level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.13434ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="62.912µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.123551ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.811µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=92.111395ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.17µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.631µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="51.771µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="72.912µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="73.042µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="460.082µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.62µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.09959ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.713348ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.881µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.011µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="258.497µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="162.225µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="125.994µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.543154ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="79.782µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.921µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.145.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.969145ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.118668ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="16.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.17855ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.701µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="61.992µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="47.021µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="28.281µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="369.14µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.54µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="301.979µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="770.621µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.216393ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.75µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.871µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.145 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.145 ipAddr.ipv6="" k8sNodeIP=199.19.213.145 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.145" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.203" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.145" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.145} {CiliumInternalIP 10.0.0.203}] 10.0.0.0/24 [] [] 10.0.0.2 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45917" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.617870953s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.4µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="6.04µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="32.921µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.42µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.55395515s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=295.375259ms file-path=/var/run/cilium/state/templates/c85ad44ef6173f31a4c05784b842949cab3fd4796f512a4ba742349f9d395303/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.133 092e2b5e-3252-4b63-bc2b-e716158c2834 default }" containerID=c0bb91ebff59937792b2c22f0b0f347f87dde0e73cb8343c60df85be9e8bc6bc datapathConfiguration="&{false false false false false }" interface=lxc55f1dacee731 k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0bb91ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0bb91ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0bb91ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=802 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0bb91ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2304 identity=802 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3216 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 de0b31e3-2996-45ce-9f9c-7286720dab28 default }" containerID=f32d96924287109a960ac575b0d5deaceba9096c3ca55666e749dc80388c1224 datapathConfiguration="&{false false false false false }" interface=lxc7c0f34457c33 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f32d969242 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f32d969242 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f32d969242 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=7521 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f32d969242 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=7521 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3894 ipv4=10.0.0.2 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3894 identityLabels="reserved:health" ipv4=10.0.0.2 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3894 identity=4 identityLabels="reserved:health" ipv4=10.0.0.2 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.135785464s file-path=/var/run/cilium/state/templates/fce2c2d70c4db70dd672f64c3f604677918781d57ddfdc03ac28428eb2985810/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=c0bb91ebff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2304 identity=802 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0bb91ebff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2304 identity=802 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f32d969242 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1746 identity=7521 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f32d969242 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1746 identity=7521 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3894 identity=4 ipv4=10.0.0.2 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f32d969242 endpointID=1746 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-drxx6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=9f27c968-ef68-48ef-b7d3-3f5c934a8690 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f32d969242 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1746 identity=7521 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-drxx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 d7392b18-f834-444e-90df-ae6c3e6cd288 default }" containerID=95c811a7b1485899e8809e3222aabce36a18384aa4f679c54802d435da5dd8db datapathConfiguration="&{false false false false false }" interface=lxc08ac11092ff4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tfx5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95c811a7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tfx5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95c811a7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tfx5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95c811a7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identity=10287 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tfx5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95c811a7b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identity=10287 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tfx5b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95c811a7b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3177 identity=10287 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tfx5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=95c811a7b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3177 identity=10287 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tfx5b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3216 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03216 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03216 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03216 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03216:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3216 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 96627f52-f5f2-4c89-995f-8d4fa0c546da default }" containerID=b440d4c4a5b14bbb449294af50e04025c139be43d463c3ea9606512ff3c1985d datapathConfiguration="&{false false false false false }" interface=lxccee355f863bf k8sPodName=kube-system/coredns-67659f764b-76d9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b440d4c4a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-76d9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b440d4c4a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-76d9x subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b440d4c4a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=802 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-76d9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b440d4c4a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=802 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-76d9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 c6c97b94-4ffa-43ac-a7d1-9f8b2a5685f4 default }" containerID=6e02382f128deb0e5bc70d23395b4a4cbfeee073076c0b3da1a1d166c8321c96 datapathConfiguration="&{false false false false false }" interface=lxc628924e502af k8sPodName=kube-system/coredns-67659f764b-q94h8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e02382f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-q94h8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e02382f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-q94h8 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6e02382f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=802 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-q94h8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e02382f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=802 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-q94h8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e02382f12 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=583 identity=802 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-q94h8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e02382f12 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=583 identity=802 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-q94h8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b440d4c4a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=70 identity=802 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-76d9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b440d4c4a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=70 identity=802 ipv4=10.0.0.154 ipv6= k8sPodName=kube-system/coredns-67659f764b-76d9x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 762d47cd-36b0-4a90-8255-e12b7cfa2015 default }" containerID=3ea2dfdfb11c03595e4a83eeeb18048d5cb656f65f3af3157214231799a9dc84 datapathConfiguration="&{false false false false false }" interface=lxc3022e6c8dbdb k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q2p69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ea2dfdfb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q2p69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ea2dfdfb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q2p69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ea2dfdfb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=15531 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q2p69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ea2dfdfb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2649 identity=15531 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q2p69 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ea2dfdfb1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2649 identity=15531 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q2p69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ea2dfdfb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2649 identity=15531 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q2p69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0bb91ebff endpointID=2304 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6qgq9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c0bb91ebff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2304 identity=802 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6qgq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 338b4f3b-e09a-4987-8b11-96e3e0e29a77 default }" containerID=3193656bd9a1345fb36bc5d40b9e752ea79fc3a2415708e61564d55036285f97 datapathConfiguration="&{false false false false false }" interface=lxc61cf81816edc k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nffc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3193656bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nffc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3193656bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nffc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.135 bd621f51-fec7-4d37-8b9a-72fa6d120f2a default }" containerID=65c7fe961d6d29a7002016694763877d46b2e974dab727991657427b26544fd7 datapathConfiguration="&{false false false false false }" interface=lxc242a5c94db2e k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65c7fe961d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 07fbdc38-06f0-4938-b9d9-b5ae9d89d661 default }" containerID=21d0a6a77f157087d93b763b8bd4e5f70b99eb06dc529c2f1fac4408a399a2af datapathConfiguration="&{false false false false false }" interface=lxc25c779c96a4b k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21d0a6a77f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65c7fe961d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21d0a6a77f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3193656bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=47674 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nffc6 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=3193656bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2941 identity=47674 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nffc6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=65c7fe961d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=21d0a6a77f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65c7fe961d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=8258 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65c7fe961d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1788 identity=8258 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21d0a6a77f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=1966 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21d0a6a77f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=1966 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3193656bd9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2941 identity=47674 