interface {}(nil)} | |
... dropped 87 logs ... | |
2021-12-07 00:26:11.778 [DEBUG][63] felix/table.go 893: Found hash in rule hash="A_sPAO0mcxbT9mOV" ipVersion=0x4 line="-A cali-FORWARD -m comment --comment \"cali:A_sPAO0mcxbT9mOV\" -m mark --mark 0x0/0x10000 -j cali-from-hep-forward" table="filter" | |
2021-12-07 00:26:11.779 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-FORWARD -i cali+ -m comment --comment \"cali:8ZoYfO5HKXWbB3pk\" -j cali-from-wl-dispatch" table="filter" | |
2021-12-07 00:26:11.779 [DEBUG][63] felix/table.go 893: Found hash in rule hash="8ZoYfO5HKXWbB3pk" ipVersion=0x4 line="-A cali-FORWARD -i cali+ -m comment --comment \"cali:8ZoYfO5HKXWbB3pk\" -j cali-from-wl-dispatch" table="filter" | |
2021-12-07 00:26:11.779 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-FORWARD -o cali+ -m comment --comment \"cali:jdEuaPBe14V2hutn\" -j cali-to-wl-dispatch" table="filter" | |
2021-12-07 00:26:11.779 [DEBUG][63] felix/table.go 893: Found hash in rule hash="jdEuaPBe14V2hutn" ipVersion=0x4 line="-A cali-FORWARD -o cali+ -m comment --comment \"cali:jdEuaPBe14V2hutn\" -j cali-to-wl-dispatch" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-FORWARD -m comment --comment \"cali:12bc6HljsMKsmfr-\" -j cali-to-hep-forward" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="12bc6HljsMKsmfr-" ipVersion=0x4 line="-A cali-FORWARD -m comment --comment \"cali:12bc6HljsMKsmfr-\" -j cali-to-hep-forward" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-FORWARD -m comment --comment \"cali:NOSxoaGx8OIstr1z\" -j cali-cidr-block" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="NOSxoaGx8OIstr1z" ipVersion=0x4 line="-A cali-FORWARD -m comment --comment \"cali:NOSxoaGx8OIstr1z\" -j cali-cidr-block" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-to-wl-dispatch -o cali3+ -m comment --comment \"cali:zaG4MAX3T6tQxdJK\" -g cali-to-wl-dispatch-3" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="zaG4MAX3T6tQxdJK" ipVersion=0x4 line="-A cali-to-wl-dispatch -o cali3+ -m comment --comment \"cali:zaG4MAX3T6tQxdJK\" -g cali-to-wl-dispatch-3" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-to-wl-dispatch -o cali96535058867 -m comment --comment \"cali:0zQEmQMO1u2UWbBS\" -g cali-tw-cali96535058867" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="0zQEmQMO1u2UWbBS" ipVersion=0x4 line="-A cali-to-wl-dispatch -o cali96535058867 -m comment --comment \"cali:0zQEmQMO1u2UWbBS\" -g cali-tw-cali96535058867" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-to-wl-dispatch -o caliac313fa0db4 -m comment --comment \"cali:xupTX44vjg-JmnxK\" -g cali-tw-caliac313fa0db4" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="xupTX44vjg-JmnxK" ipVersion=0x4 line="-A cali-to-wl-dispatch -o caliac313fa0db4 -m comment --comment \"cali:xupTX44vjg-JmnxK\" -g cali-tw-caliac313fa0db4" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-to-wl-dispatch -m comment --comment \"cali:SZ28KbAE4c38Mup4\" -m comment --comment \"Unknown interface\" -j DROP" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="SZ28KbAE4c38Mup4" ipVersion=0x4 line="-A cali-to-wl-dispatch -m comment --comment \"cali:SZ28KbAE4c38Mup4\" -m comment --comment \"Unknown interface\" -j DROP" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -p ipv4 -m comment --comment \"cali:PajejrV4aFdkZojI\" -m comment --comment \"Allow IPIP packets from Calico hosts\" -m set --match-set cali40all-hosts-net src -m addrtype --dst-type LOCAL -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="PajejrV4aFdkZojI" ipVersion=0x4 line="-A cali-INPUT -p ipv4 -m comment --comment \"cali:PajejrV4aFdkZojI\" -m comment --comment \"Allow IPIP packets from Calico hosts\" -m set --match-set cali40all-hosts-net src -m addrtype --dst-type LOCAL -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -p ipv4 -m comment --comment \"cali:_wjq-Yrma8Ly1Svo\" -m comment --comment \"Drop IPIP packets from non-Calico hosts\" -j DROP" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="_wjq-Yrma8Ly1Svo" ipVersion=0x4 line="-A cali-INPUT -p ipv4 -m comment --comment \"cali:_wjq-Yrma8Ly1Svo\" -m comment --comment \"Drop IPIP packets from non-Calico hosts\" -j DROP" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -p udp -m comment --comment \"cali:bEXIy9HGobub81S5\" -m comment --comment \"Allow VXLAN packets from whitelisted hosts\" -m multiport --dports 4789 -m set --match-set cali40all-vxlan-net src -m addrtype --dst-type LOCAL -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="bEXIy9HGobub81S5" ipVersion=0x4 line="-A cali-INPUT -p udp -m comment --comment \"cali:bEXIy9HGobub81S5\" -m comment --comment \"Allow VXLAN packets from whitelisted hosts\" -m multiport --dports 4789 -m set --match-set cali40all-vxlan-net src -m addrtype --dst-type LOCAL -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -p udp -m comment --comment \"cali:WgvDubTjwGCAFMhq\" -m comment --comment \"Drop VXLAN packets from non-whitelisted hosts\" -m multiport --dports 4789 -m addrtype --dst-type LOCAL -j DROP" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="WgvDubTjwGCAFMhq" ipVersion=0x4 line="-A cali-INPUT -p udp -m comment --comment \"cali:WgvDubTjwGCAFMhq\" -m comment --comment \"Drop VXLAN packets from non-whitelisted hosts\" -m multiport --dports 4789 -m addrtype --dst-type LOCAL -j DROP" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -i cali+ -m comment --comment \"cali:eJqDet8w3uw3n7v8\" -g cali-wl-to-host" table="filter" | |
2021-12-07 00:26:11.780 [DEBUG][63] felix/table.go 893: Found hash in rule hash="eJqDet8w3uw3n7v8" ipVersion=0x4 line="-A cali-INPUT -i cali+ -m comment --comment \"cali:eJqDet8w3uw3n7v8\" -g cali-wl-to-host" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:jAZk5tuaEgvaGKg2\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="jAZk5tuaEgvaGKg2" ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:jAZk5tuaEgvaGKg2\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:irH2n0qinmm5iBC0\" -j MARK --set-xmark 0x0/0xf0000" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="irH2n0qinmm5iBC0" ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:irH2n0qinmm5iBC0\" -j MARK --set-xmark 0x0/0xf0000" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:AjS7Pk-bcYrHA5OA\" -j cali-from-host-endpoint" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="AjS7Pk-bcYrHA5OA" ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:AjS7Pk-bcYrHA5OA\" -j cali-from-host-endpoint" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:3B0MCg-r2mG2kBHO\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="3B0MCg-r2mG2kBHO" ipVersion=0x4 line="-A cali-INPUT -m comment --comment \"cali:3B0MCg-r2mG2kBHO\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:Mq1_rAdXXH3YkrzW\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="Mq1_rAdXXH3YkrzW" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:Mq1_rAdXXH3YkrzW\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -o cali+ -m comment --comment \"cali:69FkRTJDvD5Vu6Vl\" -j RETURN" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="69FkRTJDvD5Vu6Vl" ipVersion=0x4 line="-A cali-OUTPUT -o cali+ -m comment --comment \"cali:69FkRTJDvD5Vu6Vl\" -j RETURN" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -p ipv4 -m comment --comment \"cali:AnEsmO6bDZbQntWW\" -m comment --comment \"Allow IPIP packets to other Calico hosts\" -m set --match-set cali40all-hosts-net dst -m addrtype --src-type LOCAL -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="AnEsmO6bDZbQntWW" ipVersion=0x4 line="-A cali-OUTPUT -p ipv4 -m comment --comment \"cali:AnEsmO6bDZbQntWW\" -m comment --comment \"Allow IPIP packets to other Calico