# Cilium debug information

#### Cilium version

```
1.19.0-dev 471113da 2025-04-01T21:11:31+00:00 go version go1.24.5 linux/amd64
```


#### Endpoint list

```
ENDPOINT   POLICY (ingress)   POLICY (egress)   IDENTITY   LABELS (source:key[=value])                                                         IPv6                IPv4           STATUS   
           ENFORCEMENT        ENFORCEMENT                                                                                                                                         
573        Disabled           Disabled          1          k8s:node-role.kubernetes.io/control-plane                                                                              ready   
                                                           k8s:node.kubernetes.io/exclude-from-external-load-balancers                                                                    
                                                           reserved:host                                                                                                                  
584        Disabled           Disabled          20569      k8s:app=local-path-provisioner                                                      fd00:10:244::53f0   10.244.0.231   ready   
                                                           k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage                                              
                                                           k8s:io.cilium.k8s.policy.cluster=default                                                                                       
                                                           k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner-service-account                                                 
                                                           k8s:io.kubernetes.pod.namespace=local-path-storage                                                                             
687        Disabled           Disabled          8028       k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli                fd00:10:244::30cf   10.244.0.71    ready   
                                                           k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3                                                   
                                                           k8s:io.cilium.k8s.policy.cluster=default                                                                                       
                                                           k8s:io.cilium.k8s.policy.serviceaccount=client2                                                                                
                                                           k8s:io.kubernetes.pod.namespace=cilium-test-3                                                                                  
                                                           k8s:kind=client                                                                                                                
                                                           k8s:name=client2                                                                                                               
                                                           k8s:other=client                                                                                                               
727        Disabled           Disabled          51594      k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system          fd00:10:244::6f45   10.244.0.146   ready   
                                                           k8s:io.cilium.k8s.policy.cluster=default                                                                                       
                                                           k8s:io.cilium.k8s.policy.serviceaccount=coredns                                                                                
                                                           k8s:io.kubernetes.pod.namespace=kube-system                                                                                    
                                                           k8s:k8s-app=kube-dns                                                                                                           
813        Disabled           Disabled          56193      k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli                fd00:10:244::13d0   10.244.0.48    ready   
                                                           k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3                                                   
                                                           k8s:io.cilium.k8s.policy.cluster=default                                                                                       
                                                           k8s:io.cilium.k8s.policy.serviceaccount=client                                                                                 
                                                           k8s:io.kubernetes.pod.namespace=cilium-test-3                                                                                  
                                                           k8s:kind=client                                                                                                                
                                                           k8s:name=client                                                                                                                
1347       Disabled           Disabled          39871      k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli                fd00:10:244::450a   10.244.0.212   ready   
                                                           k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3                                                   
                                                           k8s:io.cilium.k8s.policy.cluster=default                                                                                       
                                                           k8s:io.cilium.k8s.policy.serviceaccount=echo-same-node                                                                         
                                                           k8s:io.kubernetes.pod.namespace=cilium-test-3                                                                                  
                                                           k8s:kind=echo                                                                                                                  
                                                           k8s:name=echo-same-node                                                                                                        
                                                           k8s:other=echo                                                                                                                 
2221       Disabled           Disabled          51594      k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system          fd00:10:244::ef5a   10.244.0.61    ready   
                                                           k8s:io.cilium.k8s.policy.cluster=default                                                                                       
                                                           k8s:io.cilium.k8s.policy.serviceaccount=coredns                                                                                
                                                           k8s:io.kubernetes.pod.namespace=kube-system                                                                                    
                                                           k8s:k8s-app=kube-dns                                                                                                           
2599       Disabled           Disabled          4          reserved:health                                                                     fd00:10:244::1b6b   10.244.0.98    ready   
3974       Disabled           Disabled          14126      k8s:first=echo                                                                      fd00:10:244::c16f   10.244.0.39    ready   
                                                           k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli                                                           
                                                           k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-4                                                   
                                                           k8s:io.cilium.k8s.policy.cluster=default                                                                                       
                                                           k8s:io.cilium.k8s.policy.serviceaccount=echo-other-node                                                                        
                                                           k8s:io.kubernetes.pod.namespace=cilium-test-4                                                                                  
                                                           k8s:kind=echo                                                                                                                  
                                                           k8s:name=echo-other-node                                                                                                       
```

#### BPF Policy Get 573

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES   PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    0       0         0        
Allow    Egress      0          ANY          NONE         disabled    0       0         0        

```


#### BPF CT List 573

```
Invalid argument: unknown type 573
```


#### Endpoint Get 573

```
[
  {
    "id": 573,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-573-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "b6680e13-834d-4d54-aa15-653cb610236a"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-573",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.161Z",
            "success-count": 4
          },
          "uuid": "28e7387b-0602-48d3-adfb-7e2fa9e785d1"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-573",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:53.653Z",
            "success-count": 2
          },
          "uuid": "37609d1c-54e3-4bce-a8cf-6ce1135b16df"
        }
      ],
      "external-identifiers": {
        "pod-name": "/"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 1,
        "labels": [
          "reserved:host",
          "k8s:node-role.kubernetes.io/control-plane",
          "k8s:node.kubernetes.io/exclude-from-external-load-balancers"
        ]
      },
      "labels": {
        "derived": [
          "k8s:node-role.kubernetes.io/control-plane",
          "k8s:node.kubernetes.io/exclude-from-external-load-balancers",
          "reserved:host"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:node-role.kubernetes.io/control-plane",
          "k8s:node.kubernetes.io/exclude-from-external-load-balancers",
          "reserved:host"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:21:48Z"
        }
      ],
      "networking": {
        "addressing": [
          {}
        ],
        "host-mac": "e2:55:7d:b3:37:ca",
        "interface-index": 6,
        "interface-name": "cilium_host",
        "mac": "e2:55:7d:b3:37:ca"
      },
      "policy": {
        "proxy-statistics": [],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 1,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0
          ],
          "build": 245,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 1,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 245
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 573

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 573

```
Timestamp              Status   State                   Message
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:07:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:07:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:06:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:06:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:06:02Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:06:00Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:57Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:05:57Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:05:56Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:05:53Z   OK       waiting-to-regenerate   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:49Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:05:49Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:05:49Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 1

```
ID   LABELS
1    reserved:host
     reserved:kube-apiserver

```


#### BPF Policy Get 584

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES   PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    0       0         0        
Allow    Ingress     1          ANY          NONE         disabled    0       0         0        
Allow    Egress      0          ANY          NONE         disabled    10390   109       0        

```


#### BPF CT List 584

```
Invalid argument: unknown type 584
```


#### Endpoint Get 584

```
[
  {
    "id": 584,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-584-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "04f4b440-1269-43f8-a32e-2459288bf225"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-584",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.395Z",
            "success-count": 4
          },
          "uuid": "62ea5555-06a5-4eba-979c-9639cf8faa6a"
        },
        {
          "configuration": {
            "error-retry": true
          },
          "name": "resolve-labels-local-path-storage/local-path-provisioner-59f7658548-p54sp",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:05:49.388Z",
            "success-count": 1
          },
          "uuid": "c6e2449a-af74-4bb7-af0f-3ce137e69d70"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv4-identity-mapping (584)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.506Z",
            "success-count": 4
          },
          "uuid": "2e9c7734-c3fe-41b6-a3d5-96027da837f8"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv6-identity-mapping (584)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.546Z",
            "success-count": 4
          },
          "uuid": "86123a90-27f0-41e0-bdda-93fb86fa638b"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-584",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:56.589Z",
            "success-count": 2
          },
          "uuid": "80bd26d3-9d98-4d15-b2bd-91c2c68241a4"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "10s"
          },
          "name": "sync-to-k8s-ciliumendpoint (584)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:39.695Z",
            "success-count": 109
          },
          "uuid": "cb0c2d80-136a-4bd8-a2cb-18a937d5e640"
        }
      ],
      "external-identifiers": {
        "cni-attachment-id": "e4ca885e2a6389e12bc257e1fe81a6bb5cb330b8c078fcc739ae64c5cd1fb82c:eth0",
        "container-id": "e4ca885e2a6389e12bc257e1fe81a6bb5cb330b8c078fcc739ae64c5cd1fb82c",
        "k8s-namespace": "local-path-storage",
        "k8s-pod-name": "local-path-provisioner-59f7658548-p54sp",
        "pod-name": "local-path-storage/local-path-provisioner-59f7658548-p54sp"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 20569,
        "labels": [
          "k8s:app=local-path-provisioner",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner-service-account",
          "k8s:io.kubernetes.pod.namespace=local-path-storage"
        ]
      },
      "labels": {
        "derived": [
          "k8s:pod-template-hash=59f7658548"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:app=local-path-provisioner",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner-service-account",
          "k8s:io.kubernetes.pod.namespace=local-path-storage"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:21:48Z"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.231",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::53f0",
            "ipv6-pool-name": "default"
          }
        ],
        "container-interface-name": "eth0",
        "host-mac": "86:8c:63:84:52:d0",
        "interface-index": 12,
        "interface-name": "lxc1a8acae2fe21",
        "mac": "7e:4c:bb:3a:67:78"
      },
      "policy": {
        "proxy-policy-revision": 245,
        "proxy-statistics": [],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 20569,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 245,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 20569,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 245
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 584

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 584

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:07:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:07:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:06:03Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:06:03Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:06:00Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:06:00Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:57Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:05:57Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:05:56Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:05:56Z   OK       waiting-to-regenerate   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:49Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:05:49Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:05:49Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 20569

```
ID      LABELS
20569   k8s:app=local-path-provisioner
        k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage
        k8s:io.cilium.k8s.policy.cluster=default
        k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner-service-account
        k8s:io.kubernetes.pod.namespace=local-path-storage

```


#### BPF Policy Get 687

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES   PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    0       0         0        
Allow    Ingress     1          ANY          NONE         disabled    0       0         0        
Allow    Egress      0          ANY          NONE         disabled    0       0         0        