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nffc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3193656bd9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2941 identity=47674 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nffc6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65c7fe961d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1788 identity=8258 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=65c7fe961d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1788 identity=8258 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2tvlm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=21d0a6a77f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=11 identity=1966 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=21d0a6a77f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=11 identity=1966 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-g5bhv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 0e5e2b24-54e9-4db0-9ac1-45c27e7b5049 default }" containerID=d6a3d97402373dd1266ca88f4d56a04b27b39e759b280b7de0bb14b8d988039d datapathConfiguration="&{false false false false false }" interface=lxcf0b852342627 k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6a3d97402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6a3d97402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6a3d97402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 identity=25197 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6a3d97402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 identity=25197 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6a3d97402 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3805 identity=25197 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6a3d97402 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3805 identity=25197 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6a3d97402 endpointID=3805 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-nk65f subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b2727c60-bfa2-4cd5-9fa8-d3c3de1005cd k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d6a3d97402 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3805 identity=25197 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk65f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 3401289b-f80a-4bb8-b173-e656d0409e28 default }" containerID=ebbb13d1ef31f017657100841d516d89a49e54b2e47017f885b763679faa02ef datapathConfiguration="&{false false false false false }" interface=lxc2c9f33d085b8 k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebbb13d1ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebbb13d1ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebbb13d1ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=3120 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebbb13d1ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=3120 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ebbb13d1ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3007 identity=3120 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebbb13d1ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3007 identity=3120 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebbb13d1ef endpointID=3007 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-gkl8t subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=68f3c908-8208-438b-a96e-aae0513fffe1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=ebbb13d1ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3007 identity=3120 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gkl8t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 ef43bdfb-95b1-4594-ad52-93fb754ce6a8 default }" containerID=755829bc5ae799e771ee127480e02cd7ee320ce2ba6fbfbc26f90106d1e9fb60 datapathConfiguration="&{false false false false false }" interface=lxc38cb51574a39 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=755829bc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=755829bc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=755829bc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=755829bc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=39987 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=755829bc5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=39987 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=755829bc5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=223 identity=39987 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n subsys=endpoint level=info msg="Successful endpoint creation" containerID=755829bc5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=223 identity=39987 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4795n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 51de961b-4bb5-4079-8fc9-9b61397697b5 default }" containerID=a38866f2343546d75d206f921ae0ec9f49629ea33d8221e64fd3e0bf2c396c82 datapathConfiguration="&{false false false false false }" interface=lxc8e14a91e969a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a38866f234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a38866f234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=40f5b80f-0ad6-478e-b466-89e809379697,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=40f5b80f-0ad6-478e-b466-89e809379697,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=40f5b80f-0ad6-478e-b466-89e809379697;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=40f5b80f-0ad6-478e-b466-89e809379697;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a38866f234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=56768 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=40f5b80f-0ad6-478e-b466-89e809379697,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=40f5b80f-0ad6-478e-b466-89e809379697,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a38866f234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1161 identity=56768 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a38866f234 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1161 identity=56768 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=a38866f234 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1161 identity=56768 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a38866f234 endpointID=1161 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-ndc9h subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=40f5b80f-0ad6-478e-b466-89e809379697 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=40f5b80f-0ad6-478e-b466-89e809379697 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=a38866f234 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1161 identity=56768 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ndc9h subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9fe62bd9-5b4d-4a84-8c27-a536435e44e9] Description:}]" policyAddRequest=43f55708-c4c2-4065-8dd1-a31e87831633 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=43f55708-c4c2-4065-8dd1-a31e87831633 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a5f8d12b-b72f-4a2d-a731-f3c320219c66] Description:}]" policyAddRequest=4889bee7-5fbe-4c43-a575-2827b15c686a subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=4889bee7-5fbe-4c43-a575-2827b15c686a policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 5d96f402-7a5c-4626-ad03-cf2bd1e25865 default }" containerID=be354b71ae46bbd212dfb3f2557178a1fe425ec83e454e6f45ba243076bb2507 datapathConfiguration="&{false false false false false }" interface=lxce62d63b81566 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be354b71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be354b71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=be354b71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be354b71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 identity=33060 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be354b71ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 identity=33060 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be354b71ae datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3961 identity=33060 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=be354b71ae datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3961 identity=33060 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-n6lrq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 7baad950-de1f-4245-b69d-09b8226959e4 default }" containerID=ad0b83f3267e34ea1b39a03c286f76c6826f07535f94a13426c8894b6130b898 datapathConfiguration="&{false false false false false }" interface=lxc1a4b659d54fc k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rk5fb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad0b83f326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rk5fb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad0b83f326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rk5fb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad0b83f326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=49256 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rk5fb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad0b83f326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=49256 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rk5fb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad0b83f326 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1883 identity=49256 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rk5fb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad0b83f326 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1883 identity=49256 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rk5fb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 bc6b5d07-852d-4309-83a1-e010cd8674f9 default }" containerID=951b9cc2b5957aa878c5728c7f02b16572ec78646f7c3db99bbd5c234b5a8615 datapathConfiguration="&{false false false false false }" interface=lxcc91df605a99a k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=951b9cc2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=951b9cc2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=951b9cc2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=951b9cc2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=27485 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=951b9cc2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=27485 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=951b9cc2b5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1225 identity=27485 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p subsys=endpoint level=info msg="Successful endpoint creation" containerID=951b9cc2b5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1225 identity=27485 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-qhx9p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 edd606bb-8292-4728-9aa0-649fe59e0035 default }" containerID=fef6c109796c55047a2403fe099a8bc95a9a7d860fd1df3a6418f5de49ea174b datapathConfiguration="&{false false false false false }" interface=lxcfea661e32df9 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fef6c10979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fef6c10979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fef6c10979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identity=55188 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fef6c10979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identity=55188 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fef6c10979 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2943 identity=55188 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fef6c10979 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2943 identity=55188 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 17e25e94-fcd6-487f-9f02-ddd6aa1c1aa6 default }" containerID=a335a27c167bd56015d97d4f6e87ae214413367fdcd326aa6d50890d674b06bd datapathConfiguration="&{false false false false false }" interface=lxc5279bdeae94b k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a335a27c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a335a27c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a335a27c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a335a27c16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=5820 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a335a27c16 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2192 identity=5820 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a335a27c16 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2192 identity=5820 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a335a27c16 endpointID=2192 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a335a27c16 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2192 identity=5820 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dfcaf4b-9765-422a-bdcb-c2b8e495186d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 d2f9b79e-3666-48b0-b644-ce70d38d5baf default }" containerID=e28c236a4581f4edd84e7683c18775bf414b7d56f720f6daa048e93f5656ded8 datapathConfiguration="&{false false false false false }" interface=lxc241f8ea6aa34 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e28c236a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e28c236a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e28c236a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e28c236a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=4470 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e28c236a45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=4470 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e28c236a45 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2473 identity=4470 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e28c236a45 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2473 identity=4470 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=35768818-9c76-441e-8b58-616f5a239480] Description:}]" policyAddRequest=bccc4318-c4b7-4bb8-897e-f31d9b0b97b4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bccc4318-c4b7-4bb8-897e-f31d9b0b97b4 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.200 a7b33f9b-db23-44f0-9163-56494d219107 default }" containerID=d7c43ce8c53f29b47dc9648d055aebb0d2f857f5251621dd03c7e0ec90ab413d datapathConfiguration="&{false false false false false }" interface=lxc477dddacf061 k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7c43ce8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7c43ce8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7c43ce8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7c43ce8c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1126 identity=5820 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7c43ce8c5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1126 identity=5820 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7c43ce8c5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1126 identity=5820 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 subsys=daemon level=info msg="Delete endpoint request" containerID=d7c43ce8c5 endpointID=1126 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d7c43ce8c5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1126 identity=5820 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cad2e31b-50bd-4a68-a2c1-cdc04309f942 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 dbe94821-295a-4e80-a578-ff1262a43631 default }" containerID=5fbafc984f48b0fab6f2015ef4bc39c2af7fc074d1f2e73c434b8975c1100040 datapathConfiguration="&{false false false false false }" interface=lxc27d472469015 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fbafc984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fbafc984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fbafc984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=50633 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5fbafc984f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=50633 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fbafc984f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=355 identity=50633 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fbafc984f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=355 identity=50633 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6b104b34-dec3-4d48-98ef-1c19fcb35b95] Description:}]" policyAddRequest=3f2503b8-466a-47c1-87d6-493f550d338e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3f2503b8-466a-47c1-87d6-493f550d338e policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.194 a3e0f2c1-57b4-4f35-8d6c-59b7db559090 default }" containerID=8df91b104c38435a52baa946020c66e317b0ea879c8a481e679da7bbfbc60aa6 datapathConfiguration="&{false false false false false }" interface=lxcf9e99942a4b9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8df91b104c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 ipv4=10.0.0.194 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8df91b104c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.194 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8df91b104c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8df91b104c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identity=8692 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.194 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8df91b104c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identity=8692 ipv4=10.0.0.194 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8df91b104c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2273 identity=8692 ipv4=10.0.0.194 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8df91b104c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2273 identity=8692 ipv4=10.0.0.194 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010503604907543929 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.186 26ef2e9d-478e-41b3-bde4-32e811dcc604 default }" containerID=719975c8ebd546581e12112fbf9f265c425ed5ef05cd06a2930d605606c692f9 datapathConfiguration="&{false false false false false }" interface=lxc047844205a0f k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=719975c8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=719975c8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=719975c8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=719975c8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=24267 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=719975c8eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=24267 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 bea06b62-aebd-4cb0-aafb-49af18f057a1 default }" containerID=7e48e303eba6de21d4c41d76a094796b49203ea1568c7ced50894a3b1ac02314 datapathConfiguration="&{false false false false false }" interface=lxc2161ed005249 k8sPodName=monitoring/node-feature-discovery-worker-45kc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e48e303eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-45kc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e48e303eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-45kc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e48e303eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identity=11797 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-45kc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e48e303eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identity=11797 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-45kc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 6b71cb9d-56a5-4438-a605-bd336246daf1 default }" containerID=2a3e3ba14396c60e420600302e54ba07f1894002192ae809b7e3e255499745fb datapathConfiguration="&{false false false false false }" interface=lxcf2568d6765bf k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jwctq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a3e3ba143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jwctq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a3e3ba143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jwctq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a3e3ba143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=3550 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jwctq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a3e3ba143 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=3550 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jwctq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=719975c8eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=212 identity=24267 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=719975c8eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=212 identity=24267 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-wlcmc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a3e3ba143 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1433 identity=3550 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jwctq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a3e3ba143 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=3550 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-jwctq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7e48e303eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2769 identity=11797 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-45kc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e48e303eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2769 identity=11797 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-45kc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 cfb12281-19c8-4d99-975d-d31c24686b8f default }" containerID=d9940ce80c3bed25762b39bfa36b6337f8167e2b1b2e89a9ce2da7920e683f40 datapathConfiguration="&{false false false false false }" interface=lxc2cda7376ab1b k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tphjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9940ce80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tphjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9940ce80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tphjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9940ce80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=41513 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tphjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9940ce80c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=41513 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tphjr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9940ce80c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3074 identity=41513 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tphjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9940ce80c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3074 identity=41513 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tphjr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3216 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03216 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03216 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03216 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03216:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3216 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 64b24d3d-2390-4cd8-81b2-fa7922110260 default }" containerID=7a610002cc3099b1db47d44699c6f3130aa9c17c2726adff0d5daba2c4547671 datapathConfiguration="&{false false false false false }" interface=lxc62d2c8898dc5 k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a610002cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a610002cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a610002cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a610002cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=10312 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a610002cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=10312 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a610002cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=341 identity=10312 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a610002cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=10312 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a610002cc endpointID=341 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-28v55 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=47de77f3-8522-49b7-98b0-e65b54a2ee07 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7a610002cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=10312 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-28v55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 d1707eef-0c1b-4ea7-9bab-173ebe132ed4 default }" containerID=e247a10187d0e3156f88b072ed2a89b5436ba57370cbafa09f23a72f8bff69e5 datapathConfiguration="&{false false false false false }" interface=lxc6725c355d203 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e247a10187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e247a10187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e247a10187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e247a10187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 identity=17383 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e247a10187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2665 identity=17383 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 f9c9f92a-e457-4be0-81f4-48b5e26ea504 default }" containerID=fcd227d5afcc6af56b9c78a93c2688c8fcdb37203506a84e460e451dbeb6d996 datapathConfiguration="&{false false false false false }" interface=lxcd5dfaf2b9dcf k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-g5hzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcd227d5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-g5hzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcd227d5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-g5hzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcd227d5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 identity=17350 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-g5hzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcd227d5af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 identity=17350 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-g5hzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 3c31a356-ca1b-4a62-9ef4-e027557b784e default }" containerID=e8b01add63f7febe95de9fceef35c6a3c8ae261b08c7d0b35100134a5a52f84d datapathConfiguration="&{false false false false false }" interface=lxc6beb3b3068f9 k8sPodName=monitoring/kube-prometheus-stack-grafana-65bbc8566f-8s5z8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8b01add63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65bbc8566f-8s5z8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8b01add63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65bbc8566f-8s5z8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8b01add63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=55219 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65bbc8566f-8s5z8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8b01add63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=55219 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65bbc8566f-8s5z8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e247a10187 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2665 identity=17383 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps subsys=endpoint level=info msg="Successful endpoint creation" containerID=e247a10187 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2665 identity=17383 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dv7ps subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fcd227d5af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=401 identity=17350 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-g5hzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcd227d5af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=401 identity=17350 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-g5hzl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e8b01add63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=577 identity=55219 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65bbc8566f-8s5z8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8b01add63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=577 identity=55219 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65bbc8566f-8s5z8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 4651a975-4878-4132-abfc-d8b820f491b9 default }" containerID=9f7ab65e6eb84c5007cc20a56713f1f19a30b82519f1ed6dd4d544662b29cf36 datapathConfiguration="&{false false false false false }" interface=lxc65b53279321c k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f7ab65e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f7ab65e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f7ab65e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=37121 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f7ab65e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=37121 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f7ab65e6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2461 identity=37121 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f7ab65e6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2461 identity=37121 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.210 d640aece-d1bf-482d-bc41-be516d5cccb0 default }" containerID=17d3c7260796d7c5806ba41c31d2e1131b3ac597a8fd709502e2834bf7ea1311 datapathConfiguration="&{false false false false false }" interface=lxcde24fa7091fa