hosts\" -m set --match-set cali40all-hosts-net dst -m addrtype --src-type LOCAL -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -p udp -m comment --comment \"cali:_ERUSSyRmRrgn7QU\" -m comment --comment \"Allow VXLAN packets to other whitelisted hosts\" -m multiport --dports 4789 -m addrtype --src-type LOCAL -m set --match-set cali40all-vxlan-net dst -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="_ERUSSyRmRrgn7QU" ipVersion=0x4 line="-A cali-OUTPUT -p udp -m comment --comment \"cali:_ERUSSyRmRrgn7QU\" -m comment --comment \"Allow VXLAN packets to other whitelisted hosts\" -m multiport --dports 4789 -m addrtype --src-type LOCAL -m set --match-set cali40all-vxlan-net dst -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:eCYBJT1-FpELHZDd\" -j MARK --set-xmark 0x0/0xf0000" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="eCYBJT1-FpELHZDd" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:eCYBJT1-FpELHZDd\" -j MARK --set-xmark 0x0/0xf0000" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:sIhcfHOWqix-aPJD\" -m conntrack ! --ctstate DNAT -j cali-to-host-endpoint" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="sIhcfHOWqix-aPJD" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:sIhcfHOWqix-aPJD\" -m conntrack ! --ctstate DNAT -j cali-to-host-endpoint" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:fjDrV50eZGEkqJOS\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="fjDrV50eZGEkqJOS" ipVersion=0x4 line="-A cali-OUTPUT -m comment --comment \"cali:fjDrV50eZGEkqJOS\" -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:to_U5MRNQBvUy4B9\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="to_U5MRNQBvUy4B9" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:to_U5MRNQBvUy4B9\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:aK0NOQuy7aAFnyrr\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="aK0NOQuy7aAFnyrr" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:aK0NOQuy7aAFnyrr\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:UhtbszqRYg1mEzvq\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="UhtbszqRYg1mEzvq" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:UhtbszqRYg1mEzvq\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -p udp -m comment --comment \"cali:7k1M2f3fgloNu7dQ\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="7k1M2f3fgloNu7dQ" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -p udp -m comment --comment \"cali:7k1M2f3fgloNu7dQ\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -p ipv4 -m comment --comment \"cali:ipHuIPxIJ7aHdsA8\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 893: Found hash in rule hash="ipHuIPxIJ7aHdsA8" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -p ipv4 -m comment --comment \"cali:ipHuIPxIJ7aHdsA8\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:uapGCMLMKh_glv6Z\" -j cali-pro-kns.default" table="filter" | |
2021-12-07 00:26:11.781 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 893: Found hash in rule hash="uapGCMLMKh_glv6Z" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:uapGCMLMKh_glv6Z\" -j cali-pro-kns.default" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:2y6zrwJ_yIuu_qmu\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 893: Found hash in rule hash="2y6zrwJ_yIuu_qmu" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:2y6zrwJ_yIuu_qmu\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:4dBp90X5BSyot8-k\" -j cali-pro-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 893: Found hash in rule hash="4dBp90X5BSyot8-k" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:4dBp90X5BSyot8-k\" -j cali-pro-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:u7ZhiOzK5dbOdwqu\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 893: Found hash in rule hash="u7ZhiOzK5dbOdwqu" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:u7ZhiOzK5dbOdwqu\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:-6p7DZWMHTXH-spx\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.782 [DEBUG][63] felix/table.go 893: Found hash in rule hash="-6p7DZWMHTXH-spx" ipVersion=0x4 line="-A cali-fw-cali380a5b9c304 -m comment --comment \"cali:-6p7DZWMHTXH-spx\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:KtHVR6oLwqTEmTGw\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="KtHVR6oLwqTEmTGw" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:KtHVR6oLwqTEmTGw\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:IABPGKWqiA8K1Jgv\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="IABPGKWqiA8K1Jgv" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:IABPGKWqiA8K1Jgv\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:SN7mBRuyhTD6GPFJ\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="SN7mBRuyhTD6GPFJ" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:SN7mBRuyhTD6GPFJ\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:iau3JIxYqu-Qn8pK\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="iau3JIxYqu-Qn8pK" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:iau3JIxYqu-Qn8pK\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:D5Vv4enoeIk4u9FM\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="D5Vv4enoeIk4u9FM" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:D5Vv4enoeIk4u9FM\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:I2DMECw7j757iYgz\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="I2DMECw7j757iYgz" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:I2DMECw7j757iYgz\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:7Q3T_hHPiBHjk_fH\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="7Q3T_hHPiBHjk_fH" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:7Q3T_hHPiBHjk_fH\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:1ajIY4MsDMHaCg90\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="1ajIY4MsDMHaCg90" ipVersion=0x4 line="-A cali-tw-cali380a5b9c304 -m comment --comment \"cali:1ajIY4MsDMHaCg90\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-pri-kns.default -m comment --comment \"cali:7Fnh7Pv3_98FtLW7\" -j MARK --set-xmark 0x10000/0x10000" table="filter" | |
2021-12-07 00:26:11.783 [DEBUG][63] felix/table.go 893: Found hash in rule hash="7Fnh7Pv3_98FtLW7" ipVersion=0x4 line="-A cali-pri-kns.default -m comment --comment \"cali:7Fnh7Pv3_98FtLW7\" -j MARK --set-xmark 0x10000/0x10000" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-pri-kns.default -m comment --comment \"cali:ZbV6bJXWSRefjK0u\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 893: Found hash in rule hash="ZbV6bJXWSRefjK0u" ipVersion=0x4 line="-A cali-pri-kns.default -m comment --comment \"cali:ZbV6bJXWSRefjK0u\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-pro-kns.default -m comment --comment \"cali:oLzzje5WExbgfib5\" -j MARK --set-xmark 0x10000/0x10000" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 893: Found hash in rule hash="oLzzje5WExbgfib5" ipVersion=0x4 line="-A cali-pro-kns.default -m comment --comment \"cali:oLzzje5WExbgfib5\" -j MARK --set-xmark 0x10000/0x10000" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-pro-kns.default -m comment --comment \"cali:4goskqvxh5xcGw3s\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 893: Found hash in rule hash="4goskqvxh5xcGw3s" ipVersion=0x4 line="-A cali-pro-kns.default -m comment --comment \"cali:4goskqvxh5xcGw3s\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:92gMBnyeX4blswt-\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 893: Found hash in rule hash="92gMBnyeX4blswt-" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:92gMBnyeX4blswt-\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.784 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:MEQe6VwyiVjJ7zOQ\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="MEQe6VwyiVjJ7zOQ" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:MEQe6VwyiVjJ7zOQ\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:6RMLYKiKJuWjVHc1\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="6RMLYKiKJuWjVHc1" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:6RMLYKiKJuWjVHc1\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:vMoxb9R22fb4pyO6\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="vMoxb9R22fb4pyO6" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:vMoxb9R22fb4pyO6\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:Rdo_H23VME-niwtb\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="Rdo_H23VME-niwtb" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:Rdo_H23VME-niwtb\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:Y3QkVEqR8kbuRYGQ\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="Y3QkVEqR8kbuRYGQ" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:Y3QkVEqR8kbuRYGQ\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:eVvCFgdoo8bZX3qa\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="eVvCFgdoo8bZX3qa" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:eVvCFgdoo8bZX3qa\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:llNznSFv3JOEywzH\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="llNznSFv3JOEywzH" ipVersion=0x4 line="-A cali-tw-cali96535058867 -m comment --comment \"cali:llNznSFv3JOEywzH\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:Fyoi4yV22Of9mnu8\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="Fyoi4yV22Of9mnu8" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:Fyoi4yV22Of9mnu8\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:5y1jArt4yAPKlMJD\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="5y1jArt4yAPKlMJD" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:5y1jArt4yAPKlMJD\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:dNaRpiI2rslUI3R7\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="dNaRpiI2rslUI3R7" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:dNaRpiI2rslUI3R7\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -p udp -m comment --comment \"cali:48WcKqGDEskiYB-G\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP" table="filter" | |
2021-12-07 00:26:11.785 [DEBUG][63] felix/table.go 893: Found hash in rule hash="48WcKqGDEskiYB-G" ipVersion=0x4 line="-A cali-fw-cali96535058867 -p udp -m comment --comment \"cali:48WcKqGDEskiYB-G\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -p ipv4 -m comment --comment \"cali:bUIiE3hlfIbKs0dW\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="bUIiE3hlfIbKs0dW" ipVersion=0x4 line="-A cali-fw-cali96535058867 -p ipv4 -m comment --comment \"cali:bUIiE3hlfIbKs0dW\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:H_NjIGtf-sOdBvlb\" -j cali-pro-kns.default" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="H_NjIGtf-sOdBvlb" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:H_NjIGtf-sOdBvlb\" -j cali-pro-kns.default" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:oMazAYWlFV9yCPu5\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="oMazAYWlFV9yCPu5" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:oMazAYWlFV9yCPu5\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:R4nhIYtMbJZ6qgn-\" -j cali-pro-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="R4nhIYtMbJZ6qgn-" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:R4nhIYtMbJZ6qgn-\" -j cali-pro-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:-euph1MnULvtPbAg\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="-euph1MnULvtPbAg" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:-euph1MnULvtPbAg\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:8ZzXifIxmAtohKeq\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="8ZzXifIxmAtohKeq" ipVersion=0x4 line="-A cali-fw-cali96535058867 -m comment --comment \"cali:8ZzXifIxmAtohKeq\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:TO8KrBS_umiWYfxP\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="TO8KrBS_umiWYfxP" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:TO8KrBS_umiWYfxP\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:DkpFMyO2CUKHAkc5\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="DkpFMyO2CUKHAkc5" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:DkpFMyO2CUKHAkc5\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:fkBo6tFmCuuzHCVo\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="fkBo6tFmCuuzHCVo" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:fkBo6tFmCuuzHCVo\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -p udp -m comment --comment \"cali:MqYzY3XoFul7pmkS\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="MqYzY3XoFul7pmkS" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -p udp -m comment --comment \"cali:MqYzY3XoFul7pmkS\" -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -m multiport --dports 4789 -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -p ipv4 -m comment --comment \"cali:JOjxsxnvCysL_hXk\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="JOjxsxnvCysL_hXk" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -p ipv4 -m comment --comment \"cali:JOjxsxnvCysL_hXk\" -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -j DROP" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:-FIwspAq1YkJutW1\" -j cali-pro-kns.default" table="filter" | |
2021-12-07 00:26:11.786 [DEBUG][63] felix/table.go 893: Found hash in rule hash="-FIwspAq1YkJutW1" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:-FIwspAq1YkJutW1\" -j cali-pro-kns.default" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:JXwvsUUiJo7rOlV9\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="JXwvsUUiJo7rOlV9" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:JXwvsUUiJo7rOlV9\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:vlQdcnjk40ZU0FfF\" -j cali-pro-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="vlQdcnjk40ZU0FfF" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:vlQdcnjk40ZU0FfF\" -j cali-pro-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:1XQGzrAc9ZMPhIAg\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="1XQGzrAc9ZMPhIAg" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:1XQGzrAc9ZMPhIAg\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:dxv-NeIr5ezwGz7c\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="dxv-NeIr5ezwGz7c" ipVersion=0x4 line="-A cali-fw-cali3879dac72fe -m comment --comment \"cali:dxv-NeIr5ezwGz7c\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-from-wl-dispatch-3 -i cali380a5b9c304 -m comment --comment \"cali:L4qzE_ySOcJdXqgK\" -g cali-fw-cali380a5b9c304" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="L4qzE_ySOcJdXqgK" ipVersion=0x4 line="-A cali-from-wl-dispatch-3 -i cali380a5b9c304 -m comment --comment \"cali:L4qzE_ySOcJdXqgK\" -g cali-fw-cali380a5b9c304" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-from-wl-dispatch-3 -i cali3879dac72fe -m comment --comment \"cali:XkRVdmM842r9y4R7\" -g cali-fw-cali3879dac72fe" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="XkRVdmM842r9y4R7" ipVersion=0x4 line="-A cali-from-wl-dispatch-3 -i cali3879dac72fe -m comment --comment \"cali:XkRVdmM842r9y4R7\" -g cali-fw-cali3879dac72fe" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-from-wl-dispatch-3 -m comment --comment \"cali:MbTDhndkkG6UhRUf\" -m comment --comment \"Unknown interface\" -j DROP" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="MbTDhndkkG6UhRUf" ipVersion=0x4 line="-A cali-from-wl-dispatch-3 -m comment --comment \"cali:MbTDhndkkG6UhRUf\" -m comment --comment \"Unknown interface\" -j DROP" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:5efI9PQwltLgTRZ1\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="5efI9PQwltLgTRZ1" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:5efI9PQwltLgTRZ1\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:MTaGKsFUi4C47F9h\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.787 [DEBUG][63] felix/table.go 893: Found hash in rule hash="MTaGKsFUi4C47F9h" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:MTaGKsFUi4C47F9h\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:W6ClaKJaLgdlWZ6Q\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="W6ClaKJaLgdlWZ6Q" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:W6ClaKJaLgdlWZ6Q\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:ptC23oyyiQx8dxtx\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="ptC23oyyiQx8dxtx" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:ptC23oyyiQx8dxtx\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:rIFTEeEgU33XvwKo\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="rIFTEeEgU33XvwKo" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:rIFTEeEgU33XvwKo\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:zRm24h2G-aFMoMK2\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="zRm24h2G-aFMoMK2" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:zRm24h2G-aFMoMK2\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:vyH0XLZyqagFHVmO\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="vyH0XLZyqagFHVmO" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:vyH0XLZyqagFHVmO\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:AQBMgeYcIEzPGedN\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="AQBMgeYcIEzPGedN" ipVersion=0x4 line="-A cali-tw-cali3879dac72fe -m comment --comment \"cali:AQBMgeYcIEzPGedN\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-to-wl-dispatch-3 -o cali380a5b9c304 -m comment --comment \"cali:Rn37b3cubtzKzfnd\" -g cali-tw-cali380a5b9c304" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="Rn37b3cubtzKzfnd" ipVersion=0x4 line="-A cali-to-wl-dispatch-3 -o cali380a5b9c304 -m comment --comment \"cali:Rn37b3cubtzKzfnd\" -g cali-tw-cali380a5b9c304" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-to-wl-dispatch-3 -o cali3879dac72fe -m comment --comment \"cali:VL7JiWBjlz1V5eAH\" -g cali-tw-cali3879dac72fe" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="VL7JiWBjlz1V5eAH" ipVersion=0x4 line="-A cali-to-wl-dispatch-3 -o cali3879dac72fe -m comment --comment \"cali:VL7JiWBjlz1V5eAH\" -g cali-tw-cali3879dac72fe" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-to-wl-dispatch-3 -m comment --comment \"cali:ETD-fogba0GcunQk\" -m comment --comment \"Unknown interface\" -j DROP" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="ETD-fogba0GcunQk" ipVersion=0x4 line="-A cali-to-wl-dispatch-3 -m comment --comment \"cali:ETD-fogba0GcunQk\" -m comment --comment \"Unknown interface\" -j DROP" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:EXxS2fVbqPA2WdA5\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 893: Found hash in rule hash="EXxS2fVbqPA2WdA5" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:EXxS2fVbqPA2WdA5\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.788 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:2FJIaFYxK-mfp0Ju\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 893: Found hash in rule hash="2FJIaFYxK-mfp0Ju" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:2FJIaFYxK-mfp0Ju\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:-oOBaU-zMAmpYGjx\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 893: Found hash in rule hash="-oOBaU-zMAmpYGjx" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:-oOBaU-zMAmpYGjx\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:NGn-m_7dX0F9SEbR\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 893: Found hash in rule hash="NGn-m_7dX0F9SEbR" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:NGn-m_7dX0F9SEbR\" -j cali-pri-kns.default" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:IUpjN0k279GyBTrx\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 893: Found hash in rule hash="IUpjN0k279GyBTrx" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:IUpjN0k279GyBTrx\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:sgd6W0jXko2WtEcK\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 893: Found hash in rule hash="sgd6W0jXko2WtEcK" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:sgd6W0jXko2WtEcK\" -j cali-pri-ksa.default.default" table="filter" | |
2021-12-07 00:26:11.789 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:ymhOdnBikNqH_xNK\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 893: Found hash in rule hash="ymhOdnBikNqH_xNK" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:ymhOdnBikNqH_xNK\" -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 -j RETURN" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:4rOLOy_dR0KcbmNW\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 893: Found hash in rule hash="4rOLOy_dR0KcbmNW" ipVersion=0x4 line="-A cali-tw-caliac313fa0db4 -m comment --comment \"cali:4rOLOy_dR0KcbmNW\" -m comment --comment \"Drop if no profiles matched\" -j DROP" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:2VGTOFjJFFE7beN4\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 893: Found hash in rule hash="2VGTOFjJFFE7beN4" ipVersion=0x4 line="-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:2VGTOFjJFFE7beN4\" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:3fvIzaPgF0gh48BI\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 893: Found hash in rule hash="3fvIzaPgF0gh48BI" ipVersion=0x4 line="-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:3fvIzaPgF0gh48BI\" -m conntrack --ctstate INVALID -j DROP" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 849: Parsing line ipVersion=0x4 line="-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:DCkm8PB93Qde9X7p\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
2021-12-07 00:26:11.790 [DEBUG][63] felix/table.go 893: Found hash in rule hash="DCkm8PB93Qde9X7p" ipVersion=0x4 line="-A cali-fw-caliac313fa0db4 -m comment --comment \"cali:DCkm8PB93Qde9X7p\" -j MARK --set-xmark 0x0/0x10000" table="filter" | |
... dropped 34 logs ... | |
2021-12-07 00:26:11.791 [DEBUG][63] felix/table.go 670: Skipping known-dirty chain chainName="cali-pri-ksa.default.default" ipVersion=0x4 table="filter" | |
... dropped 20 logs ... | |
2021-12-07 00:26:11.792 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-INPUT" hash="_wjq-Yrma8Ly1Svo" position=1 ruleFragment="-A cali-INPUT HASH -m comment --comment \"Drop IPIP packets from non-Calico hosts\" -p 4 --jump DROP" | |
2021-12-07 00:26:11.792 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-INPUT" hash="bEXIy9HGobub81S5" position=2 ruleFragment="-A cali-INPUT HASH -m comment --comment \"Allow VXLAN packets from whitelisted hosts\" -p 17 -m multiport --destination-ports 4789 -m set --match-set cali40all-vxlan-net src -m addrtype --dst-type LOCAL --jump ACCEPT" | |
2021-12-07 00:26:11.793 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-INPUT" hash="WgvDubTjwGCAFMhq" position=3 ruleFragment="-A cali-INPUT HASH -m comment --comment \"Drop VXLAN packets from non-whitelisted hosts\" -p 17 -m multiport --destination-ports 4789 -m addrtype --dst-type LOCAL --jump DROP" | |
2021-12-07 00:26:11.793 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-wl-to-host chain="cali-INPUT" hash="eJqDet8w3uw3n7v8" position=4 ruleFragment="-A cali-INPUT HASH --in-interface cali+ --goto cali-wl-to-host" | |
2021-12-07 00:26:11.793 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-INPUT" hash="jAZk5tuaEgvaGKg2" position=5 ruleFragment="-A cali-INPUT HASH -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0xf0000 chain="cali-INPUT" hash="irH2n0qinmm5iBC0" position=6 ruleFragment="-A cali-INPUT HASH --jump MARK --set-mark 0/0xf0000" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-from-host-endpoint chain="cali-INPUT" hash="AjS7Pk-bcYrHA5OA" position=7 ruleFragment="-A cali-INPUT HASH --jump cali-from-host-endpoint" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-INPUT" hash="3B0MCg-r2mG2kBHO" position=8 ruleFragment="-A cali-INPUT HASH -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"PajejrV4aFdkZojI", "_wjq-Yrma8Ly1Svo", "bEXIy9HGobub81S5", "WgvDubTjwGCAFMhq", "eJqDet8w3uw3n7v8", "jAZk5tuaEgvaGKg2", "irH2n0qinmm5iBC0", "AjS7Pk-bcYrHA5OA", "3B0MCg-r2mG2kBHO"} ipVersion=0x4 previous=[]string{"PajejrV4aFdkZojI", "_wjq-Yrma8Ly1Svo", "bEXIy9HGobub81S5", "WgvDubTjwGCAFMhq", "eJqDet8w3uw3n7v8", "jAZk5tuaEgvaGKg2", "irH2n0qinmm5iBC0", "AjS7Pk-bcYrHA5OA", "3B0MCg-r2mG2kBHO"} table="filter" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Set:0x10000 chain="cali-pro-kns.default" hash="oLzzje5WExbgfib5" position=0 ruleFragment="-A cali-pro-kns.default HASH --jump MARK --set-mark 0x10000/0x10000" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-pro-kns.default" hash="4goskqvxh5xcGw3s" position=1 ruleFragment="-A cali-pro-kns.default HASH -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"oLzzje5WExbgfib5", "4goskqvxh5xcGw3s"} ipVersion=0x4 previous=[]string{"oLzzje5WExbgfib5", "4goskqvxh5xcGw3s"} table="filter" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="filter" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-fw-cali380a5b9c304" hash="to_U5MRNQBvUy4B9" position=0 ruleFragment="-A cali-fw-cali380a5b9c304 HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali380a5b9c304" hash="aK0NOQuy7aAFnyrr" position=1 ruleFragment="-A cali-fw-cali380a5b9c304 HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-fw-cali380a5b9c304" hash="UhtbszqRYg1mEzvq" position=2 ruleFragment="-A cali-fw-cali380a5b9c304 HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali380a5b9c304" hash="7k1M2f3fgloNu7dQ" position=3 ruleFragment="-A cali-fw-cali380a5b9c304 HASH -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -p 17 -m multiport --destination-ports 4789 --jump DROP" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali380a5b9c304" hash="ipHuIPxIJ7aHdsA8" position=4 ruleFragment="-A cali-fw-cali380a5b9c304 HASH -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -p 4 --jump DROP" | |
2021-12-07 00:26:11.794 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-kns.default chain="cali-fw-cali380a5b9c304" hash="uapGCMLMKh_glv6Z" position=5 ruleFragment="-A cali-fw-cali380a5b9c304 HASH --jump cali-pro-kns.default" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-cali380a5b9c304" hash="2y6zrwJ_yIuu_qmu" position=6 ruleFragment="-A cali-fw-cali380a5b9c304 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-ksa.default.default chain="cali-fw-cali380a5b9c304" hash="4dBp90X5BSyot8-k" position=7 ruleFragment="-A cali-fw-cali380a5b9c304 HASH --jump cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-cali380a5b9c304" hash="u7ZhiOzK5dbOdwqu" position=8 ruleFragment="-A cali-fw-cali380a5b9c304 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali380a5b9c304" hash="-6p7DZWMHTXH-spx" position=9 ruleFragment="-A cali-fw-cali380a5b9c304 HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"to_U5MRNQBvUy4B9", "aK0NOQuy7aAFnyrr", "UhtbszqRYg1mEzvq", "7k1M2f3fgloNu7dQ", "ipHuIPxIJ7aHdsA8", "uapGCMLMKh_glv6Z", "2y6zrwJ_yIuu_qmu", "4dBp90X5BSyot8-k", "u7ZhiOzK5dbOdwqu", "-6p7DZWMHTXH-spx"} ipVersion=0x4 previous=[]string{"to_U5MRNQBvUy4B9", "aK0NOQuy7aAFnyrr", "UhtbszqRYg1mEzvq", "7k1M2f3fgloNu7dQ", "ipHuIPxIJ7aHdsA8", "uapGCMLMKh_glv6Z", "2y6zrwJ_yIuu_qmu", "4dBp90X5BSyot8-k", "u7ZhiOzK5dbOdwqu", "-6p7DZWMHTXH-spx"} table="filter" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-fw-cali96535058867" hash="Fyoi4yV22Of9mnu8" position=0 ruleFragment="-A cali-fw-cali96535058867 HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali96535058867" hash="5y1jArt4yAPKlMJD" position=1 ruleFragment="-A cali-fw-cali96535058867 HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-fw-cali96535058867" hash="dNaRpiI2rslUI3R7" position=2 ruleFragment="-A cali-fw-cali96535058867 HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali96535058867" hash="48WcKqGDEskiYB-G" position=3 ruleFragment="-A cali-fw-cali96535058867 HASH -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -p 17 -m multiport --destination-ports 4789 --jump DROP" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali96535058867" hash="bUIiE3hlfIbKs0dW" position=4 ruleFragment="-A cali-fw-cali96535058867 HASH -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -p 4 --jump DROP" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-kns.default chain="cali-fw-cali96535058867" hash="H_NjIGtf-sOdBvlb" position=5 ruleFragment="-A cali-fw-cali96535058867 HASH --jump cali-pro-kns.default" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-cali96535058867" hash="oMazAYWlFV9yCPu5" position=6 ruleFragment="-A cali-fw-cali96535058867 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-ksa.default.default chain="cali-fw-cali96535058867" hash="R4nhIYtMbJZ6qgn-" position=7 ruleFragment="-A cali-fw-cali96535058867 HASH --jump cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-cali96535058867" hash="-euph1MnULvtPbAg" position=8 ruleFragment="-A cali-fw-cali96535058867 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali96535058867" hash="8ZzXifIxmAtohKeq" position=9 ruleFragment="-A cali-fw-cali96535058867 HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"Fyoi4yV22Of9mnu8", "5y1jArt4yAPKlMJD", "dNaRpiI2rslUI3R7", "48WcKqGDEskiYB-G", "bUIiE3hlfIbKs0dW", "H_NjIGtf-sOdBvlb", "oMazAYWlFV9yCPu5", "R4nhIYtMbJZ6qgn-", "-euph1MnULvtPbAg", "8ZzXifIxmAtohKeq"} ipVersion=0x4 previous=[]string{"Fyoi4yV22Of9mnu8", "5y1jArt4yAPKlMJD", "dNaRpiI2rslUI3R7", "48WcKqGDEskiYB-G", "bUIiE3hlfIbKs0dW", "H_NjIGtf-sOdBvlb", "oMazAYWlFV9yCPu5", "R4nhIYtMbJZ6qgn-", "-euph1MnULvtPbAg", "8ZzXifIxmAtohKeq"} table="filter" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="filter" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0xe0000 chain="cali-FORWARD" hash="vjrMJCRpqwy5oRoX" position=0 ruleFragment="-A cali-FORWARD HASH --jump MARK --set-mark 0/0xe0000" | |
2021-12-07 00:26:11.795 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-from-hep-forward chain="cali-FORWARD" hash="A_sPAO0mcxbT9mOV" position=1 ruleFragment="-A cali-FORWARD HASH -m mark --mark 0/0x10000 --jump cali-from-hep-forward" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-from-wl-dispatch chain="cali-FORWARD" hash="8ZoYfO5HKXWbB3pk" position=2 ruleFragment="-A cali-FORWARD HASH --in-interface cali+ --jump cali-from-wl-dispatch" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-to-wl-dispatch chain="cali-FORWARD" hash="jdEuaPBe14V2hutn" position=3 ruleFragment="-A cali-FORWARD HASH --out-interface cali+ --jump cali-to-wl-dispatch" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-to-hep-forward chain="cali-FORWARD" hash="12bc6HljsMKsmfr-" position=4 ruleFragment="-A cali-FORWARD HASH --jump cali-to-hep-forward" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-cidr-block chain="cali-FORWARD" hash="NOSxoaGx8OIstr1z" position=5 ruleFragment="-A cali-FORWARD HASH --jump cali-cidr-block" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"vjrMJCRpqwy5oRoX", "A_sPAO0mcxbT9mOV", "8ZoYfO5HKXWbB3pk", "jdEuaPBe14V2hutn", "12bc6HljsMKsmfr-", "NOSxoaGx8OIstr1z"} ipVersion=0x4 previous=[]string{"vjrMJCRpqwy5oRoX", "A_sPAO0mcxbT9mOV", "8ZoYfO5HKXWbB3pk", "jdEuaPBe14V2hutn", "12bc6HljsMKsmfr-", "NOSxoaGx8OIstr1z"} table="filter" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-tw-cali380a5b9c304" hash="KtHVR6oLwqTEmTGw" position=0 ruleFragment="-A cali-tw-cali380a5b9c304 HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-cali380a5b9c304" hash="IABPGKWqiA8K1Jgv" position=1 ruleFragment="-A cali-tw-cali380a5b9c304 HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-tw-cali380a5b9c304" hash="SN7mBRuyhTD6GPFJ" position=2 ruleFragment="-A cali-tw-cali380a5b9c304 HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-kns.default chain="cali-tw-cali380a5b9c304" hash="iau3JIxYqu-Qn8pK" position=3 ruleFragment="-A cali-tw-cali380a5b9c304 HASH --jump cali-pri-kns.default" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-cali380a5b9c304" hash="D5Vv4enoeIk4u9FM" position=4 ruleFragment="-A cali-tw-cali380a5b9c304 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-ksa.default.default chain="cali-tw-cali380a5b9c304" hash="I2DMECw7j757iYgz" position=5 ruleFragment="-A cali-tw-cali380a5b9c304 HASH --jump cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-cali380a5b9c304" hash="7Q3T_hHPiBHjk_fH" position=6 ruleFragment="-A cali-tw-cali380a5b9c304 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-cali380a5b9c304" hash="1ajIY4MsDMHaCg90" position=7 ruleFragment="-A cali-tw-cali380a5b9c304 HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"KtHVR6oLwqTEmTGw", "IABPGKWqiA8K1Jgv", "SN7mBRuyhTD6GPFJ", "iau3JIxYqu-Qn8pK", "D5Vv4enoeIk4u9FM", "I2DMECw7j757iYgz", "7Q3T_hHPiBHjk_fH", "1ajIY4MsDMHaCg90"} ipVersion=0x4 previous=[]string{"KtHVR6oLwqTEmTGw", "IABPGKWqiA8K1Jgv", "SN7mBRuyhTD6GPFJ", "iau3JIxYqu-Qn8pK", "D5Vv4enoeIk4u9FM", "I2DMECw7j757iYgz", "7Q3T_hHPiBHjk_fH", "1ajIY4MsDMHaCg90"} table="filter" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-tw-cali3879dac72fe" hash="5efI9PQwltLgTRZ1" position=0 ruleFragment="-A cali-tw-cali3879dac72fe HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-cali3879dac72fe" hash="MTaGKsFUi4C47F9h" position=1 ruleFragment="-A cali-tw-cali3879dac72fe HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-tw-cali3879dac72fe" hash="W6ClaKJaLgdlWZ6Q" position=2 ruleFragment="-A cali-tw-cali3879dac72fe HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-kns.default chain="cali-tw-cali3879dac72fe" hash="ptC23oyyiQx8dxtx" position=3 ruleFragment="-A cali-tw-cali3879dac72fe HASH --jump cali-pri-kns.default" | |
2021-12-07 00:26:11.796 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-cali3879dac72fe" hash="rIFTEeEgU33XvwKo" position=4 ruleFragment="-A cali-tw-cali3879dac72fe HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-ksa.default.default chain="cali-tw-cali3879dac72fe" hash="zRm24h2G-aFMoMK2" position=5 ruleFragment="-A cali-tw-cali3879dac72fe HASH --jump cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-cali3879dac72fe" hash="vyH0XLZyqagFHVmO" position=6 ruleFragment="-A cali-tw-cali3879dac72fe HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-cali3879dac72fe" hash="AQBMgeYcIEzPGedN" position=7 ruleFragment="-A cali-tw-cali3879dac72fe HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"5efI9PQwltLgTRZ1", "MTaGKsFUi4C47F9h", "W6ClaKJaLgdlWZ6Q", "ptC23oyyiQx8dxtx", "rIFTEeEgU33XvwKo", "zRm24h2G-aFMoMK2", "vyH0XLZyqagFHVmO", "AQBMgeYcIEzPGedN"} ipVersion=0x4 previous=[]string{"5efI9PQwltLgTRZ1", "MTaGKsFUi4C47F9h", "W6ClaKJaLgdlWZ6Q", "ptC23oyyiQx8dxtx", "rIFTEeEgU33XvwKo", "zRm24h2G-aFMoMK2", "vyH0XLZyqagFHVmO", "AQBMgeYcIEzPGedN"} table="filter" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-tw-cali380a5b9c304 chain="cali-to-wl-dispatch-3" hash="Rn37b3cubtzKzfnd" position=0 ruleFragment="-A cali-to-wl-dispatch-3 HASH --out-interface cali380a5b9c304 --goto cali-tw-cali380a5b9c304" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-tw-cali3879dac72fe chain="cali-to-wl-dispatch-3" hash="VL7JiWBjlz1V5eAH" position=1 ruleFragment="-A cali-to-wl-dispatch-3 HASH --out-interface cali3879dac72fe --goto cali-tw-cali3879dac72fe" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-to-wl-dispatch-3" hash="ETD-fogba0GcunQk" position=2 ruleFragment="-A cali-to-wl-dispatch-3 HASH -m comment --comment \"Unknown interface\" --jump DROP" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"Rn37b3cubtzKzfnd", "VL7JiWBjlz1V5eAH", "ETD-fogba0GcunQk"} ipVersion=0x4 previous=[]string{"Rn37b3cubtzKzfnd", "VL7JiWBjlz1V5eAH", "ETD-fogba0GcunQk"} table="filter" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-tw-cali96535058867" hash="92gMBnyeX4blswt-" position=0 ruleFragment="-A cali-tw-cali96535058867 HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-cali96535058867" hash="MEQe6VwyiVjJ7zOQ" position=1 ruleFragment="-A cali-tw-cali96535058867 HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-tw-cali96535058867" hash="6RMLYKiKJuWjVHc1" position=2 ruleFragment="-A cali-tw-cali96535058867 HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-kns.default chain="cali-tw-cali96535058867" hash="vMoxb9R22fb4pyO6" position=3 ruleFragment="-A cali-tw-cali96535058867 HASH --jump cali-pri-kns.default" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-cali96535058867" hash="Rdo_H23VME-niwtb" position=4 ruleFragment="-A cali-tw-cali96535058867 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-ksa.default.default chain="cali-tw-cali96535058867" hash="Y3QkVEqR8kbuRYGQ" position=5 ruleFragment="-A cali-tw-cali96535058867 HASH --jump cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-cali96535058867" hash="eVvCFgdoo8bZX3qa" position=6 ruleFragment="-A cali-tw-cali96535058867 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-cali96535058867" hash="llNznSFv3JOEywzH" position=7 ruleFragment="-A cali-tw-cali96535058867 HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"92gMBnyeX4blswt-", "MEQe6VwyiVjJ7zOQ", "6RMLYKiKJuWjVHc1", "vMoxb9R22fb4pyO6", "Rdo_H23VME-niwtb", "Y3QkVEqR8kbuRYGQ", "eVvCFgdoo8bZX3qa", "llNznSFv3JOEywzH"} ipVersion=0x4 previous=[]string{"92gMBnyeX4blswt-", "MEQe6VwyiVjJ7zOQ", "6RMLYKiKJuWjVHc1", "vMoxb9R22fb4pyO6", "Rdo_H23VME-niwtb", "Y3QkVEqR8kbuRYGQ", "eVvCFgdoo8bZX3qa", "llNznSFv3JOEywzH"} table="filter" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-tw-caliac313fa0db4" hash="EXxS2fVbqPA2WdA5" position=0 ruleFragment="-A cali-tw-caliac313fa0db4 HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.797 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-caliac313fa0db4" hash="2FJIaFYxK-mfp0Ju" position=1 ruleFragment="-A cali-tw-caliac313fa0db4 HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-tw-caliac313fa0db4" hash="-oOBaU-zMAmpYGjx" position=2 ruleFragment="-A cali-tw-caliac313fa0db4 HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-kns.default chain="cali-tw-caliac313fa0db4" hash="NGn-m_7dX0F9SEbR" position=3 ruleFragment="-A cali-tw-caliac313fa0db4 HASH --jump cali-pri-kns.default" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-caliac313fa0db4" hash="IUpjN0k279GyBTrx" position=4 ruleFragment="-A cali-tw-caliac313fa0db4 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pri-ksa.default.default chain="cali-tw-caliac313fa0db4" hash="sgd6W0jXko2WtEcK" position=5 ruleFragment="-A cali-tw-caliac313fa0db4 HASH --jump cali-pri-ksa.default.default" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-tw-caliac313fa0db4" hash="ymhOdnBikNqH_xNK" position=6 ruleFragment="-A cali-tw-caliac313fa0db4 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-tw-caliac313fa0db4" hash="4rOLOy_dR0KcbmNW" position=7 ruleFragment="-A cali-tw-caliac313fa0db4 HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"EXxS2fVbqPA2WdA5", "2FJIaFYxK-mfp0Ju", "-oOBaU-zMAmpYGjx", "NGn-m_7dX0F9SEbR", "IUpjN0k279GyBTrx", "sgd6W0jXko2WtEcK", "ymhOdnBikNqH_xNK", "4rOLOy_dR0KcbmNW"} ipVersion=0x4 previous=[]string{"EXxS2fVbqPA2WdA5", "2FJIaFYxK-mfp0Ju", "-oOBaU-zMAmpYGjx", "NGn-m_7dX0F9SEbR", "IUpjN0k279GyBTrx", "sgd6W0jXko2WtEcK", "ymhOdnBikNqH_xNK", "4rOLOy_dR0KcbmNW"} table="filter" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="filter" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-fw-cali3879dac72fe" hash="TO8KrBS_umiWYfxP" position=0 ruleFragment="-A cali-fw-cali3879dac72fe HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali3879dac72fe" hash="DkpFMyO2CUKHAkc5" position=1 ruleFragment="-A cali-fw-cali3879dac72fe HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-fw-cali3879dac72fe" hash="fkBo6tFmCuuzHCVo" position=2 ruleFragment="-A cali-fw-cali3879dac72fe HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali3879dac72fe" hash="MqYzY3XoFul7pmkS" position=3 ruleFragment="-A cali-fw-cali3879dac72fe HASH -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -p 17 -m multiport --destination-ports 4789 --jump DROP" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali3879dac72fe" hash="JOjxsxnvCysL_hXk" position=4 ruleFragment="-A cali-fw-cali3879dac72fe HASH -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -p 4 --jump DROP" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-kns.default chain="cali-fw-cali3879dac72fe" hash="-FIwspAq1YkJutW1" position=5 ruleFragment="-A cali-fw-cali3879dac72fe HASH --jump cali-pro-kns.default" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-cali3879dac72fe" hash="JXwvsUUiJo7rOlV9" position=6 ruleFragment="-A cali-fw-cali3879dac72fe HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-ksa.default.default chain="cali-fw-cali3879dac72fe" hash="vlQdcnjk40ZU0FfF" position=7 ruleFragment="-A cali-fw-cali3879dac72fe HASH --jump cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.798 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-cali3879dac72fe" hash="1XQGzrAc9ZMPhIAg" position=8 ruleFragment="-A cali-fw-cali3879dac72fe HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.799 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-cali3879dac72fe" hash="dxv-NeIr5ezwGz7c" position=9 ruleFragment="-A cali-fw-cali3879dac72fe HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"TO8KrBS_umiWYfxP", "DkpFMyO2CUKHAkc5", "fkBo6tFmCuuzHCVo", "MqYzY3XoFul7pmkS", "JOjxsxnvCysL_hXk", "-FIwspAq1YkJutW1", "JXwvsUUiJo7rOlV9", "vlQdcnjk40ZU0FfF", "1XQGzrAc9ZMPhIAg", "dxv-NeIr5ezwGz7c"} ipVersion=0x4 previous=[]string{"TO8KrBS_umiWYfxP", "DkpFMyO2CUKHAkc5", "fkBo6tFmCuuzHCVo", "MqYzY3XoFul7pmkS", "JOjxsxnvCysL_hXk", "-FIwspAq1YkJutW1", "JXwvsUUiJo7rOlV9", "vlQdcnjk40ZU0FfF", "1XQGzrAc9ZMPhIAg", "dxv-NeIr5ezwGz7c"} table="filter" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{} ipVersion=0x4 previous=[]string{} table="filter" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-from-wl-dispatch-3 chain="cali-from-wl-dispatch" hash="eRB5fFi8houtUdAx" position=0 ruleFragment="-A cali-from-wl-dispatch HASH --in-interface cali3+ --goto cali-from-wl-dispatch-3" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-fw-cali96535058867 chain="cali-from-wl-dispatch" hash="9iH_GTJnH_yfNaMX" position=1 ruleFragment="-A cali-from-wl-dispatch HASH --in-interface cali96535058867 --goto cali-fw-cali96535058867" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-fw-caliac313fa0db4 chain="cali-from-wl-dispatch" hash="herF7CS4PvuOQZbD" position=2 ruleFragment="-A cali-from-wl-dispatch HASH --in-interface caliac313fa0db4 --goto cali-fw-caliac313fa0db4" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-from-wl-dispatch" hash="BwTanwKLQwL1erKn" position=3 ruleFragment="-A cali-from-wl-dispatch HASH -m comment --comment \"Unknown interface\" --jump DROP" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"eRB5fFi8houtUdAx", "9iH_GTJnH_yfNaMX", "herF7CS4PvuOQZbD", "BwTanwKLQwL1erKn"} ipVersion=0x4 previous=[]string{"eRB5fFi8houtUdAx", "9iH_GTJnH_yfNaMX", "herF7CS4PvuOQZbD", "BwTanwKLQwL1erKn"} table="filter" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-to-wl-dispatch-3 chain="cali-to-wl-dispatch" hash="zaG4MAX3T6tQxdJK" position=0 ruleFragment="-A cali-to-wl-dispatch HASH --out-interface cali3+ --goto cali-to-wl-dispatch-3" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-tw-cali96535058867 chain="cali-to-wl-dispatch" hash="0zQEmQMO1u2UWbBS" position=1 ruleFragment="-A cali-to-wl-dispatch HASH --out-interface cali96535058867 --goto cali-tw-cali96535058867" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-tw-caliac313fa0db4 chain="cali-to-wl-dispatch" hash="xupTX44vjg-JmnxK" position=2 ruleFragment="-A cali-to-wl-dispatch HASH --out-interface caliac313fa0db4 --goto cali-tw-caliac313fa0db4" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-to-wl-dispatch" hash="SZ28KbAE4c38Mup4" position=3 ruleFragment="-A cali-to-wl-dispatch HASH -m comment --comment \"Unknown interface\" --jump DROP" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"zaG4MAX3T6tQxdJK", "0zQEmQMO1u2UWbBS", "xupTX44vjg-JmnxK", "SZ28KbAE4c38Mup4"} ipVersion=0x4 previous=[]string{"zaG4MAX3T6tQxdJK", "0zQEmQMO1u2UWbBS", "xupTX44vjg-JmnxK", "SZ28KbAE4c38Mup4"} table="filter" | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.800 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-from-wl-dispatch chain="cali-wl-to-host" hash="Ee9Sbo10IpVujdIY" position=0 ruleFragment="-A cali-wl-to-host HASH --jump cali-from-wl-dispatch" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-wl-to-host" hash="nSZbcOoG1xPONxb8" position=1 ruleFragment="-A cali-wl-to-host HASH -m comment --comment \"Configured DefaultEndpointToHostAction\" --jump ACCEPT" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"Ee9Sbo10IpVujdIY", "nSZbcOoG1xPONxb8"} ipVersion=0x4 previous=[]string{"Ee9Sbo10IpVujdIY", "nSZbcOoG1xPONxb8"} table="filter" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-OUTPUT" hash="Mq1_rAdXXH3YkrzW" position=0 ruleFragment="-A cali-OUTPUT HASH -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-OUTPUT" hash="69FkRTJDvD5Vu6Vl" position=1 ruleFragment="-A cali-OUTPUT HASH --out-interface cali+ --jump RETURN" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-OUTPUT" hash="AnEsmO6bDZbQntWW" position=2 ruleFragment="-A cali-OUTPUT HASH -m comment --comment \"Allow IPIP packets to other Calico hosts\" -p 4 -m set --match-set cali40all-hosts-net dst -m addrtype --src-type LOCAL --jump ACCEPT" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-OUTPUT" hash="_ERUSSyRmRrgn7QU" position=3 ruleFragment="-A cali-OUTPUT HASH -m comment --comment \"Allow VXLAN packets to other whitelisted hosts\" -p 17 -m multiport --destination-ports 4789 -m addrtype --src-type LOCAL -m set --match-set cali40all-vxlan-net dst --jump ACCEPT" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0xf0000 chain="cali-OUTPUT" hash="eCYBJT1-FpELHZDd" position=4 ruleFragment="-A cali-OUTPUT HASH --jump MARK --set-mark 0/0xf0000" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-to-host-endpoint chain="cali-OUTPUT" hash="sIhcfHOWqix-aPJD" position=5 ruleFragment="-A cali-OUTPUT HASH -m conntrack ! --ctstate DNAT --jump cali-to-host-endpoint" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-OUTPUT" hash="fjDrV50eZGEkqJOS" position=6 ruleFragment="-A cali-OUTPUT HASH -m comment --comment \"Host endpoint policy accepted packet.\" -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"Mq1_rAdXXH3YkrzW", "69FkRTJDvD5Vu6Vl", "AnEsmO6bDZbQntWW", "_ERUSSyRmRrgn7QU", "eCYBJT1-FpELHZDd", "sIhcfHOWqix-aPJD", "fjDrV50eZGEkqJOS"} ipVersion=0x4 previous=[]string{"Mq1_rAdXXH3YkrzW", "69FkRTJDvD5Vu6Vl", "AnEsmO6bDZbQntWW", "_ERUSSyRmRrgn7QU", "eCYBJT1-FpELHZDd", "sIhcfHOWqix-aPJD", "fjDrV50eZGEkqJOS"} table="filter" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Set:0x10000 chain="cali-pri-kns.default" hash="7Fnh7Pv3_98FtLW7" position=0 ruleFragment="-A cali-pri-kns.default HASH --jump MARK --set-mark 0x10000/0x10000" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-pri-kns.default" hash="ZbV6bJXWSRefjK0u" position=1 ruleFragment="-A cali-pri-kns.default HASH -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"7Fnh7Pv3_98FtLW7", "ZbV6bJXWSRefjK0u"} ipVersion=0x4 previous=[]string{"7Fnh7Pv3_98FtLW7", "ZbV6bJXWSRefjK0u"} table="filter" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-fw-cali380a5b9c304 chain="cali-from-wl-dispatch-3" hash="L4qzE_ySOcJdXqgK" position=0 ruleFragment="-A cali-from-wl-dispatch-3 HASH --in-interface cali380a5b9c304 --goto cali-fw-cali380a5b9c304" | |
2021-12-07 00:26:11.801 [DEBUG][63] felix/rules.go 164: Hashed rule action=Goto->cali-fw-cali3879dac72fe chain="cali-from-wl-dispatch-3" hash="XkRVdmM842r9y4R7" position=1 ruleFragment="-A cali-from-wl-dispatch-3 HASH --in-interface cali3879dac72fe --goto cali-fw-cali3879dac72fe" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-from-wl-dispatch-3" hash="MbTDhndkkG6UhRUf" position=2 ruleFragment="-A cali-from-wl-dispatch-3 HASH -m comment --comment \"Unknown interface\" --jump DROP" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"L4qzE_ySOcJdXqgK", "XkRVdmM842r9y4R7", "MbTDhndkkG6UhRUf"} ipVersion=0x4 previous=[]string{"L4qzE_ySOcJdXqgK", "XkRVdmM842r9y4R7", "MbTDhndkkG6UhRUf"} table="filter" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="cali-fw-caliac313fa0db4" hash="2VGTOFjJFFE7beN4" position=0 ruleFragment="-A cali-fw-caliac313fa0db4 HASH -m conntrack --ctstate RELATED,ESTABLISHED --jump ACCEPT" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-caliac313fa0db4" hash="3fvIzaPgF0gh48BI" position=1 ruleFragment="-A cali-fw-caliac313fa0db4 HASH -m conntrack --ctstate INVALID --jump DROP" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Clear:0x10000 chain="cali-fw-caliac313fa0db4" hash="DCkm8PB93Qde9X7p" position=2 ruleFragment="-A cali-fw-caliac313fa0db4 HASH --jump MARK --set-mark 0/0x10000" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-caliac313fa0db4" hash="5mjBGJHbl2l35TBM" position=3 ruleFragment="-A cali-fw-caliac313fa0db4 HASH -m comment --comment \"Drop VXLAN encapped packets originating in workloads\" -p 17 -m multiport --destination-ports 4789 --jump DROP" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-caliac313fa0db4" hash="yBstb-wDZZHyG6aP" position=4 ruleFragment="-A cali-fw-caliac313fa0db4 HASH -m comment --comment \"Drop IPinIP encapped packets originating in workloads\" -p 4 --jump DROP" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-kns.default chain="cali-fw-caliac313fa0db4" hash="FAyXS2_E5uipX5OP" position=5 ruleFragment="-A cali-fw-caliac313fa0db4 HASH --jump cali-pro-kns.default" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-caliac313fa0db4" hash="-anPErB_gIP3Azh1" position=6 ruleFragment="-A cali-fw-caliac313fa0db4 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-pro-ksa.default.default chain="cali-fw-caliac313fa0db4" hash="63cdwn1FznYwH10k" position=7 ruleFragment="-A cali-fw-caliac313fa0db4 HASH --jump cali-pro-ksa.default.default" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Return chain="cali-fw-caliac313fa0db4" hash="C1WdN0BPvIkMFr8q" position=8 ruleFragment="-A cali-fw-caliac313fa0db4 HASH -m comment --comment \"Return if profile accepted\" -m mark --mark 0x10000/0x10000 --jump RETURN" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/rules.go 164: Hashed rule action=Drop chain="cali-fw-caliac313fa0db4" hash="2eK8jGEskMW4-Lfl" position=9 ruleFragment="-A cali-fw-caliac313fa0db4 HASH -m comment --comment \"Drop if no profiles matched\" --jump DROP" | |
2021-12-07 00:26:11.802 [DEBUG][63] felix/table.go 1068: Comparing old to new hashes. current=[]string{"2VGTOFjJFFE7beN4", "3fvIzaPgF0gh48BI", "DCkm8PB93Qde9X7p", "5mjBGJHbl2l35TBM", "yBstb-wDZZHyG6aP", "FAyXS2_E5uipX5OP", "-anPErB_gIP3Azh1", "63cdwn1FznYwH10k", "C1WdN0BPvIkMFr8q", "2eK8jGEskMW4-Lfl"} ipVersion=0x4 previous=[]string{"2VGTOFjJFFE7beN4", "3fvIzaPgF0gh48BI", "DCkm8PB93Qde9X7p", "5mjBGJHbl2l35TBM", "yBstb-wDZZHyG6aP", "FAyXS2_E5uipX5OP", "-anPErB_gIP3Azh1", "63cdwn1FznYwH10k", "C1WdN0BPvIkMFr8q", "2eK8jGEskMW4-Lfl"} table="filter" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/table.go 1071: Chain already correct | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-INPUT chain="INPUT" hash="Cz_u1IQiXIMmKD4c" position=0 ruleFragment="-A INPUT HASH --jump cali-INPUT" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-FORWARD chain="FORWARD" hash="wUHhoiAYhphO9Mso" position=0 ruleFragment="-A FORWARD HASH --jump cali-FORWARD" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/rules.go 164: Hashed rule action=Accept chain="FORWARD*appends*" hash="S93hcgKJrXEqnTfs" position=0 ruleFragment="-A FORWARD*appends* HASH -m comment --comment \"Policy explicitly accepted packet.\" -m mark --mark 0x10000/0x10000 --jump ACCEPT" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/rules.go 164: Hashed rule action=Set:0x10000 chain="FORWARD*appends*" hash="mp77cMpurHhyjLrM" position=1 ruleFragment="-A FORWARD*appends* HASH --jump MARK --set-mark 0x10000/0x10000" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/rules.go 164: Hashed rule action=Jump->cali-OUTPUT chain="OUTPUT" hash="tVnHkvAo15HuiPy0" position=0 ruleFragment="-A OUTPUT HASH --jump cali-OUTPUT" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/table.go 1234: In nftables mode, restarting transaction between updates and deletions. ipVersion=0x4 table="filter" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/table.go 1277: Writing to iptables ipVersion=0x4 iptablesInput="*filter\n:cali-cidr-block - -\n:cali-from-host-endpoint - -\n:cali-to-host-endpoint - -\n:cali-pro-ksa.default.default - -\n:cali-to-hep-forward - -\n:cali-pri-ksa.default.default - -\n:cali-from-hep-forward - -\nCOMMIT\n" table="filter" | |
2021-12-07 00:26:11.803 [DEBUG][63] felix/table.go 1303: Using native iptables-restore xtables lock. probeIntervalMicros="50000" timeoutSecs="10" | |
2021-12-07 00:26:11.806 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.806 [DEBUG][63] felix/health.go 131: New health report lastReport=health.HealthReport{Live:true, Ready:false} name="int_dataplane" newReport=&health.HealthReport{Live:true, Ready:false} | |
2021-12-07 00:26:11.806 [INFO][63] felix/status_combiner.go 81: Endpoint up for at least one IP version id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-vzx9w", EndpointId:"eth0"} ipVersion=0x4 status="up" | |
2021-12-07 00:26:11.807 [INFO][63] felix/status_combiner.go 98: Reporting combined status. id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-vzx9w", EndpointId:"eth0"} status="up" | |
2021-12-07 00:26:11.807 [INFO][63] felix/status_combiner.go 81: Endpoint up for at least one IP version id=proto.WorkloadEndpointID{OrchestratorId:"k8s", WorkloadId:"default/hostnames-57b79fc5df-6sw8n", EndpointId:"eth0"} ipVersion=0x4 status="up" | |
2021-12-07 00:26:11.807 [DEBUG][63] felix/daemon.go 948: New message from dataplane payload=id:<orchestrator_id:"k8s" workload_id:"default/hostnames-57b79fc5df-vzx9w" endpoint_id:"eth0" > sta |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment