text:
Cannot resolve JMC dependencies

[ERROR] Failed to execute goal on project flamegraph-output: Could not resolve dependencies for project com.github.chrishantha.jfr:flamegraph-output:jar:0.0.3-SNAPSHOT: The following artifacts could not be resolved: com.jrockit.mc:com.jrockit.mc.common:jar:5.5.1.172852, com.jrockit.mc:com.jrockit.mc.flightrecorder:jar:5.5.1.172852: Could not find artifact com.jrockit.mc:com.jrockit.mc.common:jar:5.5.1.172852 in repo (file:///home/andriy/Projects/com/github/chrishantha/jfr-flame-graph/repo) -> [Help 1]

Did you run install-mc-jars.sh script as mentioned in the README?

where is this install-mc-jars.sh file in repo ?

source: gharchive/issue

authors: chrishantha plokhotnyuk shhrohan

repo: chrishantha/jfr-flame-graph

license_type: permissive

license_source: bigquery


text:
How to use the component of CheckBox?

I don't know how to use the component of checkBox.I since user it that console log always show erro return metadata['commands']
[0] if value else None IndexError: list index out of range
Please dalao give me a example to use thec CheckBox!
Please help me 3q!!!

This is a sharp edge of Gooey that should be smoothed over. The problem is that you're trying to make a positional argument a checkbox, but that doesn't make sense from an argparse perspective -- something can't be optional and positional at the same time.
So, to fix your problem, you need to swap from
parser.add_argument('pidg4', ...)

to
parser.add_argument('--pidg4', ...)   # <-- note the "--"

this is how you tell argparse that you're adding an optional argument.

repo: chriskiehl/Gooey

license: mit


text:
Fixed Tab -> 2 Space issues

I noticed a lot of formatting issues when troubleshooting something today.  There was a lot of mixing spaces and tabs, so I converted all chr(TAB) to 2 spaces

Looks great.  The test_passivetotal test is now failing when it queries for 8.8.8.8.

source: gharchive/pull-request


text:
Build time doesn't show seconds if seconds are 0

Describe the bug
If you have over a minute in build time, but the seconds are 0, it leaves an awkward blank, resulting in something that looks like "2m s".
To Reproduce
Steps to reproduce the behavior:

Compile project.
Hope it ends with 0 seconds.
Notice output.

Expected behavior
I would think either it should show "2m 0s" or just "2m" without the additional " s".
Screenshots

Platform (please complete the following information):

OS: Arch Linux
App version 4.1.0 beta 4

How embarrassing! That's why I should write tests no matter how simple the function seems 😅 It was a two character fix, I've made the change and written a number of tests to cover this here https://github.com/chrismaltby/gb-studio/commit/93aff097016d51083a66c037547b66b2e2c48b71

Such a large oversight! /s
I'm glad it was a simple fix! Thanks for taking a look into it!

authors: chrismaltby sharkeylaser

repo: chrismaltby/gb-studio

license: MIT

license_source: github-api


text:
Add Greek phone validator

Hello,
I' ve made this regex
^((\+30)|0030)?((2\d{9})|(69\d{8}))$

that matches all phones in Greece, whether landline or mobile. Can you include it in your code?

Hey, PRs with tests are welcome! Have a look at #342 for an example.

This is available in version 3.31.0.

authors: chriso gkaimakas


text:
Added isWhitelisted validator.

Simply checks string for non-whitelisted characters.
validator.isWhitelisted('valid-username', 'abcdefghijklmnopqrstuvwxyz-'); // true
validator.isWhitelisted('nonhex', '0123456789abcdef'); // false

Thanks.

authors: chriso eserozvataf


text:
No way to prevent default browser input validation

Currently there doesn't seem to be any direct way to prevent the browser's default validation behaviour. eg. when the form contains an input of type="number" and you  enter a non-number string and submit, then in Chrome the validation tooltip will appear on the input.
Standard way to disable this functionality on a normal form, would be to specify the novalidate attribute. This unfortunately doesn't work with Formsy.Form.
Currently the only workaround I found was to wrap the Formsy.Form element in an outer form tag and specify novalidate there.
<form novalidate>
  <Formsy.Form>...</Formsy.Form>
</form>

But this will probably have some other disadvantages. Would be great if you could support the novalidate attribute! :)

Ah, method above doesn't work either, throws:
Uncaught Error: Invariant Violation: findComponentRoot(... etc.

As a workaround, you should be able to add novalidate to each of your inputs.

I suggest adding this as a default property on the form. Is there any reason you would not want to have "novalidate"... I mean, the reason you use formsy is to handle custom validation? :-)

Added this now. You can turn it off with: `<Formsy.Form novalidate={false}/> will be part of next release :-) Thanks!

Wow! thanks for addressing this so fast - I'll check it out :)

So, got this to work using this:
    <Formsy.Form>
      <Input name="myNumber" />
      <button type="submit" formNoValidate>Update</button>
    </Formsy.Form>

I think the input element has to be a submit button (see w3)

Hi @dprentis,
I did something wrong on first implementation. You should be able to use formNoValidate on the inputs too... the actual native inputs that is :-)

One thing I've noticed is that if you submit the form by pressing enter the native validation is triggered.
I think we need to be able to pass 'noValidate' to the form element. That way we can catch both the button click or hitting enter.
Even just allowing the prop to be passed down to the form would do the trick.

I think @dprentis is right, the formnovalidate attribute is only allowed on submit and image input types. So if it's present on the default button for the form, native validation is skipped. If formnovalidate is not present on the default button, then a novalidate attribute on the form element comes into play.
From what I can see, adding formNoValidate to other inputs (as shown in the API documentation) has no effect.
Native validation shown:
<Formsy.Form>
   <input name="foo" formNoValidate required />
   <input name="submit" type="Submit" />
</Formsy.Form>

Native validation supressed:
<Formsy.Form>
   <input name="foo" required />
   <input name="submit" formNoValidate type="Submit" />
</Formsy.Form>

Hi guys, sorry for late reply, been in loss of time.
I have not tested this very well. So what you are saying is that if we change documentation to:
<Formsy.Form>
   <input name="foo" required />
   <input name="submit" formNoValidate type="Submit" />
</Formsy.Form>

We are in the clear on this? formNoValidate does the job, though only on the native form element that runs the submit of the form? It being an input or a button?

Yes, that's the way to do it with formNoValidate. We should change the docs to show this.

There's another case where formNoValidate works:
<Formsy.Form>
   <input type="search" name="q" formNoValidate required />
</Formsy.Form>

I think what happens here is that in a form with a single "texty" type of input, that element also takes the role of the submits button, so formNoValidate applies and native validation is skipped.
In the docs, it maybe worth noting that formsy-react isn't performing any "special magic", and provide a link to the html5 spec?

Also! Maybe we should whitelist the noComplete attribute on the form element?

Jup, I agree, will fix this for next release

@christianalfoni how about just passing all props?
This
    return (
        <form {...this.props} onSubmit={this.submit}>
            {this.traverseChildrenAndRegisterInputs(this.props.children)}
        </form>
    );

instead
    return React.DOM.form({
        onSubmit: this.submit,
        className: this.props.className,
        autoComplete: this.props.autoComplete
      },
      this.traverseChildrenAndRegisterInputs(this.props.children)
    );

@christianalfoni, when are you planning to release a fix for this?
http://stackoverflow.com/questions/31021922/how-to-disable-html5-validation-in-react-using-formsy-react

I have an input field of type 'number' that I want to be able to accept commas. As far as I can tell, neither 'formNoValidate' on the submit button nor 'noValidate' on the Formsy.Form element works to suppress the default validation in this case.

@e-monson This seems like native behaviour. If you want commas you have to run with your own input where you suppress letters.

authors: Semigradsky christianalfoni dprentis e-monson jcapogna kristian-puccio remisture twisty

repo: christianalfoni/formsy-react


text:
Use i64 for all literals in lir

Quick implementation of #85 to test performance.
Result... it didn't change much 🤷♂
arithmetic              time:   [22.695 us 22.785 us 22.888 us]
                        change: [-4.1061% -2.9098% -1.7925%] (p = 0.00 < 0.05)
logic                   time:   [39.303 us 39.418 us 39.539 us]
                        change: [-6.4213% -4.5619% -2.9174%] (p = 0.00 < 0.05)
factorial               time:   [79.233 us 79.825 us 80.490 us]
                        change: [+1.0349% +2.7375% +4.3128%] (p = 0.00 < 0.05)
factorial_tail          time:   [137.96 us 139.26 us 140.71 us]
                        change: [-9.5111% -8.0044% -6.3024%] (p = 0.00 < 0.05)
fibonacci               time:   [663.75 us 667.71 us 672.02 us]
                        change: [+1.1557% +2.4893% +3.9637%] (p = 0.00 < 0.05)
fibonacci_tail          time:   [126.43 us 127.51 us 128.65 us]
                        change: [-2.0285% -0.4566% +1.0984%] (p = 0.57 > 0.05)
gcd                     time:   [786.00 us 793.61 us 802.49 us]
                        change: [-2.6906% -1.0504% +0.5177%] (p = 0.22 > 0.05)
ackermann               time:   [498.72 us 503.78 us 509.44 us]
                        change: [-3.6419% -1.5418% +0.6650%] (p = 0.17 > 0.05)
calling                 time:   [148.71 us 150.53 us 152.54 us]
                        change: [+0.1352% +2.3095% +5.0439%] (p = 0.05 > 0.05)
complex_calling         time:   [160.16 us 161.90 us 163.76 us]
                        change: [-8.7673% -7.1075% -5.4440%] (p = 0.00 < 0.05)
fancy_max               time:   [3.1225 us 3.1541 us 3.1888 us]
                        change: [-1.9971% +0.6634% +3.4098%] (p = 0.65 > 0.05)
step                    time:   [2.3160 us 2.3396 us 2.3650 us]
                        change: [-4.0688% -1.9811% +0.2041%] (p = 0.08 > 0.05)

The travis check seems broken

repo: christianpoveda/pijama


text:
add support for contexts that don't need isolation

implement a way for contexts to opt out of context isolation, when they don't change the state of the objects in the context.
        describe("routing", isolation:false) {

            val restaurant = autoClose(
                Restaurant {
                    post("/handlers/reverser", ReverserService())
                }
            )
            it("returns 404 if the route is not found") {
            }
            it("calls handlers with body and returns result") {
            }
        }

without this feature its already possible to declare dependencies outside of the root context, in the object or in the class or outside in the kotlin file. then they will not be recreated. but there is currently no way to close them.

this is already implemented in main

repo: christophsturm/failfast


text:
Add linter rule for not using falsiness of types

In several places in our code, we have run into bugs where we rely on the falsy-ness of a type or accidentally rely on it. We should add a linter rule to make checks explicit and never do things like if {} by accident.

we should never use the falsiness of types!

authors: HammadB jeffchuber

repo: chroma-core/chroma


text:
[Install issue]:

Chromadb keeps being in client mode
I tried to install chromadb following the tutorial and it works at first, then it suddenly have this error
Chroma is running in http-only client mode, and can only be run with 'chromadb.api.fastapi.FastAPI' as the chroma_api_impl.             see https://docs.trychroma.com/usage-guide?lang=py#using-the-python-http-only-client for more information.
After using client = chromadb.HttpClient(host='localhost', port=8000) like the tutorial, it still have an error
raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPConnectionPool(host='localhost', port=8000): Max retries exceeded with url: /api/v1 (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x14fdf6fd0>: Failed to establish a new connection: [Errno 61] Connection refused'))
I tried docker compose up -d but it does not work.
Versions
python 3.10, mac OS Big Sur
Relevant log output
No response

Also are you pip installing chromadb or chromadb-client?

It works again somehow.
I used chromadb but it says it is running on http mode all of a sudden, so i used chromadb-client and it still didn’t work. I just let it be and at night when I tried it again, it runs.

does chromadb allows different indexing like ivf? I know I can use hnsw but I could not find any documentation on it and don’t know if we are able to tune the hnw params.

@Ponkkkkk, only hnsw is currently supported. You can see the params in the code here: https://github.com/chroma-core/chroma/blob/main/chromadb/segment/impl/vector/hnsw_params.py

Is this the correct way to update the collection metadata after creating it? I tried
collection.modify(
name=’Test’,
metadata={ "hnsw:construction_ef": 128, "hnsw:search_ef": 30, }
)
and then running get_collection(‘Test’) returns this,
before modify()
name='Test' id=UUID('57cecf99-6ce2-44f3-887b-4e15e1366f57') metadata={'hnsw:M': 64, 'hnsw:construction_ef': 64, 'hnsw:search_ef': 4, 'hnsw:space': 'cosine'}
after modify()
name='Test' id=UUID('57cecf99-6ce2-44f3-887b-4e15e1366f57') metadata={'hnsw:construction_ef': 128, 'hnsw:search_ef': 30}
which delete my M and distance metric medatata. Furthermore I am also ablr to change the constitution ef which is normally immutable in other vector DBs.

@Ponkkkkk at the moment changing hyper parameters is not supported using collection.modify. Might I suggest you try to create a new collection with your new hyper parameters and then transfer your doc/embeddings/ids/metadata to the new collection.

How about for exact search or brute force? does chroma supports it?

I face the same problems, but I can't still work up to now

@Ponkkkkk, here is an example of this - https://cookbook.chromadb.dev/core/collections/#cloning-a-collection

authors: HammadB Ponkkkkk dandan950 tazarov


text:
Convenience constructors

Description of changes
Summarize the changes made by this PR.

Improvements & Bug fixes

...

New functionality

...

Test plan
How are these changes tested?

[ ] Tests pass locally with pytest for python, yarn test for js, cargo test for rust

Documentation Changes
Are all docstrings for user-facing APIs updated if required? Do we need to make documentation changes in the docs repository?

[!WARNING]
This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

#2437  👈
#2400
#2396
#2338
#2300 : 1 other dependent PR (#2265 )
main

This stack of pull requests is managed by Graphite. Learn more about stacking.

Join @atroyn and the rest of your teammates on  Graphite


text:
JS : bug with some regular expressions containing quote characters

Known bug in JSMin: regular expressions containing quote characters must
be proceeded by one of the following characters: (,=:[!&|?

E.g. JSMin will fail on the following: return /'/;

The current workaround is to wrap the expression in parenthesis: return
(/'/); but this is unacceptible.

The plan is to integrate this function into JSMin:
http://code.google.com/p/minify/source/browse/trunk/min/lib/MyMin.php#267

I'd like to just *use* MyMin but it fails a few conditional comment tests
and the author was unresponsive.

Original issue reported on code.google.com by mrclay....@gmail.com on 10 Jan 2009 at 3:11

Fixed in R282!

Original comment by mrclay....@gmail.com on 26 Jan 2009 at 5:07

Changed state: Verified
Added labels: Release-2.1.1

repo: chrsmithdemos/minify


text:
🛑 91家纺 is down

In 8d10c99, 91家纺 (https://www.91jf.com/) was down:

HTTP code: 403
Response time: 1171 ms

Resolved: 找家纺网 is back up in f714f2d after .

repo: chwang-team/status-hao


text:
Ready up Katatsuki as a standalone crate.

Katatsuki can be extracted and used as a standalone crate with some more polish and doucmentation.

[ ] Document existing methods
[ ] Supply an Iter<u8> over get_album_art_all_bytes for cover art access.
[ ] Make TrackData interface private.

Probably would be better served with a native Rust implementation rather than a taglib binding

repo: chyyran/seiri


text:
kind: Set conn-disrupt-test-setup

Michi reported that reverting 1 fix the Kind CI job flake, and that they were due to too many flow events generated by the test-conn-disrupt pods.
As we don't care about the sensitivity of those tests in cilium/cilium-cli, set the interval to 100ms to reduce the events count (and thus, the test runtime).
Reported-by: Michi Mutsuzaki michi@isovalent.com

Failed with the following:
 7/56 tests failed (13/312 actions), 15 tests skipped, 0 scenarios skipped:
Test [no-policies]:
  ❌ no-policies/client-to-client/ping-ipv4-1: test-namespace/client2-658d8d8db-gnb5t (10.244.1.226) -> test-namespace/client-6b78b5c84-zbjxt (10.244.1.13:0)
  ❌ no-policies/pod-to-world/https-to-chart-testing-worker2-1: test-namespace/client2-658d8d8db-gnb5t (10.244.1.226) -> chart-testing-worker2-https (chart-testing-worker2:443)
  ❌ no-policies/pod-to-pod/curl-ipv4-1: test-namespace/client2-658d8d8db-gnb5t (10.244.1.226) -> test-namespace/echo-same-node-6cc6494564-78r6p (10.244.1.198:8080)
  ❌ no-policies/pod-to-pod/curl-ipv4-2: test-namespace/client-6b78b5c84-zbjxt (10.244.1.13) -> test-namespace/echo-other-node-757cbff7b6-nml8q (10.244.0.149:8080)
Test [no-policies-extra]:
  ❌ no-policies-extra/pod-to-local-nodeport/curl-3: test-namespace/client2-658d8d8db-gnb5t (10.244.1.226) -> test-namespace/echo-same-node (echo-same-node.test-namespace:8080)
Test [allow-all-except-world]:
  ❌ allow-all-except-world/pod-to-pod/curl-ipv4-3: test-namespace/client2-658d8d8db-gnb5t (10.244.1.226) -> test-namespace/echo-same-node-6cc6494564-78r6p (10.244.1.198:8080)
  ❌ allow-all-except-world/pod-to-service/curl-0: test-namespace/client-6b78b5c84-zbjxt (10.244.1.13) -> test-namespace/echo-other-node (echo-other-node.test-namespace:8080)
  ❌ allow-all-except-world/pod-to-host/ping-ipv4-internal-ip: test-namespace/client2-658d8d8db-gnb5t (10.244.1.226) -> 172.18.0.3 (172.18.0.3:0)
Test [client-ingress]:
  ❌ client-ingress/client-to-client/ping-ipv4-0: test-namespace/client-6b78b5c84-zbjxt (10.244.1.13) -> test-namespace/client2-658d8d8db-gnb5t (10.244.1.226:0)
Test [client-ingress-knp]:
  ❌ client-ingress-knp/client-to-client/ping-ipv4-0: test-namespace/client-6b78b5c84-zbjxt (10.244.1.13) -> test-namespace/client2-658d8d8db-gnb5t (10.244.1.226:0)
Test [allow-all-with-metrics-check]:
  ❌ allow-all-with-metrics-check/pod-to-pod/curl-ipv4-1: test-namespace/client-6b78b5c84-zbjxt (10.244.1.13) -> test-namespace/echo-same-node-6cc6494564-78r6p (10.244.1.198:8080)
  ❌ allow-all-with-metrics-check/pod-to-pod/curl-ipv4-3: test-namespace/client2-658d8d8db-gnb5t (10.244.1.226) -> test-namespace/echo-same-node-6cc6494564-78r6p (10.244.1.198:8080)
Test [client-egress-l7-method]:
  ❌ client-egress-l7-method/pod-to-pod-with-endpoints/curl-ipv4-1-public: test-namespace/client-6b78b5c84-zbjxt (10.244.1.13) -> curl-ipv4-1-public (10.244.0.149:8080)
Error: Process completed with exit code 1.

The main branch is failing too.

repo: cilium/cilium-cli


text:
Cilium can log warnings and errors from regeneration when stopped

Is there an existing issue for this?

[X] I have searched the existing issues

What happened?
Cilium logs warnings and errors when stopped for cancelled endpoint regenerations. These should be suppressed when Cilium is stopping.
Cilium Version
master
Kernel Version
N/A
Kubernetes Version
N/A
Sysdump
No response
Relevant log output
Mar 20 18:40:26 runtime cilium-agent[26447]: level=info msg="Shutting down... " subsys=daemon
Mar 20 18:40:26 runtime systemd[1]: Stopping cilium...
Mar 20 18:40:26 runtime cilium-agent[27098]: error while listening: http: Server closed
Mar 20 18:40:26 runtime cilium-agent[26447]: level=info msg="Exiting due to signal" signal=terminated subsys=daemon
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="canceling context in signal handler" subsys=daemon
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="exiting retrying regeneration goroutine due to endpoint being deleted" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Controller func execution time: 1.207082154s" name=endpoint-2602-regeneration-recovery subsys=controller uuid=7eca40e3-6174-4f94-9d1f-bbe44913615d
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Killing old health endpoint process" pidfile=/var/run/cilium/state/health-endpoint.pid subsys=cilium-health-launcher
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Controller run succeeded; waiting for next controller update or stop" name=endpoint-2602-regeneration-recovery subsys=controller uuid=7eca40e3-6174-4f94-9d1f-bbe44913615d
Mar 20 18:40:26 runtime cilium-agent[26447]: level=warning msg="Error while waiting for BPF template compilation" bpfHeaderfileHash=2f956ef1b1512c1edb0a479a0b9b3ef7369d91178c92e8481af08b45a08402e2 error="serializer context canceled" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="Error while rewriting endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 error="BPF template compilation failed: serializer context canceled" identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Didn't find existing device" error="Link not found" subsys=cilium-health-launcher veth=cilium_health
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting endpoint changes after BPF regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting proxy redirect removals" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting proxy redirect removals" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting xDS network policy update" subsys=envoy-manager
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting xDS network policy update" subsys=envoy-manager
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting proxy redirect additions" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting proxy redirect additions" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting endpoint changes after BPF regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=warning msg="generating BPF for endpoint failed, keeping stale directory." containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 file-path=2602_next_fail identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="removing directory" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 directory=2602_next_fail endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="removing directory" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 directory=2602_next endpointID=2602 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=info msg="Stopped serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Completed endpoint regeneration with no pending regeneration requests" code=OK containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 endpointState=ready identity=1 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=0
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Goroutine took lock for more than 0.10 seconds" goroutine=" 1359" seconds=1.20337559 subsys=lock-lib
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 [running]:
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 runtime/debug.Stack()
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/usr/local/go/src/runtime/debug/stack.go:24 +0x65
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 github.com/cilium/cilium/pkg/lock.(*internalMutex).Unlock(0xc000d93e90)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/lock/lock_debug.go:87 +0x92
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 github.com/cilium/cilium/pkg/endpoint.(*Endpoint).regenerate(0xc000d93c00, 0xc00022c000)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go:408 +0x953
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 github.com/cilium/cilium/pkg/endpoint.(*EndpointRegenerationEvent).Handle(0xc000bb6ef0, 0x0)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/endpoint/events.go:53 +0x345
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).run.func1()
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:245 +0x13b
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 sync.(*Once).doSlow(0x1, 0x43f585)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/usr/local/go/src/sync/once.go:68 +0xd2
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 sync.(*Once).Do(...)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/usr/local/go/src/sync/once.go:59
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).run(0x0)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:233 +0x45
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 created by github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).Run
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1359 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:229 +0x7b
Mar 20 18:40:26 runtime cilium-agent[26447]: level=warning msg="Regeneration of endpoint failed" bpfCompilation=0s bpfLoadProg=0s bpfWaitForELF=1.201150037s bpfWriteELF=0s containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 error="BPF template compilation failed: serializer context canceled" identity=1 ipv4= ipv6= k8sPodName=/ mapSync="206.685µs" policyCalculation="198.296µs" prepareBuild="810.87µs" proxyConfiguration="23.995µs" proxyPolicyCalculation="26.936µs" proxyWaitForAck=0s reason="syncing state to host" subsys=endpoint total=1.20348818s waitingForCTClean="2.66µs" waitingForLock="12.68µs"
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Error regenerating endpoint: BPF template compilation failed: serializer context canceled" code=Failure containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 endpointState=ready identity=1 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=200
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="EventQueue event processing statistics" eventConsumeOffQueueWaitTime="15.356µs" eventEnqueueWaitTime="6.627µs" eventHandlingDuration=1.203710731s eventType="*endpoint.EndpointRegenerationEvent" name=endpoint-2602 subsys=eventqueue
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="endpoint regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2602 error="BPF template compilation failed: serializer context canceled" identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=warning msg="Failed while regenerating endpoint" endpointID=2602 subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=1
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="End of parallel mode" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=info msg="Removed stale bpf map" file-path=/sys/fs/bpf/tc/globals/cilium_lb6_source_range subsys=daemon
Mar 20 18:40:26 runtime cilium-agent[26447]: level=info msg="Removed stale bpf map" file-path=/sys/fs/bpf/tc/globals/cilium_lb4_source_range subsys=daemon
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="Command execution failed" cmd="[llc -mattr=dwarfris -march=bpf -mcpu=v3 -filetype=obj -o /var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311/bpf_lxc.dbg.o]" error="signal: terminated" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="Failed to compile bpf_lxc.dbg.o: signal: terminated" compiler-pid=27162 linker-pid=27163 subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="JoinEP: Failed to compile" debug=true error="Failed to compile bpf_lxc.dbg.o: signal: terminated" params="&{Source:bpf_lxc.c Output:bpf_lxc.dbg.o OutputType:obj Options:[]}" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="BPF template object creation failed" bpfHeaderfileHash=5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311 error="failed to compile template program /var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311: Failed to compile bpf_lxc.dbg.o: signal: terminated" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=warning msg="BPF template compilation unsuccessful" bpfHeaderfileHash=5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311 error="Could not locate previously compiled BPF template" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="Error while rewriting endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 error="Could not locate previously compiled BPF template" identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting endpoint changes after BPF regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting proxy redirect removals" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting proxy redirect removals" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting xDS network policy update" subsys=envoy-manager
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="preparing new cache transaction: upserting 0 entries, deleting 1 entries" subsys=xds xdsCachedVersion=4 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="deleting resource from cache" subsys=xds xdsCachedVersion=4 xdsResourceName=10.15.88.105 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsCachedVersion=4 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="preparing new cache transaction: upserting 0 entries, deleting 1 entries" subsys=xds xdsCachedVersion=5 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="deleting resource from cache" subsys=xds xdsCachedVersion=5 xdsResourceName="f00d::a0f:0:0:e9ac" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsCachedVersion=5 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting xDS network policy update" subsys=envoy-manager
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Reverting proxy redirect additions" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting proxy redirect additions" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Finished reverting endpoint changes after BPF regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=warning msg="generating BPF for endpoint failed, keeping stale directory." containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 file-path=3224_next_fail identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="removing directory" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 directory=3224_next_fail endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="removing directory" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 directory=3224_next endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Completed endpoint regeneration with no pending regeneration requests" code=OK containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 endpointState=ready identity=4 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=0
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Goroutine took lock for more than 0.10 seconds" goroutine=" 1837" seconds=0.113383939 subsys=lock-lib
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 [running]:
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 runtime/debug.Stack()
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/usr/local/go/src/runtime/debug/stack.go:24 +0x65
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/lock.(*internalMutex).Unlock(0xc000b10290)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/lock/lock_debug.go:87 +0x92
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/endpoint.(*Endpoint).regenerate(0xc000b10000, 0xc000290500)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go:408 +0x953
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/endpoint.(*EndpointRegenerationEvent).Handle(0xc001231840, 0x0)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/endpoint/events.go:53 +0x345
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).run.func1()
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:245 +0x13b
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 sync.(*Once).doSlow(0x4, 0x43f585)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/usr/local/go/src/sync/once.go:68 +0xd2
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 sync.(*Once).Do(...)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/usr/local/go/src/sync/once.go:59
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).run(0x9249)
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:233 +0x45
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 created by github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).Run
Mar 20 18:40:26 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:229 +0x7b
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Process exited" cmd="ip [netns exec cilium-health cilium-health-responder --listen 4240 --pidfile /var/run/cilium/state/health-endpoint.pid]" exitCode="<nil>" subsys=launcher
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="Command execution failed" cmd="[llc -mattr=dwarfris -march=bpf -mcpu=v3 -filetype=obj -o /var/run/cilium/state/templates/2f956ef1b1512c1edb0a479a0b9b3ef7369d91178c92e8481af08b45a08402e2/bpf_host.o]" error="signal: terminated" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="Failed to compile bpf_host.o: Command execution failed for [llc -mattr=dwarfris -march=bpf -mcpu=v3 -filetype=obj -o /var/run/cilium/state/templates/2f956ef1b1512c1edb0a479a0b9b3ef7369d91178c92e8481af08b45a08402e2/bpf_host.o]: context canceled" compiler-pid=27112 linker-pid=27113 subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="BPF template object creation failed" bpfHeaderfileHash=2f956ef1b1512c1edb0a479a0b9b3ef7369d91178c92e8481af08b45a08402e2 error="failed to compile template program /var/run/cilium/state/templates/2f956ef1b1512c1edb0a479a0b9b3ef7369d91178c92e8481af08b45a08402e2: Failed to compile bpf_host.o: Command execution failed for [llc -mattr=dwarfris -march=bpf -mcpu=v3 -filetype=obj -o /var/run/cilium/state/templates/2f956ef1b1512c1edb0a479a0b9b3ef7369d91178c92e8481af08b45a08402e2/bpf_host.o]: context canceled" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="canceling server context"
Mar 20 18:40:26 runtime cilium-agent[26447]: level=warning msg="Regeneration of endpoint failed" bpfCompilation=101.468867ms bpfLoadProg=0s bpfWaitForELF=101.59941ms bpfWriteELF=0s containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 error="Could not locate previously compiled BPF template" identity=4 ipv4= ipv6= k8sPodName=/ mapSync="133.138µs" policyCalculation="320.539µs" prepareBuild="423.593µs" proxyConfiguration="11.844µs" proxyPolicyCalculation="445.301µs" proxyWaitForAck=0s reason="updated security labels" subsys=endpoint total=113.480777ms waitingForCTClean=9.109875ms waitingForLock="13.116µs"
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Error regenerating endpoint: Could not locate previously compiled BPF template" code=Failure containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 endpointState=ready identity=4 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=200
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="EventQueue event processing statistics" eventConsumeOffQueueWaitTime="165.377µs" eventEnqueueWaitTime="6.949µs" eventHandlingDuration=116.831362ms eventType="*endpoint.EndpointRegenerationEvent" name=endpoint-3224 subsys=eventqueue
Mar 20 18:40:26 runtime cilium-agent[26447]: level=error msg="endpoint regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 error="Could not locate previously compiled BPF template" identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="received signal that regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Triggering endpoint regeneration due to retrying regeneration" code=OK containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 endpointState=waiting-to-regenerate identity=4 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=0
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Dequeued endpoint from build queue" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Regenerating endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ reason="retrying regeneration" startTime="2022-03-20 18:40:26.657579644 +0000 UTC m=+2.884911381" subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Regenerating endpoint: retrying regeneration" code=OK containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 endpointState=regenerating identity=4 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=0
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="removing directory" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 directory=3224_next endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Starting policy recalculation..." containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Skipping unnecessary endpoint policy recalculation" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ policyChanged=true policyRevision.next=1 policyRevision.repo=1 subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsCachedVersion=6 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="inserting resource into cache" subsys=xds xdsCachedVersion=6 xdsResourceName="f00d::a0f:0:0:e9ac" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsCachedVersion=6 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="preparing new cache transaction: upserting 1 entries, deleting 0 entries" subsys=xds xdsCachedVersion=7 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="inserting resource into cache" subsys=xds xdsCachedVersion=7 xdsResourceName=10.15.88.105 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsCachedVersion=7 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="BPF header file hashed (was: \"\")" bpfHeaderfileHash=3afdfa4ab5e80b5706ef4e6faaed8836577a00a119f8666cbe4f638636e8342d containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="writing header file" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 file-path=3224_next/ep_config.h identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct4_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct_any4_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct6_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Registered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct_any6_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct_any6_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct6_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct_any4_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Unregistered BPF map" path=/sys/fs/bpf/tc/globals/cilium_ct4_global subsys=bpf
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Preparing to compile BPF" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ regeneration-level=rewrite+load subsys=endpoint
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Compiling datapath" clang="clang version 10.0.0 (https://github.com/llvm/llvm-project.git 1f7986f03a28559bb4c27d14b49e18a4e6b66dfa)\nTarget: x86_64-unknown-linux-gnu\nThread model: posix\nInstalledDir: /usr/bin\n" debug=true llc="LLVM (http://llvm.org/):\n  LLVM version 10.0.0\n  Optimized build.\n  Default target: x86_64-unknown-linux-gnu\n  Host CPU: skylake\n\n  Registered Targets:\n    bpf   - BPF (host endian)\n    bpfeb - BPF (big endian)\n    bpfel - BPF (little endian)\n" subsys=datapath-loader
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="Launching compiler" args="[-emit-llvm -g -O2 -target bpf -std=gnu89 -nostdinc -D__NR_CPUS__=4 -Wall -Wextra -Werror -Wshadow -Wno-address-of-packed-member -Wno-unknown-warning-option -Wno-gnu-variable-sized-type-not-at-end -Wdeclaration-after-statement -Wimplicit-int-conversion -Wenum-conversion -I/var/run/cilium/state/globals -I/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311 -I/var/lib/cilium/bpf -I/var/lib/cilium/bpf/include -c /var/lib/cilium/bpf/bpf_lxc.c -o -]" subsys=datapath-loader target=clang
Mar 20 18:40:26 runtime cilium-agent[26447]: level=info msg="Waiting for all endpoints' go routines to be stopped." subsys=daemon
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="stopping EventQueue" name=endpoint-3224 subsys=eventqueue
Mar 20 18:40:26 runtime cilium-agent[26447]: level=debug msg="stopping EventQueue" name=endpoint-2602 subsys=eventqueue
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Controller func execution time: 13.861µs" name=ipcache-inject-labels subsys=controller uuid=d577d98d-78e1-42ac-b061-640786a0bd0d
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Controller run failed" consecutiveErrors=3 error="failed to inject labels into ipcache: k8s cache not fully synced" name=ipcache-inject-labels subsys=controller uuid=d577d98d-78e1-42ac-b061-640786a0bd0d
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Cannot find socket" error="stat /var/run/cilium/health.sock: no such file or directory" file-path=/var/run/cilium/health.sock subsys=cilium-health-launcher
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Skipping probe for address" ipAddr=10.15.20.90 nodeName=runtime primary=false subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Skipping probe for address" ipAddr="f00d::a0f:0:0:c0d3" nodeName=runtime primary=false subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Probing for connectivity to node" ipAddr=10.0.2.15 nodeName=runtime primary=true protocol=http subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Probing for connectivity to node" ipAddr="fd04::1" nodeName=runtime primary=true protocol=http subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Probing for connectivity to node" ipAddr=10.15.88.105 nodeName=runtime primary=false protocol=http subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Probing for connectivity to node" ipAddr="f00d::a0f:0:0:e9ac" nodeName=runtime primary=false protocol=http subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Greeting host" host="http://10.0.2.15:4240" ipAddr=10.0.2.15 nodeName=runtime path="Via L3" subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Greeting successful" host="http://10.0.2.15:4240" ipAddr=10.0.2.15 nodeName=runtime path="Via L3" rtt="777.751µs" subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Greeting host" host="http://[fd04::1]:4240" ipAddr="fd04::1" nodeName=runtime path="Via L3" subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Greeting successful" host="http://[fd04::1]:4240" ipAddr="fd04::1" nodeName=runtime path="Via L3" rtt="353.881µs" subsys=health-server
Mar 20 18:40:27 runtime cilium-agent[26447]: level=debug msg="Greeting host" host="http://10.15.88.105:4240" ipAddr=10.15.88.105 nodeName=runtime path="Via L3" subsys=health-server
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="Launching compiler" args="[-emit-llvm -g -O2 -target bpf -std=gnu89 -nostdinc -D__NR_CPUS__=4 -Wall -Wextra -Werror -Wshadow -Wno-address-of-packed-member -Wno-unknown-warning-option -Wno-gnu-variable-sized-type-not-at-end -Wdeclaration-after-statement -Wimplicit-int-conversion -Wenum-conversion -I/var/run/cilium/state/globals -I/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311 -I/var/lib/cilium/bpf -I/var/lib/cilium/bpf/include -c /var/lib/cilium/bpf/bpf_lxc.c -o -]" subsys=datapath-loader target=clang
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="Cannot find socket" error="stat /var/run/cilium/health.sock: no such file or directory" file-path=/var/run/cilium/health.sock subsys=cilium-health-launcher
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="Load 1-min: 2.39 5-min: 2.62 15min: 1.25" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="Memory: Total: 7948 Used: 713 (8.98%) Free: 1261 Buffers: 65 Cached: 5907" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="Swap: Total: 4095 Used: 0 (0.00%) Free: 4095" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME systemd STATUS [sleep] PID 1 CPU: 2.11% MEM: 0.16% CMDLINE: /sbin/init autoinstall MEM-EXT: RSS: 12 VMS: 165 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME dockerd STATUS [sleep] PID 859 CPU: 5.61% MEM: 1.28% CMDLINE: /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock MEM-EXT: RSS: 101 VMS: 1568 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME snapd STATUS [sleep] PID 2166 CPU: 1.34% MEM: 0.52% CMDLINE: /usr/lib/snapd/snapd MEM-EXT: RSS: 41 VMS: 1213 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME systemd STATUS [sleep] PID 26353 CPU: 1.02% MEM: 0.12% CMDLINE: /lib/systemd/systemd --user MEM-EXT: RSS: 9 VMS: 18 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME cilium-agent STATUS [sleep] PID 26447 CPU: 8.68% MEM: 1.08% CMDLINE: /usr/bin/cilium-agent --kvstore consul --kvstore-opt consul.address=127.0.0.1:8500 --debug --pprof=true --log-system-load --exclude-local-address=172.17.0.1/32 --exclude-local-address=192.168.254.254/32 --exclude-local-address=fdff::ff/128 MEM-EXT: RSS: 85 VMS: 765 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME clang STATUS [zombie] PID 27112 CPU: 9.72% MEM: 0.00% CMDLINE:  MEM-EXT: RSS: 0 VMS: 0 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME clang STATUS [zombie] PID 27162 CPU: 2.43% MEM: 0.00% CMDLINE:  MEM-EXT: RSS: 0 VMS: 0 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:28 runtime cilium-agent[26447]: level=debug msg="NAME clang STATUS [running] PID 27182 CPU: 88.60% MEM: 0.74% CMDLINE: clang -emit-llvm -g -O2 -target bpf -std=gnu89 -nostdinc -D__NR_CPUS__=4 -Wall -Wextra -Werror -Wshadow -Wno-address-of-packed-member -Wno-unknown-warning-option -Wno-gnu-variable-sized-type-not-at-end -Wdeclaration-after-statement -Wimplicit-int-conversion -Wenum-conversion -I/var/run/cilium/state/globals -I/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311 -I/var/lib/cilium/bpf -I/var/lib/cilium/bpf/include -c /var/lib/cilium/bpf/bpf_lxc.c -o - MEM-EXT: RSS: 58 VMS: 100 Data: 0 Stack: 0 Locked: 0 Swap: 0" subsys=loadinfo type=background
Mar 20 18:40:29 runtime cilium-agent[26447]: level=debug msg="Controller func execution time: 94.423µs" name=metricsmap-bpf-prom-sync subsys=controller uuid=81d393b3-c625-419d-bf9a-c654fdede4e0
Mar 20 18:40:29 runtime cilium-agent[26447]: level=debug msg="Cannot find socket" error="stat /var/run/cilium/health.sock: no such file or directory" file-path=/var/run/cilium/health.sock subsys=cilium-health-launcher
Mar 20 18:40:29 runtime cilium-agent[26447]: level=debug msg="Launching compiler" args="[-E -O2 -target bpf -std=gnu89 -nostdinc -D__NR_CPUS__=4 -Wall -Wextra -Werror -Wshadow -Wno-address-of-packed-member -Wno-unknown-warning-option -Wno-gnu-variable-sized-type-not-at-end -Wdeclaration-after-statement -Wimplicit-int-conversion -Wenum-conversion -I/var/run/cilium/state/globals -I/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311 -I/var/lib/cilium/bpf -I/var/lib/cilium/bpf/include -c /var/lib/cilium/bpf/bpf_lxc.c -o /var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311/bpf_lxc.c]" subsys=datapath-loader target=clang
Mar 20 18:40:29 runtime cilium-agent[26447]: level=debug msg="Launching compiler" args="[-emit-llvm -g -O2 -target bpf -std=gnu89 -nostdinc -D__NR_CPUS__=4 -Wall -Wextra -Werror -Wshadow -Wno-address-of-packed-member -Wno-unknown-warning-option -Wno-gnu-variable-sized-type-not-at-end -Wdeclaration-after-statement -Wimplicit-int-conversion -Wenum-conversion -I/var/run/cilium/state/globals -I/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311 -I/var/lib/cilium/bpf -I/var/lib/cilium/bpf/include -c /var/lib/cilium/bpf/bpf_lxc.c -o -]" subsys=datapath-loader target=clang
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Controller func execution time: 11.382µs" name=ipcache-inject-labels subsys=controller uuid=d577d98d-78e1-42ac-b061-640786a0bd0d
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Controller run failed" consecutiveErrors=4 error="failed to inject labels into ipcache: k8s cache not fully synced" name=ipcache-inject-labels subsys=controller uuid=d577d98d-78e1-42ac-b061-640786a0bd0d
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Cannot find socket" error="stat /var/run/cilium/health.sock: no such file or directory" file-path=/var/run/cilium/health.sock subsys=cilium-health-launcher
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Controller func execution time: 26.516µs" name=bpf-map-sync-cilium_ipcache subsys=controller uuid=f6754282-92bb-4da4-a5bf-1a594904d863
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Controller func execution time: 16.023µs" name=bpf-map-sync-cilium_lxc subsys=controller uuid=f6bc8bed-5d2a-4f71-9505-76c9b8efc249
Mar 20 18:40:30 runtime cilium-agent[26447]: level=info msg="Compiled new BPF template" BPFCompilationTime=4.288296534s file-path=/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311/bpf_lxc.o subsys=datapath-loader
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Watching template path" file-path=/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311/bpf_lxc.o subsys=datapath-loader
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping " subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113616" subsys=elf symbol=HOST_IP_1
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol referring to unknown section id 32" subsys=elf symbol=HOST_IP_2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol referring to unknown section id 32" subsys=elf symbol=HOST_IP_3
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113620" subsys=elf symbol=HOST_IP_4
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113580" subsys=elf symbol=LXC_ID
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113576" subsys=elf symbol=LXC_IPV4
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113560" subsys=elf symbol=LXC_IP_1
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113564" subsys=elf symbol=LXC_IP_2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113568" subsys=elf symbol=LXC_IP_3
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113572" subsys=elf symbol=LXC_IP_4
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113584" subsys=elf symbol=NODE_MAC_1
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113588" subsys=elf symbol=NODE_MAC_2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113600" subsys=elf symbol=POLICY_VERDICT_LOG_FILTER
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113604" subsys=elf symbol=ROUTER_IP_1
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol referring to unknown section id 32" subsys=elf symbol=ROUTER_IP_2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113608" subsys=elf symbol=ROUTER_IP_3
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113612" subsys=elf symbol=ROUTER_IP_4
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113592" subsys=elf symbol=SECLABEL
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found variable with offset 113596" subsys=elf symbol=SECLABEL_NB
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol referring to unknown section id 35" subsys=elf symbol=____license
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping __send_drop_notify" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 938887" subsys=elf symbol=cilium_call_policy
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 943699" subsys=elf symbol=cilium_calls_65535
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939391" subsys=elf symbol=cilium_ct4_global
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939351" subsys=elf symbol=cilium_ct6_global
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939369" subsys=elf symbol=cilium_ct_any4_global
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939329" subsys=elf symbol=cilium_ct_any6_global
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939422" subsys=elf symbol=cilium_encrypt_state
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939077" subsys=elf symbol=cilium_events
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939488" subsys=elf symbol=cilium_ipcache
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939137" subsys=elf symbol=cilium_ipv4_frag_datagrams
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 945962" subsys=elf symbol=cilium_lb4_backends_v2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939054" subsys=elf symbol=cilium_lb4_reverse_nat
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 945916" subsys=elf symbol=cilium_lb4_services_v2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 945939" subsys=elf symbol=cilium_lb6_backends_v2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939031" subsys=elf symbol=cilium_lb6_reverse_nat
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 945893" subsys=elf symbol=cilium_lb6_services_v2
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939533" subsys=elf symbol=cilium_lxc
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939197" subsys=elf symbol=cilium_metrics
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 943679" subsys=elf symbol=cilium_policy_65535
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939164" subsys=elf symbol=cilium_signals
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found symbol with offset 939295" subsys=elf symbol=cilium_tunnel_map
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping handle_policy" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping handle_to_container" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping handle_xgress" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_handle_arp" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_handle_ipv4" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_handle_ipv6" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_icmp6_handle_ns" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_icmp6_send_echo_reply" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_icmp6_send_time_exceeded" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_ipv4_policy" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_ipv4_to_endpoint" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_ipv6_policy" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Skipping tail_ipv6_to_endpoint" subsys=elf
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 938978" subsys=elf symbol=.BTF.ext
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939183" subsys=elf symbol=.debug_ranges
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939247" subsys=elf symbol=to-container
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939264" subsys=elf symbol=from-container
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939317" subsys=elf symbol=.debug_info
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939413" subsys=elf symbol=1/0xffff
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939459" subsys=elf symbol=.debug_line
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939475" subsys=elf symbol=.debug_frame
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939548" subsys=elf symbol=.debug_loc
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 939630" subsys=elf symbol=.BTF
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 942200" subsys=elf symbol=2/7
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 943104" subsys=elf symbol=2/6
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 944048" subsys=elf symbol=2/5
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 944940" subsys=elf symbol=2/14
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 945013" subsys=elf symbol=2/4
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 945777" subsys=elf symbol=2/13
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 945889" subsys=elf symbol=2/3
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 946665" subsys=elf symbol=2/12
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 947557" subsys=elf symbol=2/11
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 947650" subsys=elf symbol=2/1
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Found section with offset 948480" subsys=elf symbol=2/10
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Finished writing ELF" error="<nil>" new-elf-path=3224_next/bpf_lxc.o subsys=elf template-path=/var/run/cilium/state/templates/5df7bf984d26695ebd3c2240ef2db91952f8d89468314cd66e1fe0fd335ba311/bpf_lxc.o
Mar 20 18:40:30 runtime cilium-agent[26447]: level=warning msg="JoinEP: Failed to load program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 error="Failed to replace Qdisc for lxc_health: Link not found" file-path=3224_next/bpf_lxc.o identity=4 ipv4= ipv6= k8sPodName=/ subsys=datapath-loader veth=lxc_health
Mar 20 18:40:30 runtime cilium-agent[26447]: level=error msg="Error while rewriting endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 error="Failed to replace Qdisc for lxc_health: Link not found" identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Reverting endpoint changes after BPF regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Reverting proxy redirect removals" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Finished reverting proxy redirect removals" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Reverting xDS network policy update" subsys=envoy-manager
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="preparing new cache transaction: upserting 0 entries, deleting 1 entries" subsys=xds xdsCachedVersion=8 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="deleting resource from cache" subsys=xds xdsCachedVersion=8 xdsResourceName=10.15.88.105 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsCachedVersion=8 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="preparing new cache transaction: upserting 0 entries, deleting 1 entries" subsys=xds xdsCachedVersion=9 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="deleting resource from cache" subsys=xds xdsCachedVersion=9 xdsResourceName="f00d::a0f:0:0:e9ac" xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="committing cache transaction and notifying of new version" subsys=xds xdsCachedVersion=9 xdsTypeURL=type.googleapis.com/cilium.NetworkPolicy
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Finished reverting xDS network policy update" subsys=envoy-manager
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Reverting proxy redirect additions" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Finished reverting proxy redirect additions" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Finished reverting endpoint changes after BPF regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=warning msg="generating BPF for endpoint failed, keeping stale directory." containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 file-path=3224_next_fail identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="removing directory" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 directory=3224_next_fail endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="removing directory" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 directory=3224_next endpointID=3224 identity=4 ipv4= ipv6= k8sPodName=/ subsys=endpoint
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Completed endpoint regeneration with no pending regeneration requests" code=OK containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 endpointState=ready identity=4 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=0
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Goroutine took lock for more than 0.10 seconds" goroutine=" 1837" seconds=4.296576369 subsys=lock-lib
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 [running]:
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 runtime/debug.Stack()
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/usr/local/go/src/runtime/debug/stack.go:24 +0x65
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/lock.(*internalMutex).Unlock(0xc000b10290)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/lock/lock_debug.go:87 +0x92
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/endpoint.(*Endpoint).regenerate(0xc000b10000, 0xc000290a00)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go:408 +0x953
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/endpoint.(*EndpointRegenerationEvent).Handle(0xc001b20310, 0xc0016c2b00)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/endpoint/events.go:53 +0x345
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).run.func1()
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:245 +0x13b
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 sync.(*Once).doSlow(0x4, 0x43f585)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/usr/local/go/src/sync/once.go:68 +0xd2
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 sync.(*Once).Do(...)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/usr/local/go/src/sync/once.go:59
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).run(0x9249)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:233 +0x45
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 created by github.com/cilium/cilium/pkg/eventqueue.(*EventQueue).Run
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 1837 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/eventqueue/eventqueue.go:229 +0x7b
Mar 20 18:40:30 runtime cilium-agent[26447]: level=warning msg="Regeneration of endpoint failed" bpfCompilation=4.288296534s bpfLoadProg="219.375µs" bpfWaitForELF=4.288499133s bpfWriteELF="909.671µs" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 error="Failed to replace Qdisc for lxc_health: Link not found" identity=4 ipv4= ipv6= k8sPodName=/ mapSync="79.54µs" policyCalculation="463.489µs" prepareBuild="606.446µs" proxyConfiguration="18.238µs" proxyPolicyCalculation="341.896µs" proxyWaitForAck=0s reason="retrying regeneration" subsys=endpoint total=4.296724168s waitingForCTClean=2.694054ms waitingForLock="21.571µs"
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Error regenerating endpoint: Failed to replace Qdisc for lxc_health: Link not found" code=Failure containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3224 endpointState=ready identity=4 ipv4= ipv6= k8sPodName=/ policyRevision=0 subsys=endpoint type=200
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="EventQueue event processing statistics" eventConsumeOffQueueWaitTime="26.325µs" eventEnqueueWaitTime="4.845µs" eventHandlingDuration=4.296988583s eventType="*endpoint.EndpointRegenerationEvent" name=endpoint-3224 subsys=eventqueue
Mar 20 18:40:30 runtime cilium-agent[26447]: level=info msg="All endpoints' goroutines stopped." subsys=daemon
Mar 20 18:40:30 runtime cilium-agent[26447]: level=debug msg="Goroutine took lock for more than 0.10 seconds" goroutine=" 56" seconds=4.2749613 subsys=lock-lib
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 [running]:
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 runtime/debug.Stack()
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 	/usr/local/go/src/runtime/debug/stack.go:24 +0x65
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 github.com/cilium/cilium/pkg/lock.(*internalMutex).Unlock(0x48068b8)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 	/home/vagrant/go/src/github.com/cilium/cilium/pkg/lock/lock_debug.go:87 +0x92
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 github.com/cilium/cilium/daemon/cmd.(*cleanupFuncList).Run(0x48068a0)
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 	/home/vagrant/go/src/github.com/cilium/cilium/daemon/cmd/cleanup.go:62 +0xcc
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 github.com/cilium/cilium/daemon/cmd.(*daemonCleanup).registerSigHandler.func1()
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 	/home/vagrant/go/src/github.com/cilium/cilium/daemon/cmd/cleanup.go:80 +0x229
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 created by github.com/cilium/cilium/daemon/cmd.(*daemonCleanup).registerSigHandler
Mar 20 18:40:30 runtime cilium-agent[26447]: goroutine 56 	/home/vagrant/go/src/github.com/cilium/cilium/daemon/cmd/cleanup.go:68 +0x145
Mar 20 18:40:30 runtime systemd[1]: cilium.service: Succeeded.
Mar 20 18:40:30 runtime systemd[1]: Stopped cilium.

Anything else?
No response
Code of Conduct

[X] I agree to follow this project's Code of Conduct

Hey, I'd like to take this up. But I don't know where to start. Could you please guide me or provide documentation to which i can refer to?

@aanm this is the condition in which the endpoint regeneration is canceled. https://github.com/cilium/cilium/blob/master/pkg/endpoint/policy.go#L612
And do we need to use that condition inside the functions like  handlerInterrupt for changing the behavior of the logs.
Could you please inform whether this is reasonable or not? If not could you please provide code pointers related to where the changes are needed.

@NikhilSharmaWe this might have been fixed already but if it is not then that would be a good proposal.

authors: NikhilSharmaWe SweetGeneral aanm jrajahalme

repo: cilium/cilium


text:
CFP: Add a value for overriding the namespace in the helm chart.

Cilium Feature Proposal
Thanks for taking time to make a feature request for Cilium! If you have usage questions, please try the slack channel and see the FAQ first.
Is your feature request related to a problem?
Adding cilium to an umbrella helm chart but installing to a different namespace isn't currently possible.
Describe the feature you'd like
Adding namespaceOverride: "" to values.yaml (similar to how bitnami makes their helm charts) or how cert-manager adds the 'namespace' value.
bitnami example:
## @param namespaceOverride String to fully override common.names.namespace
##
namespaceOverride: ""

cert-manager example:
# This namespace allows you to define where the services will be installed into
# if not set then they will use the namespace of the release
# This is helpful when installing cert manager as a chart dependency (sub chart)
namespace: ""

(Optional) Describe your proposed solution
I think either the way bitnami or cert-manager handles it works well and could be useful.

thanks, this seems reasonable to me :100:

/assign

@basit9958 Assigned issue to you, feel free to reach out in #development Cilium slack channel.

Can I working on this? I see https://github.com/cilium/cilium/pull/20828 has not seen any activity.

Hi created a PR for a fixing this, can someone please review, was unable to use the @cilium/helm to tag codeowners.

ANy progress on this one? I hate deploying stuff to kube-system..

Any progress on this one? I hate deploying stuff to kube-system...

@pentago Same here!


text:
CI: Premature GitHub status report in case of matrix jobs

Some GitHub Actions jobs which use the matrix feature are reporting their status prematurely.
The first matrix job which finishes successfully is going to report "success" to the PR status - which might be too early due to potentially failing parallel jobs within the same matrix. (failure will be reported correctly afterwards, but in the meantime the status shouldn't be succeeded)
status reporting should "never" be reported within the matrix itself and moved to the end into a separate job - whether pending at the beginning or the actual result at the end (but especially success)
examples:

https://github.com/cilium/cilium/blob/master/.github/workflows/tests-datapath-verifier.yaml
https://github.com/cilium/cilium/blob/master/.github/workflows/conformance-datapath.yaml

Assign to me?

@spacewander Feel free to send a pull request for it. And don't hesitate to ask for help in Slack #development if needed.

authors: mhofstetter pchaigno spacewander


text:
CI: ci-multicluster-1.11: Installation and Connectivity Test (8, vxlan, ipv4, ipsec, iptables): Enable Hubble step fails

CI failure

Copy-paste the output the test failure.

✅ Hubble was successfully enabled!
    /¯¯\
 /¯¯\__/¯¯\    Cilium:             3 errors
 \__/¯¯\__/    Operator:           OK
 /¯¯\__/¯¯\    Envoy DaemonSet:    disabled (using embedded mode)
 \__/¯¯\__/    Hubble Relay:       1 errors, 1 warnings
    \__/       ClusterMesh:        disabled

Deployment        hubble-relay       Desired: 1, Unavailable: 1/1
DaemonSet         cilium             Desired: 2, Ready: 2/2, Available: 2/2
Deployment        cilium-operator    Desired: 1, Ready: 1/1, Available: 1/1
Containers:       cilium             Running: 2
                  cilium-operator    Running: 1
                  hubble-relay       Pending: 1
Cluster Pods:     4/4 managed by Cilium
Image versions    cilium             quay.io/cilium/cilium-ci:cc0ebab9c40eb3f0a3228ddfce6bd443d8ef9342: 2
                  cilium-operator    quay.io/cilium/operator-generic-ci:cc0ebab9c40eb3f0a3228ddfce6bd443d8ef9342: 1
                  hubble-relay       quay.io/cilium/hubble-relay-ci:cc0ebab9c40eb3f0a3228ddfce6bd443d8ef9342: 1
Errors:           hubble-relay       hubble-relay                     1 pods of Deployment hubble-relay are not ready
                  cilium             cilium-g8ng4                     controller cilium-health-ep is failing since 1m32s (2x): Get "http://10.242.0.191:4240/hello": dial tcp 10.242.0.191:4240: connect: no route to host
                  cilium             cilium-t92fn                     controller cilium-health-ep is failing since 24s (5x): Get "http://10.242.1.38:4240/hello": dial tcp 10.242.1.38:4240: connect: no route to host
                  cilium             cilium-t92fn                     controller endpoint-1321-regeneration-recovery is failing since 12s (1x): regeneration recovery failed
Warnings:         hubble-relay       hubble-relay-54b48dcf58-zpshd    pod is pending

Error: Unable to determine status:  timeout while waiting for status to become successful: context deadline exceeded
Error: Process completed with exit code 1.

Upload the zip file generated from that test failure.

cilium-junits.zip
cilium-sysdumps-8.zip

Copy-paste the link of the CI build where that test failure has happen.

https://github.com/cilium/cilium/actions/runs/5225869123/jobs/9435888751

endpoint regeneration is failing.
2023-06-09T20:42:30.791330758Z level=error msg="endpoint regeneration failed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1322 error="Failed to load prog with tc: exit status 1" identity=100959 ipv4= ipv6= k8sPodName=/ subsys=endpoint
2023-06-09T20:42:31.911278187Z level=error msg="Command execution failed" cmd="[tc filter replace dev lxc51609058407d ingress prio 1 handle 1 bpf da obj 825_next/bpf_lxc.o sec from-container]" error="exit status 1" subsys=datapath-loader
2023-06-09T20:42:31.911483187Z level=warning msg="libbpf: load bpf program failed: Argument list too long" subsys=datapath-loader

maybe https://github.com/cilium/cilium/pull/25993 will fix this issue. i'm not sure.


text:
argocd can't use cilium 1.16.2 helm version when k8sServiceHost set to auto

Is there an existing issue for this?

[X] I have searched the existing issues

Version
equal or higher than v1.16.0 and lower than v1.17.0
What happened?
Setting k8sServiceHost=auto when installing using argocd returns this error -
Unable to save changes: application spec for cilium is invalid: InvalidSpecError: Unable to generate manifests in : rpc error: code = Unknown desc = `helm template . --name-template cilium --namespace kube-system --kube-version 1.30 --values /tmp/e1416a6f-b6c5-4a8c-bb6c-dcd4aa41abc2 <api versions removed> --include-crds` failed exit status 1: Error: template: cilium/templates/cilium-operator/deployment.yaml:141:20: executing "cilium/templates/cilium-operator/deployment.yaml" at <include "k8sServiceHost" .>: error calling include: template: cilium/templates/_helpers.tpl:120:37: executing "k8sServiceHost" at <$configmap.data>: wrong type for value; expected map[string]interface {}; got interface {} Use --debug flag to render out invalid YAML

How can we reproduce the issue?
you can just run helm template cilium x-helm-virtual/cilium --set k8sServiceHost=auto to reproduce this error
Cilium Version
1.16.2
Kernel Version
5+
Kubernetes Version
1.30.3
Regression
No response
Sysdump
No response
Relevant log output
No response
Anything else?
No response
Cilium Users Document

[X] Are you a user of Cilium? Please add yourself to the Users doc

Code of Conduct

[X] I agree to follow this project's Code of Conduct

Hi @kreeuwijk, does this look familiar to you at all?

Why would you use Argo to deploy Cilium?

Why would you use Argo to deploy Cilium?

We use it to enforce configuration. It’s deployed with a helm command beforehand.

The part about Argo doesn't seem that interesting to me, but what's more interesting is that this seems reproducible directly with Helm. I'm wondering why this occurs and whether there should be other helm settings also applied or if it's a bug in the helm chart.
$ helm template cilium cilium/cilium --set k8sServiceHost=auto
Error: template: cilium/templates/cilium-operator/deployment.yaml:141:20: executing "cilium/templates/cilium-operator/deployment.yaml" at <include "k8sServiceHost" .>: error calling include: template: cilium/templates/_helpers.tpl:120:37: executing "k8sServiceHost" at <$configmap.data>: wrong type for value; expected map[string]interface {}; got interface {}

Use --debug flag to render out invalid YAML

(The reason I pinged is you were the author on https://github.com/cilium/cilium/pull/31885, so you probably have the best understanding of how the feature is intended to work).

Yes, I'll take a look at this. There must be a schema issue somewhere

@joestringer can you confirm this worked normally in Cilium 1.16.0?

Never mind I can replicate it with 1.16.0 as well

So what's failing is this piece in _helpers.tpl:
$configmap := (lookup "v1" "ConfigMap" "kube-public" "cluster-info")

Which does a lookup in the target cluster to attempt to find the cluster-info configmap. However this doesn't work in the helm template command as lookup functions don't work locally on the client. If you ran it on the server, you'll see that it does work.
helm template . --set k8sServiceHost=auto --dry-run=server

I see there's been requests to add this option to ArgoCD, but it looks like that never got approved.
I submitted a fix here

authors: joestringer kotyara85 kreeuwijk


text:
test: Extend coredns clusterrole with additional resource permissions

Commit didn't add permissions for endpointslices resource to the
coredns cluterrole on k8s < 1.20. As a result, core-dns deployments
failed on the these versions with the error -
2021-11-30T14:09:43.349414540Z E1130 14:09:43.349292 1 reflector.go:138] pkg/mod/k8s.io/client-go@v0.20.2/tools/cache/reflector.go:167: Failed to watch *v1beta1.EndpointSlice: failed to list *v1beta1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:kube-system:coredns" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope
Note : Hold off onto enabling the feature gate on older versions. - https://github.com/cilium/cilium/blob/7ed8a42ffe92887583fb901a753f6c327e623f05/test/provision/k8s_install.sh#L302-L302.
Fixes: 398d55cd
Fixes: https://github.com/cilium/cilium/issues/18086
Signed-off-by: Aditi Ghag aditi@cilium.io

test-only --focus="K8sServicesTest.*" --k8s_version=1.19 --kernel_version="49"

I've triggered --focus="K8sServicesTest.*" with k8s 1.16, kernel 4.19 and k8s 1.19, kernel 4.19 manually - https://jenkins.cilium.io/view/PR/job/Cilium-PR-Tests-Kernel-Focus/375/console
https://jenkins.cilium.io/view/PR/job/Cilium-PR-Tests-Kernel-Focus/377/console

test-only --focus="K8sServicesTest.*" --k8s_version=1.19 --kernel_version="49"
Edit : Passed - https://jenkins.cilium.io/job/Cilium-PR-Tests-Kernel-Focus/374/console

I've triggered --focus="K8sServicesTest.*" with k8s 1.16, kernel 4.19 and k8s 1.19, kernel 4.19 manually - https://jenkins.cilium.io/view/PR/job/Cilium-PR-Tests-Kernel-Focus/380/ https://jenkins.cilium.io/view/PR/job/Cilium-PR-Tests-Kernel-Focus/381/

All focused tests have passed.

Ah, I think the commit description might be malformed as its missing a link to the commit it fixes after Fixes:?

Fixed.

^^ Given that the bug is only on master and we're not likely to track this down, I don't think it's necessary to fix this up in git history. Good to merge.

FYI for generating the "fixes:" tag for commits, typically we will use this format:
git log -1 --pretty="%h (\"%s\")"

This way, if the sha is ambiguous (eg because it's too short and the first N characters are identical between two different git commit shas, which can happen over time as the number of commits grows), then we can clearly disambiguate which underlying commit is being referenced here.

Noted. I simply copied it from the IDE git window so it ended up copying just the first N characters.

authors: aditighag joestringer


text:
Run rmCTEntries of on policy change

Clean up Connection Tracking entries when a new policy no longer allows it. #1667, #1823

Fixes #1667
Fixes #1823
The tests are a little verbose but I'll clean them up once before merging.

Kafka doesn't contain runtime tests for the policy enforcement. The L7 tests written on 21-ct-clean-up are for the HTTP proxy. Should we merge this PR and later on add the L7 tests for the ct clean-up for kafka?

Closing due jenkins is not picking this PR


text:
Fix helm chart incompatible types for comparison

Please ensure your pull request adheres to the following guidelines:

[x] For first time contributors, read Submitting a pull request
[x] All code is covered by unit and/or runtime tests where feasible.
[x] All commits contain a well written commit description including a title,
description and a Fixes: #XXX line if the commit addresses a particular
GitHub issue.
[x] If your commit description contains a Fixes: <commit-id> tag, then
please add the commit author[s] as reviewer[s] to this issue.
[x] All commits are signed off. See the section Developer’s Certificate of Origin
[x] Provide a title or release-note blurb suitable for the release notes.
[x] Are you a user of Cilium? Please add yourself to the Users doc
[x] Thanks for contributing!

Fixes: #32024
Fix helm chart incompatible types for comparison

/test

authors: gandro lou-lan


text:
recorder: hive cell (recorder & rest api handler)

This PR introduces a new Hive Cell for the PCAP recorder that provides the recorder and the corresponding rest api handler.

/test

rebased to main to get some fixes for Gateway API checks.

/test

rebased to main to resolve conflicts.

/test


text:
gha: fix case mismatch in conformance clustermesh ipFamily variable

Although GHA matrix variables appear to be case insensitive, and the workflow is working as expected, let's ensure consistency in the variable name to prevent possible confusion.
Reported-by: Joe Stringer joe@cilium.io

/test


text:
cilium-dbg: implement bpf frag list command

Implement cilium-dbg bpf frag list command to list IPV4 datagram fragments.
Please ensure your pull request adheres to the following guidelines:

[x] For first time contributors, read Submitting a pull request
[x] All code is covered by unit and/or runtime tests where feasible.
[x] All commits contain a well written commit description including a title,
description and a Fixes: #XXX line if the commit addresses a particular
GitHub issue.
[x] If your commit description contains a Fixes: <commit-id> tag, then
please add the commit author[s] as reviewer[s] to this issue.
[x] All commits are signed off. See the section Developer’s Certificate of Origin
[x] Provide a title or release-note blurb suitable for the release notes.
[ ] Are you a user of Cilium? Please add yourself to the Users doc
[x] Thanks for contributing!

Implement cilium-dbg bpf frag list command to list IPv4 datagram fragments.
Fixes: #34348
Implement `cilium-dbg bpf frag list` command to list IPV4 datagram fragments.

Example output:

/test

Thanks!
I don't have a strong preference between the two options. If I had to pick one, I'd maybe select B), because I find it easier to associate the right port with the right IP (with option A, we have SRC DEST SRC DEST, and the source port ends up next to the destination address so we've got to visually “jump” over a column to find the port corresponding to an address).
I don't remember how we print addresses/ports with other commands though. Consistency is always good to have.

But i am not sure why the address and port are separated in two structs FragmentKey and FragmentValue, what's the consideration behind this?

But i am not sure why the address and port are separated in two structs FragmentKey and FragmentValue, what's the consideration behind this?

For IPv4 fragmentation, we don't reassemble datagrams while packets are in transit. What we need to support fragmentation is a way to retrieve the src/dest port for each fragment, so that we can correctly apply L3/L4 policy rules on the datagram; and then we leave reassembly to the destination endpoint. So we have an eBPF map where we add a new entry each time we see the first fragment for a datagram, and then we use this entry for follow-up fragments to retrieve the port numbers. More details in https://github.com/cilium/cilium/pull/10264#issue-568369766. Does this answer the question?

Updated.

/test

/test

/test

See some errors failing CI failures related to Envoy versions, there's been commits merged in the past couple days that seem related.  @Huweicai Maybe rebase and rerun tests?

OK, I messed up :facepalm:. I tried to rebase your PR for you, since we need someone with permissions to run the /test anyway.
I did git push -f Huweicai main, when I should have used git push -f Huweicai/main:main. So instead of pushing the rebased branch, I pushed Cilium's main onto your branch. As a consequence, the PR closed, because there's no difference between your updated branch and Cilium's main. Oopsies. I tried to update your branch again pushing the correct reference, but I can't update it anymore, I think because the PR is closed. And I can't reopen the PR, because there's no new commit on the branch. Oopsies again.
So I've kept a backup of your branch before rebasing, and I pushed it at https://github.com/qmonnet/cilium/tree/Huweicai/main_backup, which you should also have locally. I also pushed my rebased version at https://github.com/qmonnet/cilium/tree/Huweicai/main_rebased, but we probably don't need it given that main will keep moving. The way to fix my mistake, I believe, would be for your to rebase and push your changes to your own main branch again. After that, we should be able to re-open the PR.
Sincere apologies for the trouble :disappointed:.

OK, I messed up 🤦. I tried to rebase your PR for you, since we need someone with permissions to run the /test anyway.
I did git push -f Huweicai main, when I should have used git push -f Huweicai/main:main. So instead of pushing the rebased branch, I pushed Cilium's main onto your branch. As a consequence, the PR closed, because there's no difference between your updated branch and Cilium's main. Oopsies. I tried to update your branch again pushing the correct reference, but I can't update it anymore, I think because the PR is closed. And I can't reopen the PR, because there's no new commit on the branch. Oopsies again.
So I've kept a backup of your branch before rebasing, and I pushed it at https://github.com/qmonnet/cilium/tree/Huweicai/main_backup, which you should also have locally. I also pushed my rebased version at https://github.com/qmonnet/cilium/tree/Huweicai/main_rebased, but we probably don't need it given that main will keep moving. The way to fix my mistake, I believe, would be for your to rebase and push your changes to your own main branch again. After that, we should be able to re-open the PR.
Sincere apologies for the trouble 😞.

No problem, i have code in my local machine, i'll rebase and push it.

I re-pushed the code based on the latest commit, but it seems that there's no reopen button.
Should I create a new one?
https://github.com/Huweicai/cilium

/test

I could reopen now that you've updated your branch. OK thanks! I won't touch your branch anymore :sweat_smile:

authors: Huweicai qmonnet tommyp1ckles


text:
pkg/endpoint: fix owner merge conflict

2 non conflicting PRs got merged into master, the last PR break the
CI which was removing a function's attribute still used by the first
PR.
Fixes: b39cc1e38a (configuration: move TracingEnabled to pkg/option)
Signed-off-by: André Martins andre@cilium.io

test-me-please