k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17d3c72607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17d3c72607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17d3c72607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17d3c72607 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=5820 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=17d3c72607 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1591 identity=5820 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=17d3c72607 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=5820 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 484b448a-56fc-4e75-af3a-312555a71133 default }" containerID=08991975c003c25806466610b38b475475d252387238f3b8628b153b1eed4937 datapathConfiguration="&{false false false false false }" interface=lxced66611ae67d k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08991975c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08991975c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=08991975c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08991975c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=5820 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08991975c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=228 identity=5820 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08991975c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=5820 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 subsys=daemon level=info msg="Delete endpoint request" containerID=9f7ab65e6e endpointID=2461 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-22rtx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=263f31d4-aaed-4680-a76a-34847d86be1f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9f7ab65e6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2461 identity=37121 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-22rtx subsys=endpoint level=info msg="Delete endpoint request" containerID=17d3c72607 endpointID=1591 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=08991975c0 endpointID=228 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=17d3c72607 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=5820 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-016f5f94-27f3-4f73-ba67-8277ac8eedd9 subsys=endpoint level=info msg="Removed endpoint" containerID=08991975c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=5820 ipv4=10.0.0.234 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f4ae38de-a87a-41b3-af0c-631b26b6d908 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 953aeb4e-5981-4791-bea8-d370cf196673 default }" containerID=eeba3dc2552f10e7392ca307e111fb193a1c033783d7957d95fe528eb901b74f datapathConfiguration="&{false false false false false }" interface=lxc171205e1af6e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eeba3dc255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eeba3dc255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eeba3dc255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identity=11626 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eeba3dc255 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identity=11626 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eeba3dc255 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1769 identity=11626 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eeba3dc255 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1769 identity=11626 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 ecc442f0-adb9-4896-8355-8ab823f592f7 default }" containerID=79501992ecb88701b8302c1d271a209867edd6000e19735b3593fe295f2b6aae datapathConfiguration="&{false false false false false }" interface=lxc522014cb0c69 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79501992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79501992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79501992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identity=905 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79501992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identity=905 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79501992ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2411 identity=905 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79501992ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2411 identity=905 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 37017022-5807-475e-938c-3e301d0d3674 default }" containerID=939939af13298d887c606d8891d06afa8e3de1ca801d5eb02e850718ec164253 datapathConfiguration="&{false false false false false }" interface=lxc462c34fef4e9 k8sPodName=monitoring/loki-gateway-cf54cb88c-clx6l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=939939af13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1635 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-clx6l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=939939af13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1635 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-clx6l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=939939af13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1635 identity=31543 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-clx6l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=939939af13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1635 identity=31543 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-clx6l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 873a790e-d50e-44a8-86e3-e6b640315960 default }" containerID=77bd86dbbe10cc30a7605b50024be5963b9e32c2cf3f8ad4191b6709cf9b46a6 datapathConfiguration="&{false false false false false }" interface=lxcf029b457d62d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77bd86dbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 cb1c99a3-c906-49a6-91d5-d24a1bb6b88d default }" containerID=bb36c45c2ad270a2e494447549484fd7f9f933b6ff971d741db7cc20f1cd6004 datapathConfiguration="&{false false false false false }" interface=lxc6ffa0ebf5d08 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=77bd86dbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=bb36c45c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb36c45c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77bd86dbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=22634 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77bd86dbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=22634 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb36c45c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=44473 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb36c45c2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=44473 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=939939af13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1635 identity=31543 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-clx6l subsys=endpoint level=info msg="Successful endpoint creation" containerID=939939af13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1635 identity=31543 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-clx6l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb36c45c2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3099 identity=44473 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb36c45c2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3099 identity=44473 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=77bd86dbbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=104 identity=22634 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77bd86dbbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=22634 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.117 30097c1b-7b81-4a77-a22c-d0073a7ab7fb default }" containerID=ba775102148aa63f30d7dce7d736cde444075aa3d52e96cd379510d567a3a039 datapathConfiguration="&{false false false false false }" interface=lxc829e2f8b54f2 k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba77510214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2808 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba77510214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2808 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba77510214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2808 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba77510214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2808 identity=5820 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba77510214 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2808 identity=5820 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba77510214 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2808 identity=5820 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.204 be847084-ea70-4427-b62b-9c6384b62aa9 default }" containerID=7877d194dada9c4e672027df0d304ff633b2615648c4b5b27cb7eae32c36b8a1 datapathConfiguration="&{false false false false false }" interface=lxc27b4cdc0cbb2 k8sPodName=monitoring/vector-8tt82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7877d194da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-8tt82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7877d194da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-8tt82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7877d194da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-8tt82 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7877d194da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identity=2956 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-8tt82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7877d194da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identity=2956 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-8tt82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7877d194da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1318 identity=2956 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-8tt82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7877d194da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1318 identity=2956 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/vector-8tt82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba77510214 endpointID=2808 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ba77510214 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2808 identity=5820 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eeb52920-c3c2-4e5d-8028-1963688a3d2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 7382fd11-0689-40fe-88cd-b06f12a9a96d default }" containerID=7a85d918ef76c2ec32d26560caf91b48a2414fb733a2239c6b4f18b677b18e0d datapathConfiguration="&{false false false false false }" interface=lxc02ddf88bb516 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf772 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a85d918ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf772 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a85d918ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf772 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a85d918ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=58820 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf772 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a85d918ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=58820 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf772 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a85d918ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=754 identity=58820 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf772 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a85d918ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=754 identity=58820 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vf772 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.64 f9b66e42-bc69-4098-a09c-7b10d49ee31b default }" containerID=2b52f6746aa4955f599ed5269ead3a66c44cc41cd83753369eda9dd9e80a148c datapathConfiguration="&{false false false false false }" interface=lxc8e3957dd3b08 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b52f6746a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b52f6746a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b52f6746a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identity=24294 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b52f6746a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identity=24294 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b52f6746a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2934 identity=24294 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b52f6746a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2934 identity=24294 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 5a7f1180-9f44-4067-878e-121c462483cb default }" containerID=5c38e9c704fc963c4e29170f52245f4ef751f2772007cb6ec612b7fae1b719ee datapathConfiguration="&{false false false false false }" interface=lxc1d7f44eeabf9 k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c38e9c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c38e9c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5c38e9c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5c38e9c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=36746 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c38e9c704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=36746 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c38e9c704 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=36746 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c38e9c704 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=36746 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-qqfq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 faf451e8-aa98-4ab2-96f1-90f875ba7491 default }" containerID=1b10ab99a4c6eced61d79d7617a30cc377a8fc9d22b1487d73d447f7c85dad5c datapathConfiguration="&{false false false false false }" interface=lxc46d2e9ac9b4d k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b10ab99a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b10ab99a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b10ab99a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b10ab99a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=5820 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b10ab99a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=794 identity=5820 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b10ab99a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=5820 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd subsys=daemon level=info msg="Delete endpoint request" containerID=1b10ab99a4 endpointID=794 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1b10ab99a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=5820 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559fef16-655c-41bb-9a29-71e698a3a6dd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 3e4bdb7b-e53f-44c7-9476-af70a26750f8 default }" containerID=9d19627127e99ce2081b8aa0c101c0136a7882d7e1217ba4d13249b2157b6c5c datapathConfiguration="&{false false false false false }" interface=lxc42671b8bb6ed k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d19627127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d19627127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d19627127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=18758 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d19627127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=18758 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d19627127 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=18758 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d19627127 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=18758 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 7894d3e0-a4d8-4a55-bd9a-c52f14c44353 default }" containerID=66b46b28ab8d904b04c5e9af718102dec8a1d47792a781bde33805827a83d706 datapathConfiguration="&{false false false false false }" interface=lxc63a555b34547 k8sPodName=openstack/keystone-api-676767b8f-xfzx4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b46b28ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-676767b8f-xfzx4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b46b28ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-676767b8f-xfzx4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66b46b28ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=4226 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-676767b8f-xfzx4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66b46b28ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=4226 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-676767b8f-xfzx4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 46b3916e-9be2-4d80-b062-dab29179583b default }" containerID=ec1f45526e12fd2c72fbca8ed2ffe271c252768766c50d88b0eca3dc60e1766d datapathConfiguration="&{false false false false false }" interface=lxcaa83914daebc k8sPodName=openstack/keystone-credential-setup-n4vn7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec1f45526e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-n4vn7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec1f45526e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-n4vn7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec1f45526e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=23651 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-n4vn7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec1f45526e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=23651 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-n4vn7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66b46b28ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1058 identity=4226 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-676767b8f-xfzx4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b46b28ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1058 identity=4226 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-api-676767b8f-xfzx4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec1f45526e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1230 identity=23651 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-n4vn7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec1f45526e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1230 identity=23651 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-n4vn7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec1f45526e endpointID=1230 k8sNamespace=openstack k8sPodName=keystone-credential-setup-n4vn7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6a0b4a2d-992c-42e5-829d-d0254b076223 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ec1f45526e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1230 identity=23651 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-n4vn7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 129b897a-1006-42cf-9023-edd0223b5226 default }" containerID=7dd2fef2c3b48455a79975cf54dc04420bafee5ba0abfff931831a17e80da583 datapathConfiguration="&{false false false false false }" interface=lxcbcef279eb5a3 k8sPodName=openstack/keystone-db-init-j7xfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dd2fef2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-j7xfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dd2fef2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-j7xfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dd2fef2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=18701 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-j7xfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dd2fef2c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=18701 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-j7xfx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7dd2fef2c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1876 identity=18701 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-j7xfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dd2fef2c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1876 identity=18701 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-j7xfx subsys=daemon level=info msg="Delete endpoint request" containerID=7dd2fef2c3 endpointID=1876 k8sNamespace=openstack k8sPodName=keystone-db-init-j7xfx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ac4638ea-7d67-4c0f-b8d9-03686690bb59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7dd2fef2c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1876 identity=18701 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-db-init-j7xfx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 c9c486e2-5673-40c2-ab29-85c1cb404528 default }" containerID=1700ce1a61931680d290ac38f8f194c1b3b4e9dfbb6f7f146620b4f744e9a19f datapathConfiguration="&{false false false false false }" interface=lxcbc5a95801e70 k8sPodName=openstack/keystone-fernet-setup-rjgn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1700ce1a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3261 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1700ce1a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3261 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1700ce1a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3261 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1700ce1a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3261 identity=5219 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1700ce1a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3261 identity=5219 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1700ce1a61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3261 identity=5219 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1700ce1a61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3261 identity=5219 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1700ce1a61 endpointID=3261 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-rjgn9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=68baa931-fa4f-4d55-88d7-fe4b6c250381 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1700ce1a61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3261 identity=5219 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-fernet-setup-rjgn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 c57b5a9e-9661-41ef-933a-49939a26b1b6 default }" containerID=15a2381c88b8e441157bbf91809d9a6f05264f4e62ae8286097e80a316abe0c5 datapathConfiguration="&{false false false false false }" interface=lxcae9160a85688 k8sPodName=openstack/keystone-db-sync-gzqlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15a2381c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15a2381c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15a2381c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15a2381c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identity=29873 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15a2381c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1675 identity=29873 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15a2381c88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1675 identity=29873 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=15a2381c88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1675 identity=29873 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15a2381c88 endpointID=1675 k8sNamespace=openstack k8sPodName=keystone-db-sync-gzqlf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=a790e60b-09f7-4e91-b486-23c9cd87bdbb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=15a2381c88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1675 identity=29873 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-db-sync-gzqlf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 8c089885-9d79-4726-b17d-2af4db348993 default }" containerID=620703e5eff1113d59be1a5ae269504000fde5a87ab6aa905a658a59b0344ecb datapathConfiguration="&{false false false false false }" interface=lxc4a6f068a77e4 k8sPodName=openstack/keystone-rabbit-init-p48zc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=620703e5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=620703e5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=620703e5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=620703e5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=6320 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=620703e5ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3835 identity=6320 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=620703e5ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3835 identity=6320 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc subsys=endpoint level=info msg="Successful endpoint creation" containerID=620703e5ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3835 identity=6320 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=620703e5ef endpointID=3835 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-p48zc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8287c541-4e24-41a6-9f33-4857ef2650ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=620703e5ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3835 identity=6320 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-rabbit-init-p48zc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 afa0a1b4-fd5e-4d55-8cb9-64f72a6990cd default }" containerID=248d9b7afade1a608faf8da86dcd9aeee39e76c2eb5fb79e7a8514a8c8a23e6c datapathConfiguration="&{false false false false false }" interface=lxc3a9db8890140 k8sPodName=openstack/keystone-domain-manage-mzgbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=248d9b7afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=248d9b7afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=248d9b7afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=248d9b7afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identity=3721 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=248d9b7afa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identity=3721 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=248d9b7afa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3859 identity=3721 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=248d9b7afa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3859 identity=3721 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=248d9b7afa endpointID=3859 k8sNamespace=openstack k8sPodName=keystone-domain-manage-mzgbz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ff57ad7c-dffe-4835-9faa-110a5b16ebf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=248d9b7afa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3859 identity=3721 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-mzgbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 76272495-896b-44e6-ac3a-34c2c7faabc1 default }" containerID=f18838eba400305d8529acac537e64de9bd127f3474c5843ba284fd9d7975187 datapathConfiguration="&{false false false false false }" interface=lxc12bc6b62d353 k8sPodName=openstack/keystone-bootstrap-tfl87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f18838eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-bootstrap-tfl87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f18838eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-bootstrap-tfl87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f18838eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=63513 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-bootstrap-tfl87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f18838eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=63513 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-bootstrap-tfl87 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f18838eba4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3550 identity=63513 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-bootstrap-tfl87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f18838eba4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=63513 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-bootstrap-tfl87 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f18838eba4 endpointID=3550 k8sNamespace=openstack k8sPodName=keystone-bootstrap-tfl87 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0ed191e9-4c4a-4b3f-bc79-2e2267f584cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f18838eba4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=63513 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-bootstrap-tfl87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 d721b97f-e6f2-4385-afaf-877067f46c26 default }" containerID=c3ae9682353fec8b350936e837788ebd82cd4d87b58c1b88624a3ecb166eeb00 datapathConfiguration="&{false false false false false }" interface=lxcdfe389f0f740 k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3ae968235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3ae968235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3ae968235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3ae968235 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1109 identity=5820 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3ae968235 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1109 identity=5820 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3ae968235 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=5820 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 subsys=daemon level=info msg="Delete endpoint request" containerID=c3ae968235 endpointID=1109 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c3ae968235 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=5820 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aebad72e-3237-4362-aa63-520429671870 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 eda995ec-8f9f-4b96-960c-2d6c8898ff99 default }" containerID=7e8331f32dd02042db25d656c9fdc33d886a860c4c17714ccdbfdc1c8b665c74 datapathConfiguration="&{false false false false false }" interface=lxc0ad740f0ad44 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e8331f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e8331f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7e8331f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e8331f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=4717 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e8331f32d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=4717 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e8331f32d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3896 identity=4717 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e8331f32d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=4717 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 5827ed25-6ccc-4e74-85e0-b038add3bd93 default }" containerID=fa2a4c11122d5ed8c90d5bcbd1402dfdb71fecfaf7c66a9b356bc7ab7d398f06 datapathConfiguration="&{false false false false false }" interface=lxcd8abb64c51c4 k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa2a4c1112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa2a4c1112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=fa2a4c1112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fa2a4c1112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=10892 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa2a4c1112 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=10892 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 4d16e3f2-6f69-4149-a7f9-ac482c896d60 default }" containerID=8d29f67ae4399fac3f4efee492d5e0187d0baa1760a675b332df82fc8081780f datapathConfiguration="&{false false false false false }" interface=lxc169388e6d1b8 k8sPodName=openstack/barbican-db-init-rnbjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d29f67ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-init-rnbjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d29f67ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-init-rnbjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d29f67ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=32935 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-init-rnbjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d29f67ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=32935 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-init-rnbjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa2a4c1112 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=151 identity=10892 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa2a4c1112 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=151 identity=10892 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-66fb5d4d79-r47bs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d29f67ae4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=316 identity=32935 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-init-rnbjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d29f67ae4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=32935 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-init-rnbjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d29f67ae4 endpointID=316 k8sNamespace=openstack k8sPodName=barbican-db-init-rnbjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=6f39b5cb-7ccd-4e48-925d-2f628ed71bdd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8d29f67ae4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=32935 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/barbican-db-init-rnbjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 70e99aa7-4634-4a63-bf39-6a3130c421fc default }" containerID=4d8e348f8a6ca8c6d083df6f29eefd679cdd41c05b5c2d70b9c03e96b9282412 datapathConfiguration="&{false false false false false }" interface=lxcc26270a97b99 k8sPodName=openstack/barbican-db-sync-w9w7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d8e348f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-w9w7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d8e348f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-w9w7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4d8e348f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=19505 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-w9w7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d8e348f8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=19505 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-w9w7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d8e348f8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1204 identity=19505 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-w9w7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d8e348f8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=19505 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-w9w7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03605245715367863 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=4d8e348f8a endpointID=1204 k8sNamespace=openstack k8sPodName=barbican-db-sync-w9w7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=4b345ed8-10e2-467b-90f3-e347ba3debed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4d8e348f8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=19505 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-w9w7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 631e9eea-a1b8-4ad2-a2fb-58aac4838677 default }" containerID=fdc669ea06e3f6a928c547bdc3d4b9a0fdc648624a9ee0969e590411db6eb410 datapathConfiguration="&{false false false false false }" interface=lxc92e4e7a8059e k8sPodName=openstack/barbican-rabbit-init-87nt4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdc669ea06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-rabbit-init-87nt4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdc669ea06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-rabbit-init-87nt4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdc669ea06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=25414 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-rabbit-init-87nt4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdc669ea06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=25414 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-rabbit-init-87nt4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fdc669ea06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1135 identity=25414 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-rabbit-init-87nt4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdc669ea06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1135 identity=25414 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-rabbit-init-87nt4 subsys=daemon level=info msg="Delete endpoint request" containerID=fdc669ea06 endpointID=1135 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-87nt4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c76475d0-99c1-40f6-8217-a62b02d83ae0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fdc669ea06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1135 identity=25414 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-rabbit-init-87nt4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 8b003c19-3931-48f2-b308-163b089b3638 default }" containerID=e7d0c0315ff7287782188e6e743449d252fff5bed3b6b7f60865607abf3000f3 datapathConfiguration="&{false false false false false }" interface=lxc7a0faa70b08b k8sPodName=openstack/barbican-ks-service-4rk8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d0c0315f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d0c0315f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7d0c0315f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7d0c0315f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identity=12915 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d0c0315f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2278 identity=12915 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d0c0315f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2278 identity=12915 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d0c0315f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2278 identity=12915 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7d0c0315f endpointID=2278 k8sNamespace=openstack k8sPodName=barbican-ks-service-4rk8m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=e975f526-eb78-47f5-807e-13f8d3a696aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e7d0c0315f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2278 identity=12915 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-4rk8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 233ce792-fe9d-47db-9013-351027969017 default }" containerID=d74f89b538dbc2abf77eaeb09634179f2fc2d5f1c8f5bdf76d7d1b485a3319e2 datapathConfiguration="&{false false false false false }" interface=lxcbd089ad474f3 k8sPodName=openstack/barbican-ks-endpoints-5bc5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d74f89b538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1997 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5bc5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d74f89b538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1997 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5bc5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d74f89b538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1997 identity=13463 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5bc5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d74f89b538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1997 identity=13463 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5bc5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d74f89b538 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1997 identity=13463 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5bc5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=d74f89b538 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1997 identity=13463 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5bc5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d74f89b538 endpointID=1997 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-5bc5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=64dfb627-b19c-4316-98b4-5f4d7b4257d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d74f89b538 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1997 identity=13463 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5bc5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 a389f254-a46b-40de-bb81-23c13462ee54 default }" containerID=dcf5fa7c2429c78d218f98da9dbd74eac118d25581c7b7ee17883112b55dd24a datapathConfiguration="&{false false false false false }" interface=lxcaed7fcf89592 k8sPodName=openstack/barbican-ks-user-rlkx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcf5fa7c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcf5fa7c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=dcf5fa7c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dcf5fa7c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=39982 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcf5fa7c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=39982 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcf5fa7c24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1222 identity=39982 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcf5fa7c24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1222 identity=39982 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dcf5fa7c24 endpointID=1222 k8sNamespace=openstack k8sPodName=barbican-ks-user-rlkx2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a1f1812d-41d7-4262-9f22-92d69985aeb6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=dcf5fa7c24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1222 identity=39982 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-user-rlkx2 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.55 0bcd7efb-9ab3-48e0-a3b7-be2d4ef5daa6 default }" containerID=12a95d61d962923018fac1a9fd544873ef239cf52ac91783a8ffbec2b48f2d2f datapathConfiguration="&{false false false false false }" interface=lxcfb4bede9911b k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbqnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12a95d61d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbqnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12a95d61d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbqnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12a95d61d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=25837 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbqnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12a95d61d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=25837 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbqnv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=12a95d61d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=251 identity=25837 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbqnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=12a95d61d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=25837 ipv4=10.0.0.55 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tbqnv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 5d12a089-e9af-4ff8-993c-c2137fc74872 default }" containerID=3f1196c427cd2312cf637ce01a4f35f4ed253eecbba7c7efb259edcbaf457261 datapathConfiguration="&{false false false false false }" interface=lxc196adb49d5b7 k8sPodName=openstack/rook-ceph-detect-version-cdf6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f1196c427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cdf6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f1196c427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=95022a33-2996-45be-a931-278a6321aa24,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=95022a33-2996-45be-a931-278a6321aa24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cdf6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=95022a33-2996-45be-a931-278a6321aa24;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=95022a33-2996-45be-a931-278a6321aa24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f1196c427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=21143 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=95022a33-2996-45be-a931-278a6321aa24,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=95022a33-2996-45be-a931-278a6321aa24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cdf6h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3f1196c427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=21143 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cdf6h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f1196c427 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=379 identity=21143 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cdf6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f1196c427 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=379 identity=21143 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cdf6h subsys=daemon level=info msg="Delete endpoint request" containerID=3f1196c427 endpointID=379 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-cdf6h subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=95022a33-2996-45be-a931-278a6321aa24 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=95022a33-2996-45be-a931-278a6321aa24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3f1196c427 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=379 identity=21143 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cdf6h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 3b80339e-85ab-425f-bc64-aac2d73ff150 default }" containerID=fd805110269fe72717035ab71064513b0d73dabbdc0b5db9fadb9e849e08f28b datapathConfiguration="&{false false false false false }" interface=lxc9680eedc0b28 k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd80511026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd80511026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd80511026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identity=810 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd80511026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1619 identity=810 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd80511026 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1619 identity=810 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd80511026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1619 identity=810 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl subsys=daemon level=info msg="Delete endpoint request" containerID=fd80511026 endpointID=1619 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-jnrrl subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=48ebeaf0-5990-4c6d-9c7d-ee15261f15a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=fd80511026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1619 identity=810 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jnrrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 71407021-fe30-4221-8218-4783bc69b7ff default }" containerID=4a7d5310f6b5f8c73862070a2919ae91ace313d51a98b9f7e2622c09527ab73a datapathConfiguration="&{false false false false false }" interface=lxc3cec619f4960 k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a7d5310f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a7d5310f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a7d5310f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=5820 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a7d5310f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=5820 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a7d5310f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=5820 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a7d5310f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=5820 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 subsys=daemon level=info msg="Delete endpoint request" containerID=4a7d5310f6 endpointID=782 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4a7d5310f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=5820 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0bcccb9b-ecf5-4866-9a5a-4b3e73f7d359 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 45bc0289-f66b-43f3-8cef-375d951ad970 default }" containerID=99cb7e3938239dfc47d305a45de2436142ac4cdd0c92db0d0def2c16d089cfcb datapathConfiguration="&{false false false false false }" interface=lxc981e88084c27 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99cb7e3938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99cb7e3938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99cb7e3938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=9681 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99cb7e3938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=9681 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99cb7e3938 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1564 identity=9681 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99cb7e3938 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=9681 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 ccdcb834-4290-40ab-b0b8-1b379ba3be97 default }" containerID=1a644fc8d21ee569d0b307015d1f92cae6116e07220020c756df3c114907fd2f datapathConfiguration="&{false false false false false }" interface=lxcd0dd910f8928 k8sPodName=openstack/glance-db-init-7xkqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a644fc8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a644fc8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1a644fc8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1a644fc8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=18849 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a644fc8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=18849 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a644fc8d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=836 identity=18849 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a644fc8d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=836 identity=18849 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1a644fc8d2 endpointID=836 k8sNamespace=openstack k8sPodName=glance-db-init-7xkqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=6df625e2-2773-46b6-a09e-5ff4829fd067 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1a644fc8d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=836 identity=18849 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-7xkqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 a17affa7-41d7-4084-8cc4-4dd37ac7f5dd default }" containerID=ce19a2037687560ca46d5e5454a05ce1f745bbcdc2990acc80dc986476015b5f datapathConfiguration="&{false false false false false }" interface=lxc30d15b957e99 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-96hsl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce19a20376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-96hsl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce19a20376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-96hsl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce19a20376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=48555 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-96hsl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce19a20376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=48555 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-96hsl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ce19a20376 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=263 identity=48555 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-96hsl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce19a20376 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=263 identity=48555 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-96hsl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 eca25068-2224-4c1e-ad8f-f9596c4b52bb default }" containerID=5f7644416f57829491c191fddee162a5cc2aee6dc7e2bc628823fafd174d0ec3 datapathConfiguration="&{false false false false false }" interface=lxcae058530dbc8 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5sdp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f7644416f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3238 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5sdp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f7644416f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3238 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5sdp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f7644416f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3238 identity=13867 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5sdp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f7644416f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3238 identity=13867 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5sdp4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f7644416f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3238 identity=13867 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5sdp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f7644416f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3238 identity=13867 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5sdp4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 2e8e3507-2ef2-4ffc-a944-a2aa282a58a4 default }" containerID=aab44e51d69dc6cc4176f09c64164612c357248586eb74997943b28f189c7a18 datapathConfiguration="&{false false false false false }" interface=lxcaec903adb838 k8sPodName=openstack/glance-db-sync-plhrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aab44e51d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-db-sync-plhrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aab44e51d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-db-sync-plhrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aab44e51d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=25574 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-db-sync-plhrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aab44e51d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=25574 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-db-sync-plhrz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aab44e51d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=525 identity=25574 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-db-sync-plhrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=aab44e51d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=525 identity=25574 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-db-sync-plhrz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aab44e51d6 endpointID=525 k8sNamespace=openstack k8sPodName=glance-db-sync-plhrz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=bc251e3e-6281-40b7-bf11-e2b549b7f10b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aab44e51d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=525 identity=25574 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/glance-db-sync-plhrz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 efa0cd73-eec1-4fcf-bc8d-94b6752f6cf0 default }" containerID=af0e74fb60aa32bf949a9364410e6cbb20625c9324e738bbaaa325273def8106 datapathConfiguration="&{false false false false false }" interface=lxcc982139fdb6e k8sPodName=openstack/glance-rabbit-init-tzwcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af0e74fb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-rabbit-init-tzwcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af0e74fb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-rabbit-init-tzwcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af0e74fb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=1799 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-rabbit-init-tzwcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af0e74fb60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=1799 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-rabbit-init-tzwcl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af0e74fb60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=677 identity=1799 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-rabbit-init-tzwcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=af0e74fb60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=677 identity=1799 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-rabbit-init-tzwcl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af0e74fb60 endpointID=677 k8sNamespace=openstack k8sPodName=glance-rabbit-init-tzwcl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=267ff2e4-fae9-454f-8aa9-8af227328e58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=af0e74fb60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=677 identity=1799 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/glance-rabbit-init-tzwcl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 15a30eb8-e53a-4510-bf1b-2ca41a47de25 default }" containerID=760404da7fcc0e0e19727ce3ef1e0f068ac7de0fbe122d76c298ecd1dd7e4684 datapathConfiguration="&{false false false false false }" interface=lxc726984b1b152 k8sPodName=openstack/glance-ks-service-rg7wl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=760404da7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=760404da7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=760404da7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=760404da7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=46553 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=760404da7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=46553 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=760404da7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=714 identity=46553 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl subsys=endpoint level=info msg="Successful endpoint creation" containerID=760404da7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=46553 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=760404da7f endpointID=714 k8sNamespace=openstack k8sPodName=glance-ks-service-rg7wl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6c37231e-5f6a-4841-961e-882e73714f6d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=760404da7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=46553 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-ks-service-rg7wl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 1bb47830-ba6c-4af3-be29-71bbaf4fa6d6 default }" containerID=362f6afd69e16a26697dcf04b870e2d3e06e3077b1763b8352730d52ac4e52b2 datapathConfiguration="&{false false false false false }" interface=lxccc48466f4a60 k8sPodName=openstack/glance-ks-endpoints-kttls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=362f6afd69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-kttls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=362f6afd69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-kttls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=362f6afd69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=46772 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-kttls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=362f6afd69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=46772 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-kttls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=362f6afd69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3432 identity=46772 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-kttls subsys=endpoint level=info msg="Successful endpoint creation" containerID=362f6afd69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3432 identity=46772 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-kttls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=362f6afd69 endpointID=3432 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kttls subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ea23573b-1e66-4bec-81bc-acc902d8c280 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=362f6afd69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3432 identity=46772 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-endpoints-kttls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 3884e9de-60dc-4abb-824e-72ccebc3f43f default }" containerID=bd1d4e04b694803ba5b72d90482cf3828c9c23f882f64cdddab54c241e588377 datapathConfiguration="&{false false false false false }" interface=lxca13157944da0 k8sPodName=openstack/glance-ks-user-5r2cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd1d4e04b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-5r2cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd1d4e04b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-5r2cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd1d4e04b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=18055 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-5r2cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd1d4e04b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=18055 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-5r2cf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd1d4e04b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3094 identity=18055 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-5r2cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd1d4e04b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3094 identity=18055 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-5r2cf subsys=daemon level=info msg="Delete endpoint request" containerID=bd1d4e04b6 endpointID=3094 k8sNamespace=openstack k8sPodName=glance-ks-user-5r2cf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=b152bbcd-2e2c-461d-a156-b91cf6f8c7e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bd1d4e04b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3094 identity=18055 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-ks-user-5r2cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 c51caecb-c85b-4dc7-85fd-b17745d6b30d default }" containerID=76311b444b49b98cbb6f85bcf02ebc57928760beac41dc0ed2ff590a0d063790 datapathConfiguration="&{false false false false false }" interface=lxcce92a41de3f0 k8sPodName=openstack/glance-metadefs-load-5xwm7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76311b444b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-5xwm7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76311b444b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-5xwm7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76311b444b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=44633 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-5xwm7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76311b444b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=44633 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-5xwm7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76311b444b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=917 identity=44633 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-5xwm7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76311b444b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=917 identity=44633 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-5xwm7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76311b444b endpointID=917 k8sNamespace=openstack k8sPodName=glance-metadefs-load-5xwm7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a4949054-3059-4435-acd9-5ebe8b8a6004 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=76311b444b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=917 identity=44633 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-metadefs-load-5xwm7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 a9684e38-a164-46ae-b81c-b2973d2dec46 default }" containerID=87637745b8a6d780a05f51814e2452eb4199a9f99c35a9757105c56d8322fed1 datapathConfiguration="&{false false false false false }" interface=lxc91e0c34c9f09 k8sPodName=openstack/glance-storage-init-46fsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87637745b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-storage-init-46fsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87637745b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-storage-init-46fsk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87637745b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 identity=13790 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-storage-init-46fsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87637745b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1784 identity=13790 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-storage-init-46fsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87637745b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1784 identity=13790 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-storage-init-46fsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=87637745b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1784 identity=13790 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-storage-init-46fsk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87637745b8 endpointID=1784 k8sNamespace=openstack k8sPodName=glance-storage-init-46fsk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=bd8df69e-10dc-4a56-a9ea-eb0f30ba27a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=87637745b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1784 identity=13790 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/glance-storage-init-46fsk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 aa463a0e-f498-44c5-80ce-5fcb7da9db39 default }" containerID=adedca733ea33f7bed4c55a613c24f3aad5cabd585e91970c30804b86c758483 datapathConfiguration="&{false false false false false }" interface=lxcbd1f75a60ea4 k8sPodName=openstack/glance-api-5c8d9fcbc7-kjmc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adedca733e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-5c8d9fcbc7-kjmc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adedca733e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-5c8d9fcbc7-kjmc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adedca733e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=54371 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-5c8d9fcbc7-kjmc4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=adedca733e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=54371 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-5c8d9fcbc7-kjmc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adedca733e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=415 identity=54371 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-5c8d9fcbc7-kjmc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=adedca733e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=415 identity=54371 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/glance-api-5c8d9fcbc7-kjmc4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.113 56a982eb-5384-452c-b913-7a2cb4b6f149 default }" containerID=c0a8267088cc3c9b992f7d736a11f489c68ef781defa5480cd42a684762da367 datapathConfiguration="&{false false false false false }" interface=lxc1c12af029948 k8sPodName=openstack/staffeln-api-86c8478686-2vd6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0a8267088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/staffeln-api-86c8478686-2vd6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0a8267088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/staffeln-api-86c8478686-2vd6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c0a8267088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/staffeln-api-86c8478686-2vd6v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0a8267088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=49634 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/staffeln-api-86c8478686-2vd6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0a8267088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=49634 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/staffeln-api-86c8478686-2vd6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 a8938633-9d6e-4279-b7d1-a4215e7e334f default }" containerID=03ba6bafe2a8141ca672e42074e73d9c1c955ec2b9d9963f23f0a2f18a975135 datapathConfiguration="&{false false false false false }" interface=lxc78ee83e45ad4 k8sPodName=openstack/staffeln-conductor-6759485ff7-n7hbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03ba6bafe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-6759485ff7-n7hbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03ba6bafe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-6759485ff7-n7hbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03ba6bafe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=38885 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-6759485ff7-n7hbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03ba6bafe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=38885 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-6759485ff7-n7hbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 44524051-31fb-4281-8da6-a7b3f27e0853 default }" containerID=33cdd073c863279bcf0c4db0405d98e0c82108d49864d3298214b00a4a7640f5 datapathConfiguration="&{false false false false false }" interface=lxccaccb669ee08 k8sPodName=openstack/staffeln-db-init-xpnbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33cdd073c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-xpnbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33cdd073c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-xpnbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33cdd073c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identity=5257 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-xpnbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33cdd073c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3299 identity=5257 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-xpnbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0a8267088 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=579 identity=49634 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/staffeln-api-86c8478686-2vd6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0a8267088 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=49634 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/staffeln-api-86c8478686-2vd6v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=03ba6bafe2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2907 identity=38885 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-6759485ff7-n7hbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=03ba6bafe2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2907 identity=38885 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-6759485ff7-n7hbm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=33cdd073c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3299 identity=5257 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-xpnbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=33cdd073c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3299 identity=5257 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-xpnbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33cdd073c8 endpointID=3299 k8sNamespace=openstack k8sPodName=staffeln-db-init-xpnbv subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=6f77d65e-25ec-44cd-abb7-11d153c2fde3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=33cdd073c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3299 identity=5257 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/staffeln-db-init-xpnbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 96b4edb4-291d-44ef-853e-bcb584fc519b default }" containerID=88100d4b644d9a36bb91229728f745eeedf6acbd3d3b9599f5464e7ff2c531ed datapathConfiguration="&{false false false false false }" interface=lxc131d89f649d1 k8sPodName=openstack/staffeln-db-sync-jjl64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88100d4b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-jjl64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88100d4b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=93398c18-f018-4ec5-920f-9d68499b8c18,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=93398c18-f018-4ec5-920f-9d68499b8c18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-jjl64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=88100d4b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-jjl64 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=93398c18-f018-4ec5-920f-9d68499b8c18;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=93398c18-f018-4ec5-920f-9d68499b8c18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88100d4b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=38709 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=93398c18-f018-4ec5-920f-9d68499b8c18,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=93398c18-f018-4ec5-920f-9d68499b8c18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-jjl64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88100d4b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=38709 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-jjl64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88100d4b64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1006 identity=38709 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-jjl64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88100d4b64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1006 identity=38709 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-jjl64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager