github.com/verrazzano/verrazzano@v1.7.1/tools/vz/pkg/internal/test/cluster/ingress-oci-limit/cluster-snapshot/verrazzano-ingress-nginx/logs.txt (about) 1 # Copyright (c) 2023, 2024, Oracle and/or its affiliates. 2 # Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl. 3 4 ==== START logs for container istio-init of pod ingress-nginx/ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll ==== 5 2022-05-19T20:36:08.074493Z info Istio iptables environment: 6 ENVOY_PORT= 7 INBOUND_CAPTURE_PORT= 8 ISTIO_INBOUND_INTERCEPTION_MODE= 9 ISTIO_INBOUND_TPROXY_ROUTE_TABLE= 10 ISTIO_INBOUND_PORTS= 11 ISTIO_OUTBOUND_PORTS= 12 ISTIO_LOCAL_EXCLUDE_PORTS= 13 ISTIO_EXCLUDE_INTERFACES= 14 ISTIO_SERVICE_CIDR= 15 ISTIO_SERVICE_EXCLUDE_CIDR= 16 ISTIO_META_DNS_CAPTURE= 17 INVALID_DROP= 18 19 2022-05-19T20:36:08.074570Z info Istio iptables variables: 20 PROXY_PORT=15001 21 PROXY_INBOUND_CAPTURE_PORT=15006 22 PROXY_TUNNEL_PORT=15008 23 PROXY_UID=1337 24 PROXY_GID=1337 25 INBOUND_INTERCEPTION_MODE=REDIRECT 26 INBOUND_TPROXY_MARK=1337 27 INBOUND_TPROXY_ROUTE_TABLE=133 28 INBOUND_PORTS_INCLUDE=* 29 INBOUND_PORTS_EXCLUDE=15090,15021,8080,15020 30 OUTBOUND_IP_RANGES_INCLUDE=* 31 OUTBOUND_IP_RANGES_EXCLUDE= 32 OUTBOUND_PORTS_INCLUDE= 33 OUTBOUND_PORTS_EXCLUDE= 34 KUBE_VIRT_INTERFACES= 35 ENABLE_INBOUND_IPV6=false 36 DNS_CAPTURE=false 37 DROP_INVALID=false 38 CAPTURE_ALL_DNS=false 39 DNS_SERVERS=[],[] 40 OUTPUT_PATH= 41 NETWORK_NAMESPACE= 42 CNI_MODE=false 43 EXCLUDE_INTERFACES= 44 45 2022-05-19T20:36:08.075357Z info Writing following contents to rules file: /tmp/iptables-rules-1652992568074667657.txt1434187187 46 * nat 47 -N ISTIO_INBOUND 48 -N ISTIO_REDIRECT 49 -N ISTIO_IN_REDIRECT 50 -N ISTIO_OUTPUT 51 -A ISTIO_INBOUND -p tcp --dport 15008 -j RETURN 52 -A ISTIO_REDIRECT -p tcp -j REDIRECT --to-ports 15001 53 -A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-ports 15006 54 -A PREROUTING -p tcp -j ISTIO_INBOUND 55 -A ISTIO_INBOUND -p tcp --dport 15090 -j RETURN 56 -A ISTIO_INBOUND -p tcp --dport 15021 -j RETURN 57 -A ISTIO_INBOUND -p tcp --dport 8080 -j RETURN 58 -A ISTIO_INBOUND -p tcp --dport 15020 -j RETURN 59 -A ISTIO_INBOUND -p tcp -j ISTIO_IN_REDIRECT 60 -A OUTPUT -p tcp -j ISTIO_OUTPUT 61 -A ISTIO_OUTPUT -o lo -s REDACTED-IP4-ADDRESS/32 -j RETURN 62 -A ISTIO_OUTPUT -o lo ! -d REDACTED-IP4-ADDRESS/32 -m owner --uid-owner 1337 -j ISTIO_IN_REDIRECT 63 -A ISTIO_OUTPUT -o lo -m owner ! --uid-owner 1337 -j RETURN 64 -A ISTIO_OUTPUT -m owner --uid-owner 1337 -j RETURN 65 -A ISTIO_OUTPUT -o lo ! -d REDACTED-IP4-ADDRESS/32 -m owner --gid-owner 1337 -j ISTIO_IN_REDIRECT 66 -A ISTIO_OUTPUT -o lo -m owner ! --gid-owner 1337 -j RETURN 67 -A ISTIO_OUTPUT -m owner --gid-owner 1337 -j RETURN 68 -A ISTIO_OUTPUT -d REDACTED-IP4-ADDRESS/32 -j RETURN 69 -A ISTIO_OUTPUT -j ISTIO_REDIRECT 70 COMMIT 71 2022-05-19T20:36:08.075420Z info Running command: iptables-restore --noflush /tmp/iptables-rules-1652992568074667657.txt1434187187 72 2022-05-19T20:36:08.091582Z info Writing following contents to rules file: /tmp/ip6tables-rules-1652992568091495869.txt495684863 73 74 2022-05-19T20:36:08.091629Z info Running command: ip6tables-restore --noflush /tmp/ip6tables-rules-1652992568091495869.txt495684863 75 2022-05-19T20:36:08.102684Z info Running command: iptables-save 76 2022-05-19T20:36:08.114672Z info Command output: 77 # Generated by iptables-save v1.4.21 on Thu May 19 20:36:08 2022 78 *nat 79 :PREROUTING ACCEPT [0:0] 80 :INPUT ACCEPT [0:0] 81 :OUTPUT ACCEPT [0:0] 82 :POSTROUTING ACCEPT [0:0] 83 :ISTIO_INBOUND - [0:0] 84 :ISTIO_IN_REDIRECT - [0:0] 85 :ISTIO_OUTPUT - [0:0] 86 :ISTIO_REDIRECT - [0:0] 87 -A PREROUTING -p tcp -j ISTIO_INBOUND 88 -A OUTPUT -p tcp -j ISTIO_OUTPUT 89 -A ISTIO_INBOUND -p tcp -m tcp --dport 15008 -j RETURN 90 -A ISTIO_INBOUND -p tcp -m tcp --dport 15090 -j RETURN 91 -A ISTIO_INBOUND -p tcp -m tcp --dport 15021 -j RETURN 92 -A ISTIO_INBOUND -p tcp -m tcp --dport 8080 -j RETURN 93 -A ISTIO_INBOUND -p tcp -m tcp --dport 15020 -j RETURN 94 -A ISTIO_INBOUND -p tcp -j ISTIO_IN_REDIRECT 95 -A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-ports 15006 96 -A ISTIO_OUTPUT -s REDACTED-IP4-ADDRESS/32 -o lo -j RETURN 97 -A ISTIO_OUTPUT ! -d REDACTED-IP4-ADDRESS/32 -o lo -m owner --uid-owner 1337 -j ISTIO_IN_REDIRECT 98 -A ISTIO_OUTPUT -o lo -m owner ! --uid-owner 1337 -j RETURN 99 -A ISTIO_OUTPUT -m owner --uid-owner 1337 -j RETURN 100 -A ISTIO_OUTPUT ! -d REDACTED-IP4-ADDRESS/32 -o lo -m owner --gid-owner 1337 -j ISTIO_IN_REDIRECT 101 -A ISTIO_OUTPUT -o lo -m owner ! --gid-owner 1337 -j RETURN 102 -A ISTIO_OUTPUT -m owner --gid-owner 1337 -j RETURN 103 -A ISTIO_OUTPUT -d REDACTED-IP4-ADDRESS/32 -j RETURN 104 -A ISTIO_OUTPUT -j ISTIO_REDIRECT 105 -A ISTIO_REDIRECT -p tcp -j REDIRECT --to-ports 15001 106 COMMIT 107 # Completed on Thu May 19 20:36:08 2022 108 109 ==== END logs for container istio-init of pod ingress-nginx/ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll ==== 110 ==== START logs for container ingress-nginx-default-backend of pod ingress-nginx/ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll ==== 111 ==== END logs for container ingress-nginx-default-backend of pod ingress-nginx/ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll ==== 112 ==== START logs for container istio-proxy of pod ingress-nginx/ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll ==== 113 2022-05-19T20:36:34.012947Z info FLAG: --concurrency="2" 114 2022-05-19T20:36:34.012992Z info FLAG: --domain="ingress-nginx.svc.cluster.local" 115 2022-05-19T20:36:34.013002Z info FLAG: --help="false" 116 2022-05-19T20:36:34.013008Z info FLAG: --log_as_json="false" 117 2022-05-19T20:36:34.013014Z info FLAG: --log_caller="" 118 2022-05-19T20:36:34.013020Z info FLAG: --log_output_level="default:info" 119 2022-05-19T20:36:34.013027Z info FLAG: --log_rotate="" 120 2022-05-19T20:36:34.013033Z info FLAG: --log_rotate_max_age="30" 121 2022-05-19T20:36:34.013039Z info FLAG: --log_rotate_max_backups="1000" 122 2022-05-19T20:36:34.013045Z info FLAG: --log_rotate_max_size="104857600" 123 2022-05-19T20:36:34.013051Z info FLAG: --log_stacktrace_level="default:none" 124 2022-05-19T20:36:34.013062Z info FLAG: --log_target="[stdout]" 125 2022-05-19T20:36:34.013069Z info FLAG: --meshConfig="./etc/istio/config/mesh" 126 2022-05-19T20:36:34.013074Z info FLAG: --outlierLogPath="" 127 2022-05-19T20:36:34.013079Z info FLAG: --proxyComponentLogLevel="misc:error" 128 2022-05-19T20:36:34.013085Z info FLAG: --proxyLogLevel="warning" 129 2022-05-19T20:36:34.013091Z info FLAG: --serviceCluster="istio-proxy" 130 2022-05-19T20:36:34.013096Z info FLAG: --stsPort="0" 131 2022-05-19T20:36:34.013102Z info FLAG: --templateFile="" 132 2022-05-19T20:36:34.013109Z info FLAG: --tokenManagerPlugin="GoogleTokenExchange" 133 2022-05-19T20:36:34.013117Z info FLAG: --vklog="0" 134 2022-05-19T20:36:34.013124Z info Version 1.13.2-f84f69d1028e874d568f2942c5bab5271fcdeda7-Clean 135 2022-05-19T20:36:34.016652Z info Proxy role ips=[REDACTED-IP4-ADDRESS fe80::1c34:fdff:fe21:54db] type=sidecar id=ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll.ingress-nginx domain=ingress-nginx.svc.cluster.local 136 2022-05-19T20:36:34.016775Z info Apply proxy config from env {} 137 138 2022-05-19T20:36:34.018843Z info Effective config: binaryPath: /usr/local/bin/envoy 139 concurrency: 2 140 configPath: ./etc/istio/proxy 141 controlPlaneAuthPolicy: MUTUAL_TLS 142 discoveryAddress: istiod.istio-system.svc:15012 143 drainDuration: 45s 144 parentShutdownDuration: 60s 145 proxyAdminPort: 15000 146 serviceCluster: istio-proxy 147 statNameLength: 189 148 statusPort: 15020 149 terminationDrainDuration: 5s 150 tracing: 151 zipkin: 152 address: zipkin.istio-system:9411 153 154 2022-05-19T20:36:34.018865Z info JWT policy is third-party-jwt 155 2022-05-19T20:36:34.055944Z info CA Endpoint istiod.istio-system.svc:15012, provider Citadel 156 2022-05-19T20:36:34.056011Z info Using CA istiod.istio-system.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem 157 2022-05-19T20:36:34.056145Z info citadelclient Citadel client using custom root cert: var/run/secrets/istio/root-cert.pem 158 2022-05-19T20:36:34.057231Z info Opening status port 15020 159 2022-05-19T20:36:34.100473Z info ads All caches have been synced up in 91.580134ms, marking server ready 160 2022-05-19T20:36:34.101227Z info sds SDS server for workload certificates started, listening on "etc/istio/proxy/SDS" 161 2022-05-19T20:36:34.101274Z info xdsproxy Initializing with upstream address "istiod.istio-system.svc:15012" and cluster "Kubernetes" 162 2022-05-19T20:36:34.103669Z info sds Starting SDS grpc server 163 2022-05-19T20:36:34.104301Z info Pilot SAN: [istiod.istio-system.svc] 164 2022-05-19T20:36:34.104644Z info starting Http service at REDACTED-IP4-ADDRESS:15004 165 2022-05-19T20:36:34.106653Z info Starting proxy agent 166 2022-05-19T20:36:34.106698Z info Epoch 0 starting 167 2022-05-19T20:36:34.106728Z info Envoy command: [-c etc/istio/proxy/envoy-rev0.json --restart-epoch 0 --drain-time-s 45 --drain-strategy immediate --parent-shutdown-time-s 60 --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --log-format %Y-%m-%dT%T.%fZ %l envoy %n %v -l warning --component-log-level misc:error --concurrency 2] 168 2022-05-19T20:36:34.262413Z info cache generated new workload certificate latency=160.723092ms ttl=23h59m59.737604953s 169 2022-05-19T20:36:34.262454Z info cache Root cert has changed, start rotating root cert 170 2022-05-19T20:36:34.262482Z info ads XDS: Incremental Pushing:0 ConnectedEndpoints:0 Version: 171 2022-05-19T20:36:34.262584Z info cache returned workload trust anchor from cache ttl=23h59m59.737419742s 172 2022-05-19T20:36:35.159254Z info xdsproxy connected to upstream XDS server: istiod.istio-system.svc:15012 173 2022-05-19T20:36:35.542804Z info ads ADS: new connection for node:ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll.ingress-nginx-1 174 2022-05-19T20:36:35.543859Z info cache returned workload trust anchor from cache ttl=23h59m58.456151243s 175 2022-05-19T20:36:35.544495Z info ads SDS: PUSH request for node:ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll.ingress-nginx resources:1 size:2.0kB resource:ROOTCA 176 2022-05-19T20:36:35.583064Z info ads ADS: new connection for node:ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll.ingress-nginx-2 177 2022-05-19T20:36:35.583204Z info cache returned workload certificate from cache ttl=23h59m58.416804176s 178 2022-05-19T20:36:35.583389Z info ads SDS: PUSH request for node:ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll.ingress-nginx resources:1 size:9.2kB resource:default 179 2022-05-19T20:36:37.008575Z info Readiness succeeded in 2.998641236s 180 2022-05-19T20:36:37.009059Z info Envoy proxy is ready 181 2022-05-19T21:04:08.385138Z info xdsproxy connected to upstream XDS server: istiod.istio-system.svc:15012 182 ==== END logs for container istio-proxy of pod ingress-nginx/ingress-controller-ingress-nginx-defaultbackend-56c5fbc6b88w5ll ====