```


#### BPF CT List 687

```
Invalid argument: unknown type 687
```


#### Endpoint Get 687

```
[
  {
    "id": 687,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-687-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "263ee457-2a2b-4484-a7c4-278ea6266cd2"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-687",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:18:49.840Z",
            "success-count": 3
          },
          "uuid": "c996ad43-e7ee-4077-8adc-d83428f82cbd"
        },
        {
          "configuration": {
            "error-retry": true
          },
          "name": "resolve-labels-cilium-test-3/client2-66475877c6-cvrcd",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:08:49.815Z",
            "success-count": 1
          },
          "uuid": "e640d2a1-eca0-40b1-bc33-3909d33aa72d"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv4-identity-mapping (687)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:18:49.913Z",
            "success-count": 3
          },
          "uuid": "f787fd62-048c-4292-bc41-80d9f9658d67"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv6-identity-mapping (687)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:18:50.035Z",
            "success-count": 3
          },
          "uuid": "bb044099-3560-4e92-8efe-90c15b38d9c1"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-687",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:08:52.256Z",
            "success-count": 1
          },
          "uuid": "551cefb3-c592-4736-b573-2ea9a0ab2cd6"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "10s"
          },
          "name": "sync-to-k8s-ciliumendpoint (687)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:40.047Z",
            "success-count": 91
          },
          "uuid": "07437a9a-7abc-4343-a3a4-f1c0e165f5cb"
        }
      ],
      "external-identifiers": {
        "cni-attachment-id": "c013bb46ab434230c0943554ebf7f4d78e79c406129af3c47b7ce5fba30c074e:eth0",
        "container-id": "c013bb46ab434230c0943554ebf7f4d78e79c406129af3c47b7ce5fba30c074e",
        "k8s-namespace": "cilium-test-3",
        "k8s-pod-name": "client2-66475877c6-cvrcd",
        "pod-name": "cilium-test-3/client2-66475877c6-cvrcd"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 8028,
        "labels": [
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=client2",
          "k8s:io.kubernetes.pod.namespace=cilium-test-3",
          "k8s:kind=client",
          "k8s:name=client2",
          "k8s:other=client"
        ]
      },
      "labels": {
        "derived": [
          "k8s:pod-template-hash=66475877c6"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=client2",
          "k8s:io.kubernetes.pod.namespace=cilium-test-3",
          "k8s:kind=client",
          "k8s:name=client2",
          "k8s:other=client"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:23:48Z"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.71",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::30cf",
            "ipv6-pool-name": "default"
          }
        ],
        "container-interface-name": "eth0",
        "host-mac": "9e:44:26:70:a7:f2",
        "interface-index": 20,
        "interface-name": "lxc3f7c770e3b7f",
        "mac": "7e:0d:7a:22:4b:6d"
      },
      "policy": {
        "proxy-policy-revision": 247,
        "proxy-statistics": [
          {
            "location": "egress",
            "port": 53,
            "protocol": "dns",
            "statistics": {
              "requests": {
                "forwarded": 10,
                "received": 10
              },
              "responses": {
                "forwarded": 10,
                "received": 10
              }
            }
          },
          {
            "location": "egress",
            "port": 53,
            "protocol": "dns",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "egress",
            "port": 64,
            "protocol": "http",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "egress",
            "port": 80,
            "protocol": "http",
            "statistics": {
              "requests": {
                "forwarded": 2,
                "received": 2
              },
              "responses": {
                "forwarded": 2,
                "received": 2
              }
            }
          },
          {
            "location": "egress",
            "port": 4096,
            "protocol": "http",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "egress",
            "port": 5353,
            "protocol": "dns",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "egress",
            "port": 5353,
            "protocol": "dns",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "egress",
            "port": 8080,
            "protocol": "http",
            "statistics": {
              "requests": {
                "forwarded": 8,
                "received": 8
              },
              "responses": {
                "forwarded": 8,
                "received": 8
              }
            }
          }
        ],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 8028,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 8028,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 687

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 687

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:14:28Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:28Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:05Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:05Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:05Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:05Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:05Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:05Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:05Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:05Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:02Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:02Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:01Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:01Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:01Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:01Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:24Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:13:24Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:24Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:13:24Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:13:24Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:13:24Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:24Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:13:24Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:13:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:13:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:18Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:13:18Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:13:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:13:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:18Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:13:18Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:36Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:36Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:36Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:36Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:36Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:36Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:36Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:36Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:26Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:26Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:18Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:18Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:14Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:14Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:13Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:13Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:13Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:13Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:12Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:12Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:06Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:06Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:06Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:06Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:06Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:06Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:05Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:05Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:02Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:02Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:01Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:01Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:50Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:50Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:50Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:50Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:50Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:50Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:49Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:41Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:41Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:41Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:41Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:23Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:23Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:22Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:22Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:17Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:17Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:02Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:02Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:58Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:58Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:58Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:58Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:55Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:55Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:55Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:55Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:29Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:29Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:29Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:29Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:46Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:46Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:46Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:46Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:08:52Z   OK       ready                   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:08:52Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:08:49Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:08:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:08:49Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:08:49Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 8028

```
ID     LABELS
8028   k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli
       k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3
       k8s:io.cilium.k8s.policy.cluster=default
       k8s:io.cilium.k8s.policy.serviceaccount=client2
       k8s:io.kubernetes.pod.namespace=cilium-test-3
       k8s:kind=client
       k8s:name=client2
       k8s:other=client

```


#### BPF Policy Get 727

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES    PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    14395    154       0        
Allow    Ingress     1          ANY          NONE         disabled    102737   1183      0        
Allow    Egress      0          ANY          NONE         disabled    35170    357       0        

```


#### BPF CT List 727

```
Invalid argument: unknown type 727
```


#### Endpoint Get 727

```
[
  {
    "id": 727,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-727-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "16241669-9aa8-4d89-8012-c31ba14e095f"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-727",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.372Z",
            "success-count": 4
          },
          "uuid": "cd58cc81-ab85-4619-8c46-a410ac61a566"
        },
        {
          "configuration": {
            "error-retry": true
          },
          "name": "resolve-labels-kube-system/coredns-674b8bbfcf-fb7xs",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:05:49.366Z",
            "success-count": 1
          },
          "uuid": "235b951c-016b-494c-aae7-3ddee59756c0"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv4-identity-mapping (727)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.389Z",
            "success-count": 4
          },
          "uuid": "cbcd5731-da1a-43b2-8c06-64e1062ac7e1"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv6-identity-mapping (727)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.385Z",
            "success-count": 4
          },
          "uuid": "ef644d60-b27f-48b9-ac06-3dccf45ddc16"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-727",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:56.756Z",
            "success-count": 2
          },
          "uuid": "d60e74a2-6243-46bf-ad43-bb5adda7c420"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "10s"
          },
          "name": "sync-to-k8s-ciliumendpoint (727)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:49.697Z",
            "success-count": 110
          },
          "uuid": "800e93d6-3657-4106-b3b9-da8e83d0fe73"
        }
      ],
      "external-identifiers": {
        "cni-attachment-id": "4dc7c04ef9cc711a298a7662d3ca72e441fcc88b0d3b80a4717d1b5bd1ad3c32:eth0",
        "container-id": "4dc7c04ef9cc711a298a7662d3ca72e441fcc88b0d3b80a4717d1b5bd1ad3c32",
        "k8s-namespace": "kube-system",
        "k8s-pod-name": "coredns-674b8bbfcf-fb7xs",
        "pod-name": "kube-system/coredns-674b8bbfcf-fb7xs"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 51594,
        "labels": [
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=coredns",
          "k8s:io.kubernetes.pod.namespace=kube-system",
          "k8s:k8s-app=kube-dns"
        ]
      },
      "labels": {
        "derived": [
          "k8s:pod-template-hash=674b8bbfcf"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=coredns",
          "k8s:io.kubernetes.pod.namespace=kube-system",
          "k8s:k8s-app=kube-dns"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:23:48Z"
        }
      ],
      "namedPorts": [
        {
          "name": "dns",
          "port": 53,
          "protocol": "UDP"
        },
        {
          "name": "dns-tcp",
          "port": 53,
          "protocol": "TCP"
        },
        {
          "name": "metrics",
          "port": 9153,
          "protocol": "TCP"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.146",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::6f45",
            "ipv6-pool-name": "default"
          }
        ],
        "container-interface-name": "eth0",
        "host-mac": "36:9e:15:eb:56:d7",
        "interface-index": 14,
        "interface-name": "lxc7afd48ab5778",
        "mac": "72:d4:1e:d7:5c:d3"
      },
      "policy": {
        "proxy-policy-revision": 247,
        "proxy-statistics": [],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 51594,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 51594,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 727

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 727

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Skipped duplicate endpoint regeneration level no-rebuild trigger due to selector policy has changed because of another endpoint with the same identity
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Skipped duplicate endpoint regeneration level no-rebuild trigger due to selector policy has changed because of another endpoint with the same identity
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: selector policy has changed because of another endpoint with the same identity)
2025-08-01T19:07:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:07:48Z   OK       regenerating            Regenerating endpoint: selector policy has changed because of another endpoint with the same identity
2025-08-01T19:07:48Z   OK       waiting-to-regenerate   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:07:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to selector policy has changed because of another endpoint with the same identity
2025-08-01T19:07:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:06:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:06:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:06:00Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:06:00Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:58Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:05:58Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:05:57Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:05:56Z   OK       waiting-to-regenerate   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:49Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:05:49Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:05:49Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 51594

```
ID      LABELS
51594   k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system
        k8s:io.cilium.k8s.policy.cluster=default
        k8s:io.cilium.k8s.policy.serviceaccount=coredns
        k8s:io.kubernetes.pod.namespace=kube-system
        k8s:k8s-app=kube-dns

```


#### BPF Policy Get 813

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES   PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    0       0         0        
Allow    Ingress     1          ANY          NONE         disabled    0       0         0        
Allow    Egress      0          ANY          NONE         disabled    0       0         0        

```


#### BPF CT List 813

```
Invalid argument: unknown type 813
```


#### Endpoint Get 813

```
[
  {
    "id": 813,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-813-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "137650f4-9b24-4c4b-b76d-a4903ebc089c"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-813",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.580Z",
            "success-count": 4
          },
          "uuid": "a9377a24-3988-4d40-8a17-ff5583ffa04d"
        },
        {
          "configuration": {
            "error-retry": true
          },
          "name": "resolve-labels-cilium-test-3/client-645b68dcf7-2vsxj",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:08:48.547Z",
            "success-count": 1
          },
          "uuid": "f04b264a-03df-4346-a600-483513d552a3"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv4-identity-mapping (813)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.892Z",
            "success-count": 4
          },
          "uuid": "6bdb6d12-7994-42a5-bdac-ab0e867c82dd"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv6-identity-mapping (813)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.892Z",
            "success-count": 4
          },
          "uuid": "e1ebc059-92b7-419c-bcbb-bbec26db1569"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-813",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:50.941Z",
            "success-count": 2
          },
          "uuid": "7a000079-8f0d-463b-8bb9-1951f39424a0"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "10s"
          },
          "name": "sync-to-k8s-ciliumendpoint (813)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.882Z",
            "success-count": 92
          },
          "uuid": "63bc1582-d5b3-44ef-a543-9163361d20e2"
        }
      ],
      "external-identifiers": {
        "cni-attachment-id": "299ca5b8af130767ab5fb6d5e6a79a297f0b3999e32b4c547f3c85389f3d5f1c:eth0",
        "container-id": "299ca5b8af130767ab5fb6d5e6a79a297f0b3999e32b4c547f3c85389f3d5f1c",
        "k8s-namespace": "cilium-test-3",
        "k8s-pod-name": "client-645b68dcf7-2vsxj",
        "pod-name": "cilium-test-3/client-645b68dcf7-2vsxj"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 56193,
        "labels": [
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=client",
          "k8s:io.kubernetes.pod.namespace=cilium-test-3",
          "k8s:kind=client",
          "k8s:name=client"
        ]
      },
      "labels": {
        "derived": [
          "k8s:pod-template-hash=645b68dcf7"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=client",
          "k8s:io.kubernetes.pod.namespace=cilium-test-3",
          "k8s:kind=client",
          "k8s:name=client"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:23:48Z"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.48",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::13d0",
            "ipv6-pool-name": "default"
          }
        ],
        "container-interface-name": "eth0",
        "host-mac": "9e:35:f3:d5:14:f5",
        "interface-index": 18,
        "interface-name": "lxc7b18163dd5e3",
        "mac": "7e:41:1c:65:87:18"
      },
      "policy": {
        "proxy-policy-revision": 247,
        "proxy-statistics": [
          {
            "location": "egress",
            "port": 53,
            "protocol": "dns",
            "statistics": {
              "requests": {
                "forwarded": 10,
                "received": 10
              },
              "responses": {
                "forwarded": 10,
                "received": 10
              }
            }
          },
          {
            "location": "egress",
            "port": 53,
            "protocol": "dns",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "egress",
            "port": 5353,
            "protocol": "dns",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "egress",
            "port": 5353,
            "protocol": "dns",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          }
        ],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 56193,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 56193,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 813

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 813

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:14:28Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:28Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:05Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:05Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:05Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:05Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:05Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:05Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:05Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:05Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:14:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:14:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:14:01Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:14:01Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:24Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:13:24Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:24Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:13:24Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:13:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:13:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:18Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:13:18Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:36Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:36Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:36Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:36Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:26Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:26Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:26Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:26Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:18Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:18Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:14Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:14Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:13Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:13Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:12Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:12Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:12Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:12Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:06Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:06Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:06Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:06Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:06Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:06Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:05Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:05Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:02Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:02Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:01Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:01Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:50Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:50Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:50Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:50Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:50Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:50Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:49Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:41Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:41Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:41Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:41Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:23Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:23Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:22Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:22Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:17Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:17Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:02Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:02Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:58Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:58Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:58Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:58Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:55Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:55Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:55Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:55Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:29Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:29Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:29Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:29Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:46Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:46Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:46Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:46Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:08:50Z   OK       ready                   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:08:50Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:08:48Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:08:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:08:48Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:08:48Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 56193

```
ID      LABELS
56193   k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli
        k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3
        k8s:io.cilium.k8s.policy.cluster=default
        k8s:io.cilium.k8s.policy.serviceaccount=client
        k8s:io.kubernetes.pod.namespace=cilium-test-3
        k8s:kind=client
        k8s:name=client

```


#### BPF Policy Get 1347

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES    PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    2496     20        0        
Allow    Ingress     1          ANY          NONE         disabled    880341   10247     0        
Allow    Egress      0          ANY          NONE         disabled    0        0         0        

```


#### BPF CT List 1347

```
Invalid argument: unknown type 1347
```


#### Endpoint Get 1347

```
[
  {
    "id": 1347,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-1347-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "6f531246-e808-4dfb-a5e6-15a530631454"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-1347",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.360Z",
            "success-count": 4
          },
          "uuid": "d7cbd9ed-f459-41da-ab6f-55b5101caec1"
        },
        {
          "configuration": {
            "error-retry": true
          },
          "name": "resolve-labels-cilium-test-3/echo-same-node-5f44c8d48c-czmfm",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:08:48.309Z",
            "success-count": 1
          },
          "uuid": "a9a98eac-7cdc-478d-a33d-5fe08400b4e8"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv4-identity-mapping (1347)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.487Z",
            "success-count": 4
          },
          "uuid": "42773f6f-bc43-4932-a3ea-84e2134c396b"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv6-identity-mapping (1347)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.487Z",
            "success-count": 4
          },
          "uuid": "92ed489a-f7e7-45d3-ac03-069bb96cda74"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-1347",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:49.909Z",
            "success-count": 2
          },
          "uuid": "3e5579a6-a8e5-4b47-b33e-b762a3e33db5"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "10s"
          },
          "name": "sync-to-k8s-ciliumendpoint (1347)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:48.580Z",
            "success-count": 92
          },
          "uuid": "1999ef10-5e92-46f1-a00f-c20d362a8114"
        }
      ],
      "external-identifiers": {
        "cni-attachment-id": "ac176d4539ff69c7ed6199664d7c3b3754aedfbdddeb11e2ca25c17680b5c209:eth0",
        "container-id": "ac176d4539ff69c7ed6199664d7c3b3754aedfbdddeb11e2ca25c17680b5c209",
        "k8s-namespace": "cilium-test-3",
        "k8s-pod-name": "echo-same-node-5f44c8d48c-czmfm",
        "pod-name": "cilium-test-3/echo-same-node-5f44c8d48c-czmfm"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 39871,
        "labels": [
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=echo-same-node",
          "k8s:io.kubernetes.pod.namespace=cilium-test-3",
          "k8s:kind=echo",
          "k8s:name=echo-same-node",
          "k8s:other=echo"
        ]
      },
      "labels": {
        "derived": [
          "k8s:pod-template-hash=5f44c8d48c"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=echo-same-node",
          "k8s:io.kubernetes.pod.namespace=cilium-test-3",
          "k8s:kind=echo",
          "k8s:name=echo-same-node",
          "k8s:other=echo"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:23:48Z"
        }
      ],
      "namedPorts": [
        {
          "name": "dns-53",
          "port": 53,
          "protocol": "TCP"
        },
        {
          "name": "dns-udp-53",
          "port": 53,
          "protocol": "UDP"
        },
        {
          "name": "http-8080",
          "port": 8080,
          "protocol": "TCP"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.212",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::450a",
            "ipv6-pool-name": "default"
          }
        ],
        "container-interface-name": "eth0",
        "host-mac": "c6:b8:39:ee:01:92",
        "interface-index": 16,
        "interface-name": "lxc5f105d2efc92",
        "mac": "4e:f1:d6:f5:f6:1b"
      },
      "policy": {
        "proxy-policy-revision": 247,
        "proxy-statistics": [],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 39871,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 39871,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 1347

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 1347

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:12:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:27Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:27Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:26Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:26Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:18Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:18Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:14Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:14Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:13Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:13Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:13Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:13Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:12Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:12Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:06Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:06Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:06Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:06Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:06Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:06Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:05Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:05Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:02Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:02Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:12:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:12:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:12:01Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:12:01Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:50Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:50Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:50Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:50Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:50Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:50Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:49Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:10:53Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:53Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:53Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:53Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:33Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:33Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:33Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:33Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:29Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:29Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:29Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:29Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:46Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:46Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:46Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:46Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:18Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:18Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:17Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:17Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:08:49Z   OK       ready                   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:08:49Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:08:48Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:08:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:08:48Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:08:48Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 39871

```
ID      LABELS
39871   k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli
        k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-3
        k8s:io.cilium.k8s.policy.cluster=default
        k8s:io.cilium.k8s.policy.serviceaccount=echo-same-node
        k8s:io.kubernetes.pod.namespace=cilium-test-3
        k8s:kind=echo
        k8s:name=echo-same-node
        k8s:other=echo

```


#### BPF Policy Get 2221

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES    PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    12485    135       0        
Allow    Ingress     1          ANY          NONE         disabled    104100   1205      0        
Allow    Egress      0          ANY          NONE         disabled    35713    363       0        

```


#### BPF CT List 2221

```
Invalid argument: unknown type 2221
```


#### Endpoint Get 2221

```
[
  {
    "id": 2221,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-2221-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "a426ab8f-555b-4e56-b438-2f656503e583"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-2221",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.316Z",
            "success-count": 4
          },
          "uuid": "5545aba7-5335-40e2-ab76-01d86a0988bc"
        },
        {
          "configuration": {
            "error-retry": true
          },
          "name": "resolve-labels-kube-system/coredns-674b8bbfcf-xdwfq",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:05:49.310Z",
            "success-count": 1
          },
          "uuid": "7522258f-4bca-4828-a58f-01edc360429f"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv4-identity-mapping (2221)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.345Z",
            "success-count": 4
          },
          "uuid": "de71816c-8bb5-48c5-a5c2-35085dc4e704"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv6-identity-mapping (2221)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:49.348Z",
            "success-count": 4
          },
          "uuid": "b797c638-946e-4fb6-a722-e50e756dc719"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-2221",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:57.007Z",
            "success-count": 2
          },
          "uuid": "13740c26-54f8-4990-8cf6-e68f35fa1edc"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "10s"
          },
          "name": "sync-to-k8s-ciliumendpoint (2221)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:49.678Z",
            "success-count": 110
          },
          "uuid": "44ee2234-32b1-4ef6-b7c1-0a5eaa0e0a31"
        }
      ],
      "external-identifiers": {
        "cni-attachment-id": "64a32053e99ec003ef32720d0c7e60800413e2452a18894eed8c7346acba7836:eth0",
        "container-id": "64a32053e99ec003ef32720d0c7e60800413e2452a18894eed8c7346acba7836",
        "k8s-namespace": "kube-system",
        "k8s-pod-name": "coredns-674b8bbfcf-xdwfq",
        "pod-name": "kube-system/coredns-674b8bbfcf-xdwfq"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 51594,
        "labels": [
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=coredns",
          "k8s:io.kubernetes.pod.namespace=kube-system",
          "k8s:k8s-app=kube-dns"
        ]
      },
      "labels": {
        "derived": [
          "k8s:pod-template-hash=674b8bbfcf"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=coredns",
          "k8s:io.kubernetes.pod.namespace=kube-system",
          "k8s:k8s-app=kube-dns"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: selector policy has changed because of another endpoint with the same identity)",
          "state": "ready",
          "timestamp": "2025-08-01T19:23:48Z"
        }
      ],
      "namedPorts": [
        {
          "name": "dns",
          "port": 53,
          "protocol": "UDP"
        },
        {
          "name": "dns-tcp",
          "port": 53,
          "protocol": "TCP"
        },
        {
          "name": "metrics",
          "port": 9153,
          "protocol": "TCP"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.61",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::ef5a",
            "ipv6-pool-name": "default"
          }
        ],
        "container-interface-name": "eth0",
        "host-mac": "76:29:1a:d1:27:b0",
        "interface-index": 10,
        "interface-name": "lxc668833626524",
        "mac": "fe:78:2a:a5:24:62"
      },
      "policy": {
        "proxy-policy-revision": 247,
        "proxy-statistics": [],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 51594,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 51594,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 2221

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 2221

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: selector policy has changed because of another endpoint with the same identity)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: selector policy has changed because of another endpoint with the same identity
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to selector policy has changed because of another endpoint with the same identity
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Skipped duplicate endpoint regeneration level no-rebuild trigger due to selector policy has changed because of another endpoint with the same identity
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Skipped duplicate endpoint regeneration level no-rebuild trigger due to selector policy has changed because of another endpoint with the same identity
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: selector policy has changed because of another endpoint with the same identity)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: selector policy has changed because of another endpoint with the same identity
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to selector policy has changed because of another endpoint with the same identity
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:07:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:07:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:06:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:06:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:06:00Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:06:00Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:58Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:05:58Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:05:57Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:05:57Z   OK       waiting-to-regenerate   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:49Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:05:49Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:05:49Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:05:49Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 51594

```
ID      LABELS
51594   k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system
        k8s:io.cilium.k8s.policy.cluster=default
        k8s:io.cilium.k8s.policy.serviceaccount=coredns
        k8s:io.kubernetes.pod.namespace=kube-system
        k8s:k8s-app=kube-dns

```


#### BPF Policy Get 2599

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES   PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    27884   326       0        
Allow    Ingress     1          ANY          NONE         disabled    14026   155       0        
Allow    Egress      0          ANY          NONE         disabled    6234    74        0        

```


#### BPF CT List 2599

```
Invalid argument: unknown type 2599
```


#### Endpoint Get 2599

```
[
  {
    "id": 2599,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-2599-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "77aa3950-034a-4c52-bde3-5c78efdbdcfa"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-2599",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:50.219Z",
            "success-count": 4
          },
          "uuid": "c2d483b1-2e3c-46dd-829e-8e6479e7ff13"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-2599",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:20:57.117Z",
            "success-count": 2
          },
          "uuid": "a5b8d182-b775-490b-9509-497a57898999"
        }
      ],
      "external-identifiers": {
        "container-name": "cilium-health",
        "pod-name": "/"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 4,
        "labels": [
          "reserved:health"
        ]
      },
      "labels": {
        "realized": {},
        "security-relevant": [
          "reserved:health"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:23:48Z"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.98",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::1b6b",
            "ipv6-pool-name": "default"
          }
        ],
        "host-mac": "4a:8a:7a:89:9b:8d",
        "interface-index": 8,
        "interface-name": "lxc_health",
        "mac": "f6:33:86:1b:31:3c"
      },
      "policy": {
        "proxy-policy-revision": 247,
        "proxy-statistics": [],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 4,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 4,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 2599

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 2599

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:07:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:07:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:07:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:06:02Z   OK       ready                   Successfully regenerated endpoint program (Reason: Configuration or devices changed)
2025-08-01T19:06:02Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:06:00Z   OK       regenerating            Regenerating endpoint: Configuration or devices changed
2025-08-01T19:06:00Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to Configuration or devices changed
2025-08-01T19:05:57Z   OK       ready                   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:05:57Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:05:53Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:05:50Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:05:50Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:05:49Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 4

```
ID   LABELS
4    reserved:health

```


#### BPF Policy Get 3974

```
POLICY   DIRECTION   IDENTITY   PORT/PROTO   PROXY PORT   AUTH TYPE   BYTES    PACKETS   PREFIX   
Allow    Ingress     0          ANY          NONE         disabled    4531     46        0        
Allow    Ingress     1          ANY          NONE         disabled    886251   10377     0        
Allow    Egress      0          ANY          NONE         disabled    0        0         0        

```


#### BPF CT List 3974

```
Invalid argument: unknown type 3974
```


#### Endpoint Get 3974

```
[
  {
    "id": 3974,
    "spec": {
      "label-configuration": {},
      "options": {
        "ConntrackAccounting": "Disabled",
        "Debug": "Disabled",
        "DebugLB": "Disabled",
        "DebugPolicy": "Enabled",
        "DropNotification": "Enabled",
        "MonitorAggregationLevel": "Medium",
        "PolicyAccounting": "Enabled",
        "PolicyAuditMode": "Disabled",
        "PolicyVerdictNotification": "Enabled",
        "SourceIPVerification": "Enabled",
        "TraceNotification": "Enabled"
      }
    },
    "status": {
      "controllers": [
        {
          "configuration": {
            "error-retry": true,
            "error-retry-base": "2s",
            "interval": "1s"
          },
          "name": "endpoint-3974-regeneration-recovery",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "0001-01-01T00:00:00.000Z"
          },
          "uuid": "531994a7-fb22-4c2e-b2da-cf2bf74eac4c"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "resolve-identity-3974",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:51.482Z",
            "success-count": 4
          },
          "uuid": "62ddbee4-982a-4bbf-ac5b-9c0bcc8cc550"
        },
        {
          "configuration": {
            "error-retry": true
          },
          "name": "resolve-labels-cilium-test-4/echo-other-node-774b54d449-5qtvc",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:08:51.239Z",
            "success-count": 1
          },
          "uuid": "8ca93c8c-6a64-4776-852b-7d8fc2dbd66c"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv4-identity-mapping (3974)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:52.020Z",
            "success-count": 4
          },
          "uuid": "c9376598-6df2-4f99-a725-abbaeac036a5"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "5m0s"
          },
          "name": "sync-IPv6-identity-mapping (3974)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:52.146Z",
            "success-count": 4
          },
          "uuid": "8c4fa9a6-5852-45d3-9846-a217daf2200e"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "15m0s"
          },
          "name": "sync-policymap-3974",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:55.598Z",
            "success-count": 2
          },
          "uuid": "4fff5579-8099-4c28-a6e9-73aef5f0eebc"
        },
        {
          "configuration": {
            "error-retry": true,
            "interval": "10s"
          },
          "name": "sync-to-k8s-ciliumendpoint (3974)",
          "status": {
            "last-failure-timestamp": "0001-01-01T00:00:00.000Z",
            "last-success-timestamp": "2025-08-01T19:23:51.621Z",
            "success-count": 92
          },
          "uuid": "f5502aef-dfda-47f5-99d9-d317326e34ca"
        }
      ],
      "external-identifiers": {
        "cni-attachment-id": "11c3c55491c4d9028b46a37db57390f8e2484f4c1e772bebdb4c4fd2b0a13302:eth0",
        "container-id": "11c3c55491c4d9028b46a37db57390f8e2484f4c1e772bebdb4c4fd2b0a13302",
        "k8s-namespace": "cilium-test-4",
        "k8s-pod-name": "echo-other-node-774b54d449-5qtvc",
        "pod-name": "cilium-test-4/echo-other-node-774b54d449-5qtvc"
      },
      "health": {
        "bpf": "OK",
        "connected": true,
        "overallHealth": "OK",
        "policy": "OK"
      },
      "identity": {
        "id": 14126,
        "labels": [
          "k8s:first=echo",
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-4",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=echo-other-node",
          "k8s:io.kubernetes.pod.namespace=cilium-test-4",
          "k8s:kind=echo",
          "k8s:name=echo-other-node"
        ]
      },
      "labels": {
        "derived": [
          "k8s:pod-template-hash=774b54d449"
        ],
        "realized": {},
        "security-relevant": [
          "k8s:first=echo",
          "k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli",
          "k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-4",
          "k8s:io.cilium.k8s.policy.cluster=default",
          "k8s:io.cilium.k8s.policy.serviceaccount=echo-other-node",
          "k8s:io.kubernetes.pod.namespace=cilium-test-4",
          "k8s:kind=echo",
          "k8s:name=echo-other-node"
        ]
      },
      "log": [
        {
          "code": "OK",
          "message": "Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)",
          "state": "ready",
          "timestamp": "2025-08-01T19:23:48Z"
        }
      ],
      "namedPorts": [
        {
          "name": "dns-53",
          "port": 53,
          "protocol": "TCP"
        },
        {
          "name": "dns-udp-53",
          "port": 53,
          "protocol": "UDP"
        },
        {
          "name": "http-8080",
          "port": 8080,
          "protocol": "TCP"
        }
      ],
      "networking": {
        "addressing": [
          {
            "ipv4": "10.244.0.39",
            "ipv4-pool-name": "default",
            "ipv6": "fd00:10:244::c16f",
            "ipv6-pool-name": "default"
          }
        ],
        "container-interface-name": "eth0",
        "host-mac": "2e:2a:81:99:c2:09",
        "interface-index": 22,
        "interface-name": "lxc2fabc67abc64",
        "mac": "da:bf:ed:3f:e3:46"
      },
      "policy": {
        "proxy-policy-revision": 247,
        "proxy-statistics": [
          {
            "location": "ingress",
            "port": 4096,
            "protocol": "http",
            "statistics": {
              "requests": {},
              "responses": {}
            }
          },
          {
            "location": "ingress",
            "port": 8080,
            "protocol": "http",
            "statistics": {
              "requests": {
                "forwarded": 22,
                "received": 22
              },
              "responses": {
                "forwarded": 22,
                "received": 22
              }
            }
          }
        ],
        "realized": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 14126,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        },
        "spec": {
          "allowed-egress-identities": [
            0
          ],
          "allowed-ingress-identities": [
            0,
            1
          ],
          "build": 247,
          "denied-egress-identities": null,
          "denied-ingress-identities": null,
          "id": 14126,
          "l4": {
            "egress": [],
            "ingress": []
          },
          "policy-enabled": "none",
          "policy-revision": 247
        }
      },
      "realized": {
        "label-configuration": {},
        "options": {
          "ConntrackAccounting": "Disabled",
          "Debug": "Disabled",
          "DebugLB": "Disabled",
          "DebugPolicy": "Enabled",
          "DropNotification": "Enabled",
          "MonitorAggregationLevel": "Medium",
          "PolicyAccounting": "Enabled",
          "PolicyAuditMode": "Disabled",
          "PolicyVerdictNotification": "Enabled",
          "SourceIPVerification": "Enabled",
          "TraceNotification": "Enabled"
        }
      },
      "state": "ready"
    }
  }
]


```


#### Endpoint Health 3974

```
Overall Health:   OK
BPF Health:       OK
Policy Health:    OK
Connected:        yes

```


#### Endpoint Log 3974

```
Timestamp              Status   State                   Message
2025-08-01T19:23:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:23:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:23:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:23:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:21:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:21:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:21:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:19:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:19:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:19:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:17:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:17:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:17:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:15:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:15:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:15:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:13:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:13:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:13:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:56Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:56Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:56Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:56Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:53Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:53Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:53Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:53Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:52Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:52Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:51Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:51Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:11:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:11:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:11:43Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:43Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:43Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:43Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:36Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:36Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:35Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:35Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:27Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:27Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:26Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:26Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:19Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:19Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:19Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:19Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:11:19Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:11:19Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:11:19Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:11:19Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:48Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:47Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:47Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:44Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:44Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:43Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:43Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:43Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:43Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:43Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:43Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:16Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:16Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:15Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:15Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:10:15Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:10:15Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:10:15Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:10:15Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:54Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:54Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:53Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:53Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:48Z   OK       ready                   Successfully regenerated endpoint program (Reason: periodic endpoint regeneration)
2025-08-01T19:09:48Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:48Z   OK       regenerating            Regenerating endpoint: periodic endpoint regeneration
2025-08-01T19:09:48Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to periodic endpoint regeneration
2025-08-01T19:09:43Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:43Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:43Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:43Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:36Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:36Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:36Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:36Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:25Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:25Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:24Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:24Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:21Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:21Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:21Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:21Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:09:13Z   OK       ready                   Successfully regenerated endpoint program (Reason: policy rules updated)
2025-08-01T19:09:13Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:09:12Z   OK       regenerating            Regenerating endpoint: policy rules updated
2025-08-01T19:09:12Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to policy rules updated
2025-08-01T19:08:55Z   OK       ready                   Successfully regenerated endpoint program (Reason: updated security labels)
2025-08-01T19:08:55Z   OK       ready                   Completed endpoint regeneration with no pending regeneration requests
2025-08-01T19:08:51Z   OK       regenerating            Regenerating endpoint: updated security labels
2025-08-01T19:08:51Z   OK       waiting-to-regenerate   Triggering endpoint regeneration due to updated security labels
2025-08-01T19:08:51Z   OK       ready                   Set identity for this endpoint
2025-08-01T19:08:51Z   OK       waiting-for-identity    Endpoint creation

```


#### Identity get 14126

```
ID      LABELS
14126   k8s:first=echo
        k8s:io.cilium.k8s.namespace.labels.app.kubernetes.io/name=cilium-cli
        k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cilium-test-4
        k8s:io.cilium.k8s.policy.cluster=default
        k8s:io.cilium.k8s.policy.serviceaccount=echo-other-node
        k8s:io.kubernetes.pod.namespace=cilium-test-4
        k8s:kind=echo
        k8s:name=echo-other-node

```


#### Service list

```
ID   Frontend                      Service Type   Backend                                        
1    10.96.0.1:443/TCP             ClusterIP      1 => 172.18.0.5:6443/TCP (active)              
2    10.96.232.97:443/TCP          ClusterIP      1 => 172.18.0.5:4244/TCP (active)              
3    10.96.0.10:53/TCP             ClusterIP      1 => 10.244.0.61:53/TCP (active)               
                                                  2 => 10.244.0.146:53/TCP (active)              
4    10.96.0.10:53/UDP             ClusterIP      1 => 10.244.0.61:53/UDP (active)               
                                                  2 => 10.244.0.146:53/UDP (active)              
5    10.96.0.10:9153/TCP           ClusterIP      1 => 10.244.0.61:9153/TCP (active)             
                                                  2 => 10.244.0.146:9153/TCP (active)            
6    10.96.230.205:8080/TCP        ClusterIP      1 => 10.244.2.247:8080/TCP (active)            
7    [fd00:10:96::d292]:8080/TCP   ClusterIP      1 => [fd00:10:244:2::d366]:8080/TCP (active)   
8    10.96.142.203:8080/TCP        ClusterIP      1 => 10.244.3.102:8080/TCP (active)            
9    [fd00:10:96::c92a]:8080/TCP   ClusterIP      1 => [fd00:10:244:3::1c8f]:8080/TCP (active)   
10   10.96.152.161:8080/TCP        ClusterIP      1 => 10.244.2.165:8080/TCP (active)            
11   [fd00:10:96::f883]:8080/TCP   ClusterIP      1 => [fd00:10:244:2::c45]:8080/TCP (active)    
12   10.96.186.3:8080/TCP          ClusterIP      1 => 10.244.3.7:8080/TCP (active)              
13   [fd00:10:96::7211]:8080/TCP   ClusterIP      1 => [fd00:10:244:3::7e15]:8080/TCP (active)   
14   10.96.12.51:8080/TCP          ClusterIP      1 => 10.244.3.35:8080/TCP (active)             
15   [fd00:10:96::2370]:8080/TCP   ClusterIP      1 => [fd00:10:244:3::9490]:8080/TCP (active)   
16   10.96.82.85:8080/TCP          ClusterIP      1 => 10.244.2.53:8080/TCP (active)             
17   [fd00:10:96::f03]:8080/TCP    ClusterIP      1 => [fd00:10:244:2::b832]:8080/TCP (active)   
18   10.96.165.251:8080/TCP        ClusterIP      1 => 10.244.0.212:8080/TCP (active)            
19   [fd00:10:96::f95c]:8080/TCP   ClusterIP      1 => [fd00:10:244::450a]:8080/TCP (active)     
20   10.96.31.240:8080/TCP         ClusterIP      1 => 10.244.0.39:8080/TCP (active)             
21   [fd00:10:96::a60c]:8080/TCP   ClusterIP      1 => [fd00:10:244::c16f]:8080/TCP (active)     
22   10.96.24.12:8080/TCP          ClusterIP      1 => 10.244.3.238:8080/TCP (active)            
23   [fd00:10:96::b68]:8080/TCP    ClusterIP      1 => [fd00:10:244:3::dbb3]:8080/TCP (active)   
24   10.96.220.31:8080/TCP         ClusterIP      1 => 10.244.2.218:8080/TCP (active)            
25   [fd00:10:96::e3bd]:8080/TCP   ClusterIP      1 => [fd00:10:244:2::937f]:8080/TCP (active)   
```

#### Cilium memory map


```
00400000-039ce000 r-xp 00000000 fe:00 1050871                            /usr/bin/cilium-agent
039ce000-07ce8000 r--p 035ce000 fe:00 1050871                            /usr/bin/cilium-agent
07ce8000-07ea3000 rw-p 078e8000 fe:00 1050871                            /usr/bin/cilium-agent
07ea3000-08429000 rw-p 00000000 00:00 0 
c000000000-c00ec00000 rw-p 00000000 00:00 0 
c00ec00000-c010000000 ---p 00000000 00:00 0 
7f258152a000-7f2581721000 rw-p 00000000 00:00 0 
7f2581725000-7f2581886000 rw-p 00000000 00:00 0 
7f258188e000-7f258197e000 rw-p 00000000 00:00 0 
7f2581987000-7f25819d8000 rw-p 00000000 00:00 0 
7f25819d8000-7f2581a19000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581a19000-7f2581a5a000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581a5a000-7f2581a9b000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581a9b000-7f2581adc000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581adc000-7f2581ade000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581ade000-7f2581ae0000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581ae0000-7f2581ae2000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581ae2000-7f2581ae4000 rw-s 00000000 00:0c 10776                      anon_inode:[perf_event]
7f2581ae4000-7f25841eb000 rw-p 00000000 00:00 0 
7f25841eb000-7f259436b000 ---p 00000000 00:00 0 
7f259436b000-7f259436c000 rw-p 00000000 00:00 0 
7f259436c000-7f25b436b000 ---p 00000000 00:00 0 
7f25b436b000-7f25b436c000 rw-p 00000000 00:00 0 
7f25b436c000-7f25c621b000 ---p 00000000 00:00 0 
7f25c621b000-7f25c621c000 rw-p 00000000 00:00 0 
7f25c621c000-7f25c85f1000 ---p 00000000 00:00 0 
7f25c85f1000-7f25c85f2000 rw-p 00000000 00:00 0 
7f25c85f2000-7f25c8a6b000 ---p 00000000 00:00 0 
7f25c8a6b000-7f25c8a6c000 rw-p 00000000 00:00 0 
7f25c8a6c000-7f25c8aeb000 ---p 00000000 00:00 0 
7f25c8aeb000-7f25c8b4b000 rw-p 00000000 00:00 0 
7ffd45fbd000-7ffd45fde000 rw-p 00000000 00:00 0                          [stack]
7ffd45ff0000-7ffd45ff4000 r--p 00000000 00:00 0                          [vvar]
7ffd45ff4000-7ffd45ff6000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 --xp 00000000 00:00 0                  [vsyscall]

```


#### ipam

```
(string) (len=6) "owners"
(map[ipam.Pool]map[string]string) (len=1) {
 (ipam.Pool) (len=7) default: (map[string]string) (len=18) {
  (string) (len=11) "10.244.0.48": (string) (len=37) "cilium-test-3/client-645b68dcf7-2vsxj",
  (string) (len=17) "fd00:10:244::30cf": (string) (len=38) "cilium-test-3/client2-66475877c6-cvrcd",
  (string) (len=12) "10.244.0.146": (string) (len=36) "kube-system/coredns-674b8bbfcf-fb7xs",
  (string) (len=17) "fd00:10:244::450a": (string) (len=45) "cilium-test-3/echo-same-node-5f44c8d48c-czmfm",
  (string) (len=12) "10.244.0.212": (string) (len=45) "cilium-test-3/echo-same-node-5f44c8d48c-czmfm",
  (string) (len=17) "fd00:10:244::c16f": (string) (len=46) "cilium-test-4/echo-other-node-774b54d449-5qtvc",
  (string) (len=12) "10.244.0.175": (string) (len=6) "router",
  (string) (len=17) "fd00:10:244::ef5a": (string) (len=36) "kube-system/coredns-674b8bbfcf-xdwfq",
  (string) (len=11) "10.244.0.39": (string) (len=46) "cilium-test-4/echo-other-node-774b54d449-5qtvc",
  (string) (len=16) "fd00:10:244::8ae": (string) (len=6) "router",
  (string) (len=17) "fd00:10:244::1b6b": (string) (len=6) "health",
  (string) (len=17) "fd00:10:244::53f0": (string) (len=58) "local-path-storage/local-path-provisioner-59f7658548-p54sp",
  (string) (len=17) "fd00:10:244::6f45": (string) (len=36) "kube-system/coredns-674b8bbfcf-fb7xs",
  (string) (len=17) "fd00:10:244::13d0": (string) (len=37) "cilium-test-3/client-645b68dcf7-2vsxj",
  (string) (len=11) "10.244.0.71": (string) (len=38) "cilium-test-3/client2-66475877c6-cvrcd",
  (string) (len=11) "10.244.0.98": (string) (len=6) "health",
  (string) (len=11) "10.244.0.61": (string) (len=36) "kube-system/coredns-674b8bbfcf-xdwfq",
  (string) (len=12) "10.244.0.231": (string) (len=58) "local-path-storage/local-path-provisioner-59f7658548-p54sp"
 }
}
(string) (len=17) "expiration timers"
(map[ipam.timerKey]ipam.expirationTimer) {
}
(string) (len=12) "excluded ips"
(map[string]string) (len=2) {
 (string) (len=18) "default:172.18.0.5": (string) (len=7) "node-ip",
 (string) (len=20) "default:fc00:c111::5": (string) (len=7) "node-ip"
}

```


#### kvstore-locks

```
(map[string]kvstore.lockOwner) {
}

```


#### ongoing-endpoint-creations


#### Cilium encryption



#### Kernel version

```
5.10.240
```


#### Cilium status

```
KVStore:                Ok   etcd: 1/1 connected, leases=1, lock leases=1, has-quorum=true: http://172.18.0.5:2378 - 3.6.4 (Leader)
Kubernetes:             Ok   1.33 (v1.33.0) [linux/amd64]
Kubernetes APIs:        ["EndpointSliceOrEndpoint", "cilium/v2::CiliumCIDRGroup", "cilium/v2::CiliumClusterwideNetworkPolicy", "cilium/v2::CiliumNetworkPolicy", "core/v1::Pods", "networking.k8s.io/v1::NetworkPolicy"]
KubeProxyReplacement:   False   
Host firewall:          Disabled
SRv6:                   Disabled
CNI Chaining:           none
CNI Config file:        successfully wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist
Cilium:                 Ok   1.19.0-dev (v1.19.0-dev-471113da)
NodeMonitor:            Listening for events on 4 CPUs with 64x4096 of shared memory
Cilium health daemon:   Ok   
IPAM:                   IPv4: 9/254 allocated from 10.244.0.0/24, IPv6: 9/18446744073709551614 allocated from fd00:10:244::/64
Allocated addresses:
  10.244.0.146 (kube-system/coredns-674b8bbfcf-fb7xs)
  10.244.0.175 (router)
  10.244.0.212 (cilium-test-3/echo-same-node-5f44c8d48c-czmfm)
  10.244.0.231 (local-path-storage/local-path-provisioner-59f7658548-p54sp)
  10.244.0.39 (cilium-test-4/echo-other-node-774b54d449-5qtvc)
  10.244.0.48 (cilium-test-3/client-645b68dcf7-2vsxj)
  10.244.0.61 (kube-system/coredns-674b8bbfcf-xdwfq)
  10.244.0.71 (cilium-test-3/client2-66475877c6-cvrcd)
  10.244.0.98 (health)
  fd00:10:244::13d0 (cilium-test-3/client-645b68dcf7-2vsxj)
  fd00:10:244::1b6b (health)
  fd00:10:244::30cf (cilium-test-3/client2-66475877c6-cvrcd)
  fd00:10:244::450a (cilium-test-3/echo-same-node-5f44c8d48c-czmfm)
  fd00:10:244::53f0 (local-path-storage/local-path-provisioner-59f7658548-p54sp)
  fd00:10:244::6f45 (kube-system/coredns-674b8bbfcf-fb7xs)
  fd00:10:244::8ae (router)
  fd00:10:244::c16f (cilium-test-4/echo-other-node-774b54d449-5qtvc)
  fd00:10:244::ef5a (kube-system/coredns-674b8bbfcf-xdwfq)
IPv4 BIG TCP:           Disabled
IPv6 BIG TCP:           Disabled
BandwidthManager:       Disabled
Routing:                Network: Native   Host: Legacy
Attach Mode:            Legacy TC
Device Mode:            veth
Masquerading:           IPTables [IPv4: Enabled, IPv6: Enabled]
Clock Source for BPF:   ktime
Controller Status:      68/68 healthy
  Name                                                                        Last success   Last error   Count   Message
  cilium-health-ep                                                            1m8s ago       never        0       no error   
  ct-map-pressure                                                             38s ago        never        0       no error   
  daemon-validate-config                                                      52s ago        never        0       no error   
  endpoint-1347-regeneration-recovery                                         never          never        0       no error   
  endpoint-2221-regeneration-recovery                                         never          never        0       no error   
  endpoint-2599-regeneration-recovery                                         never          never        0       no error   
  endpoint-3974-regeneration-recovery                                         never          never        0       no error   
  endpoint-573-regeneration-recovery                                          never          never        0       no error   
  endpoint-584-regeneration-recovery                                          never          never        0       no error   
  endpoint-687-regeneration-recovery                                          never          never        0       no error   
  endpoint-727-regeneration-recovery                                          never          never        0       no error   
  endpoint-813-regeneration-recovery                                          never          never        0       no error   
  endpoint-gc                                                                 3m10s ago      never        0       no error   
  endpoint-periodic-regeneration                                              2m10s ago      never        0       no error   
  ipcache-inject-labels                                                       1m9s ago       never        0       no error   
  k8s-heartbeat                                                               41s ago        never        0       no error   
  kvstore-sync-store-cilium/state/nodes/v1                                    18m9s ago      never        0       no error   
  local-identity-checkpoint                                                   9m16s ago      never        0       no error   
  propagating local node change to kv-store                                   4m59s ago      never        0       no error   
  proxy-ports-checkpoint                                                      11m21s ago     never        0       no error   
  resolve-identity-1347                                                       5m10s ago      never        0       no error   
  resolve-identity-2221                                                       3m9s ago       never        0       no error   
  resolve-identity-2599                                                       3m8s ago       never        0       no error   
  resolve-identity-3974                                                       5m6s ago       never        0       no error   
  resolve-identity-573                                                        3m9s ago       never        0       no error   
  resolve-identity-584                                                        3m8s ago       never        0       no error   
  resolve-identity-687                                                        5m8s ago       never        0       no error   
  resolve-identity-727                                                        3m8s ago       never        0       no error   
  resolve-identity-813                                                        5m9s ago       never        0       no error   
  resolve-labels-cilium-test-3/client-645b68dcf7-2vsxj                        15m9s ago      never        0       no error   
  resolve-labels-cilium-test-3/client2-66475877c6-cvrcd                       15m8s ago      never        0       no error   
  resolve-labels-cilium-test-3/echo-same-node-5f44c8d48c-czmfm                15m10s ago     never        0       no error   
  resolve-labels-cilium-test-4/echo-other-node-774b54d449-5qtvc               15m7s ago      never        0       no error   
  resolve-labels-kube-system/coredns-674b8bbfcf-fb7xs                         18m8s ago      never        0       no error   
  resolve-labels-kube-system/coredns-674b8bbfcf-xdwfq                         18m9s ago      never        0       no error   
  resolve-labels-local-path-storage/local-path-provisioner-59f7658548-p54sp   18m8s ago      never        0       no error   
  sync-IPv4-identity-mapping (1347)                                           5m9s ago       never        0       no error   
  sync-IPv4-identity-mapping (2221)                                           3m8s ago       never        0       no error   
  sync-IPv4-identity-mapping (3974)                                           5m6s ago       never        0       no error   
  sync-IPv4-identity-mapping (584)                                            3m8s ago       never        0       no error   
  sync-IPv4-identity-mapping (687)                                            5m8s ago       never        0       no error   
  sync-IPv4-identity-mapping (727)                                            3m8s ago       never        0       no error   
  sync-IPv4-identity-mapping (813)                                            5m9s ago       never        0       no error   
  sync-IPv6-identity-mapping (1347)                                           5m9s ago       never        0       no error   
  sync-IPv6-identity-mapping (2221)                                           3m8s ago       never        0       no error   
  sync-IPv6-identity-mapping (3974)                                           5m6s ago       never        0       no error   
  sync-IPv6-identity-mapping (584)                                            3m8s ago       never        0       no error   
  sync-IPv6-identity-mapping (687)                                            5m8s ago       never        0       no error   
  sync-IPv6-identity-mapping (727)                                            3m8s ago       never        0       no error   
  sync-IPv6-identity-mapping (813)                                            5m9s ago       never        0       no error   
  sync-policymap-1347                                                         15m8s ago      never        0       no error   
  sync-policymap-2221                                                         3m1s ago       never        0       no error   
  sync-policymap-2599                                                         3m1s ago       never        0       no error   
  sync-policymap-3974                                                         15m2s ago      never        0       no error   
  sync-policymap-573                                                          3m4s ago       never        0       no error   
  sync-policymap-584                                                          3m1s ago       never        0       no error   
  sync-policymap-687                                                          15m6s ago      never        0       no error   
  sync-policymap-727                                                          3m1s ago       never        0       no error   
  sync-policymap-813                                                          15m7s ago      never        0       no error   
  sync-to-k8s-ciliumendpoint (1347)                                           29s ago        never        0       no error   
  sync-to-k8s-ciliumendpoint (2221)                                           28s ago        never        0       no error   
  sync-to-k8s-ciliumendpoint (3974)                                           26s ago        never        0       no error   
  sync-to-k8s-ciliumendpoint (584)                                            28s ago        never        0       no error   
  sync-to-k8s-ciliumendpoint (687)                                            28s ago        never        0       no error   
  sync-to-k8s-ciliumendpoint (727)                                            28s ago        never        0       no error   
  sync-to-k8s-ciliumendpoint (813)                                            29s ago        never        0       no error   
  sync-utime                                                                  1m9s ago       never        0       no error   
  write-cni-file                                                              18m10s ago     never        0       no error   
Proxy Status:            OK, ip 10.244.0.175, 0 redirects active on ports 10000-20000, Envoy: external
Global Identity Range:   min 256, max 65535
Hubble:                  Ok   Current/Max Flows: 35495/65535 (54.16%), Flows/s: 32.65   Metrics: Disabled
KubeProxyReplacement Details:
  Status:               False
  Socket LB:            Disabled
  Socket LB Tracing:    Disabled
  Socket LB Coverage:   Full
  Session Affinity:     Enabled
  NAT46/64 Support:     Disabled
  Services:
  - ClusterIP:      Enabled
  - NodePort:       Disabled 
  - LoadBalancer:   Disabled 
  - externalIPs:    Disabled 
  - HostPort:       Disabled
  Annotations:      (n/a)
BPF Maps:   dynamic sizing: on (ratio: 0.002500)
  Name                          Size
  Auth                          524288
  Non-TCP connection tracking   65536
  TCP connection tracking       131072
  Endpoints                     65535
  IP cache                      512000
  IPv4 masquerading agent       16384
  IPv6 masquerading agent       16384
  IPv4 fragmentation            8192
  IPv4 service                  65536
  IPv6 service                  65536
  IPv4 service backend          65536
  IPv6 service backend          65536
  IPv4 service reverse NAT      65536
  IPv6 service reverse NAT      65536
  Metrics                       1024
  Ratelimit metrics             64
  NAT                           131072
  Neighbor table                131072
  Endpoint policy               16384
  Policy stats                  65536
  Session affinity              65536
  Sock reverse NAT              65536
Encryption:   IPsec   
```

#### Cilium environment keys

```
node-encryption-opt-out-labels:node-role.kubernetes.io/control-plane
debug-verbose:envoy
enable-ipv4-big-tcp:false
envoy-default-log-level:
k8s-api-server:
identity-allocation-timeout:2m0s
enable-host-port:false
lrp-address-matcher-cidrs:
enable-source-ip-verification:true
allow-localhost:auto
endpoint-regen-interval:2m0s
bpf-lb-algorithm:random
dnsproxy-insecure-skip-transparent-mode-check:false
bpf-lb-mode-annotation:false
status-collector-stackdump-path:/run/cilium/state/agent.stack.gz
bpf-events-drop-enabled:true
enable-unreachable-routes:false
proxy-max-requests-per-connection:0
socket-path:/var/run/cilium/cilium.sock
hubble-metrics-server-tls-key-file:
mtu:0
operator-api-serve-addr:127.0.0.1:9234
underlay-protocol:ipv4
local-router-ipv4:
bypass-ip-availability-upon-restore:false
k8s-service-proxy-name:
tunnel-protocol:vxlan
hubble-metrics-server-enable-tls:false
external-envoy-proxy:true
log-system-load:false
vtep-mac:
dns-max-ips-per-restored-rule:1000
enable-active-connection-tracking:false
bpf-auth-map-max:524288
endpoint-bpf-prog-watchdog-interval:30s
enable-bgp-control-plane:false
enable-ipv6-big-tcp:false
direct-routing-device:
hubble-redact-http-userinfo:true
bpf-events-policy-verdict-enabled:true
enable-external-ips:false
enable-egress-gateway:false
dnsproxy-concurrency-limit:0
mesh-auth-spiffe-trust-domain:spiffe.cilium
l2-announcements-retry-period:2s
hubble-skip-unknown-cgroup-ids:true
enable-stale-cilium-endpoint-cleanup:true
enable-tracing:false
hubble-event-buffer-capacity:65535
kube-proxy-replacement-healthz-bind-address:
bpf-ct-timeout-regular-tcp-fin:10s
hubble-dynamic-metrics-config-path:
route-metric:0
enable-node-port:false
ipv6-service-range:auto
enable-masquerade-to-route-source:false
ipv6-mcast-device:
hubble-tls-key-file:/var/lib/cilium/tls/hubble/server.key
disable-envoy-version-check:false
ipsec-key-file:/etc/ipsec/keys
enable-endpoint-health-checking:true
envoy-access-log-buffer-size:4096
mesh-auth-rotated-identities-queue-size:1024
bpf-conntrack-accounting:false
trace-sock:true
dynamic-lifecycle-config:[]
k8s-client-connection-keep-alive:30s
enable-monitor:true
vtep-endpoint:
envoy-base-id:0
node-port-acceleration:disabled
enable-ipv6-ndp:false
enable-health-checking:true
enable-custom-calls:false
lb-state-file-interval:1s
nat-map-stats-interval:30s
enable-envoy-config:false
http-max-grpc-timeout:0
set-cilium-is-up-condition:true
static-cnp-path:
enable-endpoint-routes:true
bgp-router-id-allocation-mode:default
proxy-prometheus-port:0
enable-bbr:false
hubble-redact-http-headers-deny:
wireguard-track-all-ips-fallback:false
enable-cilium-health-api-server-access:
enable-dynamic-lifecycle-manager:false
pprof-port:6060
exclude-node-label-patterns:
hubble-recorder-storage-path:/var/run/cilium/pcaps
enable-xt-socket-fallback:true
labels:
cluster-name:default
bpf-filter-priority:1
api-rate-limit:
ipv6-native-routing-cidr:fd00:10:244::/56
nodeport-addresses:
cgroup-root:/run/cilium/cgroupv2
write-cni-conf-when-ready:/host/etc/cni/net.d/05-cilium.conflist
http-idle-timeout:0
enable-ingress-controller:false
lb-retry-backoff-min:50ms
proxy-idle-timeout-seconds:60
node-port-range:
mesh-auth-queue-size:1024
enable-cilium-endpoint-slice:false
pprof:false
direct-routing-skip-unreachable:false
disable-endpoint-crd:false
enable-pmtu-discovery:false
tunnel-port:0
bpf-lb-rev-nat-map-max:0
enable-bpf-tproxy:false
ipam-default-ip-pool:default
agent-liveness-update-interval:1s
gateway-api-secrets-namespace:
enable-cilium-api-server-access:
hubble-tls-cert-file:/var/lib/cilium/tls/hubble/server.crt
ipv4-pod-subnets:
dnsproxy-concurrency-processing-grace-period:0s
enable-cilium-clusterwide-network-policy:true
bpf-lb-nat46x64:false
hubble-export-file-path:
bpf-ct-timeout-regular-tcp:2h13m20s
tofqdns-preallocate-identities:true
hubble-drop-events:false
cni-exclusive:true
tofqdns-pre-cache:
max-controller-interval:0
bpf-lb-acceleration:disabled
default-lb-service-ipam:lbipam
enable-l7-proxy:true
allow-icmp-frag-needed:true
install-iptables-rules:true
allocator-list-timeout:3m0s
identity-management-mode:agent
annotate-k8s-node:false
mesh-auth-gc-interval:5m0s
log-driver:
dnsproxy-enable-transparent-mode:true
k8s-require-ipv6-pod-cidr:false
enable-hubble-open-metrics:false
allow-unsafe-policy-skb-usage:false
enable-mke:false
enable-well-known-identities:false
use-full-tls-context:false
enable-auto-protect-node-port-range:true
hubble-disable-tls:false
hubble-tls-client-ca-files:/var/lib/cilium/tls/hubble/client-ca.crt
synchronize-k8s-nodes:true
proxy-xff-num-trusted-hops-ingress:0
enable-l2-pod-announcements:false
envoy-config-timeout:2m0s
cluster-id:0
hubble-drop-events-reasons:
enable-ipsec-xfrm-state-caching:true
k8s-namespace:kube-system
enable-k8s-api-discovery:false
enable-ip-masq-agent:false
bpf-lb-external-clusterip:false
k8s-sync-timeout:3m0s
k8s-heartbeat-timeout:30s
envoy-http-upstream-linger-timeout:-1
identity-max-jitter:30s
dnsproxy-socket-linger-timeout:10
enable-route-mtu-for-cni-chaining:false
status-collector-probe-check-timeout:5m0s
policy-trigger-interval:1s
agent-health-require-k8s-connectivity:true
install-uplink-routes-for-delegated-ipam:false
unmanaged-pod-watcher-interval:15
prometheus-serve-addr:
hubble-metrics-server-tls-cert-file:
hubble-redact-kafka-apikey:false
fqdn-regex-compile-lru-size:1024
ingress-secrets-namespace:
proxy-xff-num-trusted-hops-egress:0
bpf-events-trace-enabled:true
enable-vtep:false
policy-queue-size:100
hubble-redact-http-headers-allow:
bpf-lb-sock-hostns-only:false
proxy-portrange-min:10000
ipv6-cluster-alloc-cidr:f00d::/64
hubble-socket-path:/var/run/cilium/hubble.sock
exclude-local-address:
enable-svc-source-range-check:true
encrypt-interface:
ipsec-key-rotation-duration:1m
cni-chaining-target:
pprof-address:localhost
custom-cni-conf:false
ipam-cilium-node-update-rate:15s
bpf-policy-map-max:16384
enable-sctp:false
lb-state-file:
enable-health-check-loadbalancer-ip:false
enable-l2-neigh-discovery:true
enable-l2-announcements:false
k8s-api-server-urls:
enable-non-default-deny-policies:true
envoy-policy-restore-timeout:3m0s
enable-local-node-route:true
lb-sock-terminate-all-protos:false
identity-change-grace-period:5s
l2-announcements-lease-duration:15s
enable-metrics:true
l2-pod-announcements-interface:
bpf-events-default-burst-limit:0
ip-masq-agent-config-path:/etc/config/ip-masq-agent
read-cni-conf:
enable-srv6:false
ipv4-node:auto
hubble-export-file-max-backups:5
ipv4-range:auto
agent-not-ready-taint-key:node.cilium.io/agent-not-ready
enable-local-redirect-policy:false
egress-multi-home-ip-rule-compat:false
http-request-timeout:3600
mesh-auth-signal-backoff-duration:1s
ipv6-range:auto
bpf-lb-algorithm-annotation:false
operator-prometheus-serve-addr::9963
status-collector-failure-threshold:1m0s
install-no-conntrack-iptables-rules:false
status-collector-interval:5s
enable-standalone-dns-proxy:false
label-prefix-file:
hubble-drop-events-interval:2m0s
proxy-connect-timeout:2
policy-secrets-only-from-secrets-namespace:true
bgp-router-id-allocation-ip-pool:
enable-ipsec:true
bpf-lb-dsr-dispatch:opt
debug:true
conntrack-gc-interval:0s
force-device-detection:false
restored-proxy-ports-age-limit:15
hubble-export-allowlist:
auto-direct-node-routes:true
metrics-sampling-interval:30s
enable-ipv6-masquerade:true
bpf-map-dynamic-size-ratio:0.0025
ipv6-node:auto
enable-encryption-strict-mode:false
dns-policy-unload-on-shutdown:false
clustermesh-config:/var/lib/cilium/clustermesh/
envoy-log:
enable-policy-secrets-sync:true
ipv4-native-routing-cidr:10.244.0.0/16
enable-drift-checker:true
preallocate-bpf-maps:false
state-dir:/var/run/cilium
node-port-bind-protection:true
enable-session-affinity:true
bpf-events-default-rate-limit:0
tofqdns-endpoint-max-ip-per-hostname:1000
enable-hubble:true
identity-heartbeat-timeout:30m0s
bpf-node-map-max:16384
hubble-metrics-server:
ipv6-pod-subnets:
http-normalize-path:true
enable-bpf-masquerade:false
mke-cgroup-mount:
bpf-policy-map-full-reconciliation-interval:15m0s
k8s-kubeconfig-path:
use-cilium-internal-ip-for-ipsec:false
srv6-encap-mode:reduced
bpf-lb-rss-ipv6-src-cidr:
disable-external-ip-mitigation:false
iptables-lock-timeout:5s
cluster-health-port:4240
bpf-lb-ipip-sock-mark:false
bpf-lb-mode:snat
enable-bandwidth-manager:false
enable-k8s-host-firewall-bypass:false
http-retry-count:3
kvstore:etcd
hubble-metrics-server-tls-client-ca-files:
enable-service-topology:false
node-port-algorithm:
mesh-auth-enabled:true
devices:
l2-pod-announcements-interface-pattern:
fixed-identity-mapping:
ignore-flags-drift-checker:
bpf-neigh-global-max:524288
cilium-endpoint-gc-interval:5m0s
kube-proxy-replacement:false
tunnel-source-port-range:0-0
monitor-aggregation-flags:all
tofqdns-dns-reject-response-code:refused
enable-ipv4-masquerade:true
bpf-policy-stats-map-max:65536
kvstore-lease-ttl:15m0s
identity-gc-interval:15m0s
mesh-auth-mutual-listener-port:0
enable-identity-mark:true
proxy-max-connection-duration-seconds:0
enable-ipip-termination:false
prepend-iptables-chains:true
hubble-metrics:
egress-gateway-policy-map-max:16384
kvstore-opt:{"etcd.config": "/var/lib/etcd-config/etcd.config"}
monitor-aggregation-interval:5s
hubble-redact-http-urlquery:false
routing-mode:native
identity-allocation-sync-interval:5m0s
tofqdns-idle-connection-grace-period:0s
proxy-gid:1337
bpf-lb-maglev-hash-seed:JLfvgnHc2kaSUFaI
certificates-directory:/var/run/cilium/certs
k8s-client-burst:20
hubble-prefer-ipv6:false
restore:true
tofqdns-proxy-port:0
enable-host-firewall:false
clustermesh-sync-timeout:1m0s
conntrack-gc-max-interval:0s
nodes-gc-interval:5m0s
enable-hubble-recorder-api:true
bpf-lb-rss-ipv4-src-cidr:
node-port-mode:
encryption-strict-mode-allow-remote-node-identities:false
bpf-sock-rev-map-max:0
bpf-lb-sock:false
enable-dynamic-config:true
enable-ipv4:true
proxy-max-concurrent-retries:128
tofqdns-max-deferred-connection-deletes:10000
lb-retry-backoff-max:50ms
bpf-ct-global-any-max:262144
hubble-monitor-events:
controller-group-metrics:
enable-ipv6:true
tofqdns-enable-dns-compression:true
policy-audit-mode:false
enable-ipsec-key-watcher:true
vlan-bpf-bypass:
enable-policy:default
config-dir:/tmp/cilium/config-map
enable-endpoint-lockdown-on-policy-overflow:false
derive-masq-ip-addr-from-device:
clustermesh-enable-mcs-api:false
proxy-initial-fetch-timeout:30
enable-gateway-api:false
bpf-ct-timeout-service-tcp-grace:1m0s
bpf-ct-timeout-regular-any:1m0s
bpf-ct-timeout-regular-tcp-syn:1m0s
hubble-export-file-max-size-mb:10
enable-ipv4-fragment-tracking:true
egress-masquerade-interfaces:
vtep-mask:
k8s-client-connection-timeout:30s
config-sources:[{"kind":"config-map","namespace":"kube-system","name":"cilium-config"}]
hubble-flowlogs-config-path:
hubble-export-file-compress:false
mesh-auth-mutual-connect-timeout:5s
enable-k8s-networkpolicy:true
enable-ipv4-egress-gateway:false
node-labels:
egress-gateway-reconciliation-trigger-interval:1s
bpf-lb-source-range-all-types:false
policy-default-local-cluster:true
agent-labels:
lib-dir:/var/lib/cilium
monitor-aggregation:medium
enable-gops:true
ipam-multi-pool-pre-allocation:
http-retry-timeout:0
policy-cidr-match-mode:
container-ip-local-reserved-ports:auto
metrics:
envoy-secrets-namespace:
bpf-lb-source-range-map-max:0
encryption-strict-mode-cidr:
enable-xdp-prefilter:false
bpf-nat-global-max:524288
enable-ipsec-encrypted-overlay:false
log-opt:
bpf-lb-affinity-map-max:0
enable-health-check-nodeport:true
local-router-ipv6:
hubble-network-policy-correlation-enabled:true
status-collector-warning-threshold:15s
proxy-admin-port:0
enable-icmp-rules:true
enable-extended-ip-protocols:false
bpf-lb-sock-terminate-pod-connections:true
k8s-client-qps:10
hubble-export-denylist:
endpoint-gc-interval:5m0s
proxy-portrange-max:20000
envoy-config-retry-interval:15s
enable-internal-traffic-policy:true
bpf-distributed-lru:false
kvstore-max-consecutive-quorum-errors:2
enable-cilium-network-policy:true
hubble-redact-enabled:false
bpf-ct-timeout-service-tcp:2h13m20s
l2-announcements-renew-deadline:5s
enable-bpf-clock-probe:false
enable-ipv6-fragment-tracking:true
tofqdns-min-ttl:0
enable-wireguard:false
nat-map-stats-entries:32
identity-restore-grace-period:30s
enable-bgp-control-plane-status-report:true
policy-accounting:true
local-max-addr-scope:252
bpf-ct-global-tcp-max:524288
hubble-event-queue-size:0
set-cilium-node-taints:true
enable-recorder:false
endpoint-queue-size:25
cni-external-routing:false
remove-cilium-node-taints:true
gops-port:9890
encrypt-node:false
multicast-enabled:false
dnsproxy-lock-count:131
cni-chaining-mode:none
cni-log-file:/var/run/cilium/cilium-cni.log
lb-pressure-metrics-interval:5m0s
bpf-root:/sys/fs/bpf
bpf-lb-map-max:65536
bpf-lb-service-backend-map-max:0
bpf-fragments-map-max:8192
ipam:kubernetes
auto-create-cilium-node-resource:true
enable-bbr-hostns-only:false
keep-config:false
enable-host-legacy-routing:false
vtep-cidr:
etcd-config:---
endpoints:
  - http://172.18.0.5:2378
wireguard-persistent-keepalive:0s
enable-k8s:true
connectivity-probe-frequency-ratio:0.5
hubble-export-fieldmask:
iptables-random-fully:false
k8s-require-ipv4-pod-cidr:false
identity-allocation-mode:kvstore
bpf-lb-maglev-map-max:0
max-internal-timer-delay:0s
http-stream-idle-timeout:300
agent-health-port:9879
monitor-queue-size:0
procfs:/host/proc
bpf-ct-timeout-service-any:1m0s
mesh-auth-spire-admin-socket:
boot-id-file:/var/run/cilium/boot_id
hubble-listen-address::4244
trace-payloadlen-overlay:192
ipv4-service-range:auto
enable-node-selector-labels:false
policy-secrets-namespace:cilium-secrets
service-no-backend-response:reject
cmdref:
enable-tcx:true
envoy-keep-cap-netbindservice:false
tofqdns-proxy-response-max-delay:100ms
clustermesh-enable-endpoint-sync:false
health-check-icmp-failure-threshold:3
config:
max-connected-clusters:255
trace-payloadlen:128
dnsproxy-lock-timeout:500ms
bpf-map-event-buffers:
crd-wait-timeout:5m0s
bpf-lb-service-map-max:0
ipv4-service-loopback-address:169.254.42.1
standalone-dns-proxy-server-port:40045
version:false
hubble-recorder-sink-queue-size:1024
config-sources-overrides:{"allowConfigKeys":[],"denyConfigKeys":[]}
datapath-mode:veth
enable-lb-ipam:true
bpf-lb-maglev-table-size:16381
enable-nat46x64-gateway:false
disable-iptables-feeder-rules:
```


#### Policy get

```
:
 []
Revision: 247

```

