level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.103879ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="55.591µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.439386ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.131µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.50643ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.82µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.29µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="48.691µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="49.931µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="182.415µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="389.23µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.035575ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.724157ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="107.413µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="57.791µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="632.386µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="137.914µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="84.532µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=88.030233ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="90.252µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.221.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.005636ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.563526ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="17.721µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.401801ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.931µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="26.79µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.54µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="87.712µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="423.071µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.77µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="339.599µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.147369ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.446006ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.12µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="77.362µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.221 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.221 ipAddr.ipv6="" k8sNodeIP=162.253.55.221 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.221" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.172" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.221" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.221} {CiliumInternalIP 10.0.0.172}] 10.0.0.0/24 [] [] 10.0.0.180 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46803" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.588140176s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="64.572µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.811µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="116.303µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="67.121µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1411 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.65889562s subsys=daemon level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Compiled new BPF template" BPFCompilationTime=298.862765ms file-path=/var/run/cilium/state/templates/50a4bb5e80790e5b33b6a503ca7f52b2f0499d80d6b892548ddf8c8f0610c965/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1411 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 ipv4=10.0.0.180 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identityLabels="reserved:health" ipv4=10.0.0.180 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1678 identity=4 identityLabels="reserved:health" ipv4=10.0.0.180 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.161 ef68df9c-d8ef-4495-92a1-145fbfc00b53 default }" containerID=59986688fb8442309c2cb6b754bf447ee77e1eea6a7835fade4b38a10953634a datapathConfiguration="&{false false false false false }" interface=lxce3b5af8f8c20 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59986688fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59986688fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=59986688fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59986688fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=17202 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59986688fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=17202 ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.077678578s file-path=/var/run/cilium/state/templates/e0a3a633074f21b949b9de5114ae23a29aee96affcdb70478af13764756c369d/bpf_lxc.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.42 3f02c70b-983a-453b-ab8c-bd4347e37e3b default }" containerID=5c58b839bc61717d21d5a1dc9a709559baffc2e3ed1a0e59a172bd954f7c7814 datapathConfiguration="&{false false false false false }" interface=lxc154259646fcb k8sPodName=kube-system/coredns-7c96b6546b-wr652 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c58b839bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wr652 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c58b839bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wr652 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c58b839bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=62686 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wr652 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c58b839bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=62686 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wr652 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59986688fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=970 identity=17202 ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h subsys=endpoint level=info msg="Successful endpoint creation" containerID=59986688fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=970 identity=17202 ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1678 identity=4 ipv4=10.0.0.180 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c58b839bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=944 identity=62686 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wr652 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c58b839bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=944 identity=62686 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wr652 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59986688fb endpointID=970 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-dd89h subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b35fa7bf-48b7-4fa9-88bf-e6cd7d616df9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=59986688fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=970 identity=17202 ipv4=10.0.0.161 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-dd89h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 af3acf7f-fe2f-473b-b81e-881582b24b96 default }" containerID=3e9e7865ffffc0e0de41f6d2c1cba39ff5f8ac42a149e7ced22342ed6aea93bb datapathConfiguration="&{false false false false false }" interface=lxc87a0f15e0b02 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e9e7865ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e9e7865ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e9e7865ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e9e7865ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=33919 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e9e7865ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=33919 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e9e7865ff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=874 identity=33919 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e9e7865ff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=874 identity=33919 ipv4=10.0.0.36 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kpzs6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1411 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01411 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01411 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01411 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01411:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1411 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 371f2f7c-e9ea-4af6-985d-5eb91b18d647 default }" containerID=af709d152fa61f68110d62aa836dfe3a4a46261286af958d21e6416e46446f93 datapathConfiguration="&{false false false false false }" interface=lxcede35c3f7343 k8sPodName=kube-system/coredns-67659f764b-7l67m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af709d152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-7l67m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af709d152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-7l67m subsys=endpoint level=info msg="Identity of endpoint changed" containerID=af709d152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 identity=62686 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-7l67m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af709d152f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3765 identity=62686 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-7l67m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 565e7c84-a7de-4d6a-85e0-451e623fcb9f default }" containerID=0beb1fa07a6944859d7a18fd4a9b4818c6aa0e53c620030c8e4ce91da31659a7 datapathConfiguration="&{false false false false false }" interface=lxc7cbf18960728 k8sPodName=kube-system/coredns-67659f764b-gskfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0beb1fa07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-gskfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0beb1fa07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-gskfn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0beb1fa07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=62686 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-gskfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0beb1fa07a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=62686 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-gskfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af709d152f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3765 identity=62686 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-7l67m subsys=endpoint level=info msg="Successful endpoint creation" containerID=af709d152f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3765 identity=62686 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-7l67m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0beb1fa07a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=106 identity=62686 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-gskfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0beb1fa07a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=106 identity=62686 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-gskfn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 b8bbcc56-73c9-4193-8a77-c36f852cbd2d default }" containerID=00d29c0bf42e718afd8904c3d41edccba6a609297bb136894606c32add9581b3 datapathConfiguration="&{false false false false false }" interface=lxc39fb7333ad36 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00d29c0bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00d29c0bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00d29c0bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00d29c0bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=33238 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00d29c0bf4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3098 identity=33238 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00d29c0bf4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3098 identity=33238 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00d29c0bf4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3098 identity=33238 ipv4=10.0.0.229 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qk645 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c58b839bc endpointID=944 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-wr652 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=5c58b839bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=944 identity=62686 ipv4=10.0.0.42 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wr652 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 506bbf82-a7d4-41e4-a6ce-27aaa478016b default }" containerID=382befbee0a1afe05f8bb88d6e5f16a8463f54f02ade2bcd3b4149648386179f datapathConfiguration="&{false false false false false }" interface=lxce40a4db7d423 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=382befbee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=382befbee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=382befbee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=382befbee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=19854 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=382befbee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=19854 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 acae25b9-eeeb-47be-b866-eab70d643109 default }" containerID=288573f189b7323e4c65bef6b6045ef6182cd6cac7397edafb1a2304d17ff4e0 datapathConfiguration="&{false false false false false }" interface=lxc61bfe7ffc894 k8sPodName=cert-manager/cert-manager-75c4c745bc-rz6cq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=288573f189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rz6cq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=288573f189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rz6cq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.158 ab9561d6-4836-48ec-8678-e37ceef1112a default }" containerID=e3f934c49f6e1e6052dd2935dd53aef9e128a4511c499cb47a96ed3ee7b69f55 datapathConfiguration="&{false false false false false }" interface=lxca7167ab92aca k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dppvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3f934c49f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.158 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dppvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3f934c49f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.158 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dppvh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=288573f189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=27572 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rz6cq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=288573f189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=27572 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rz6cq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3f934c49f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=48498 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.158 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dppvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3f934c49f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=48498 ipv4=10.0.0.158 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dppvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=288573f189 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1889 identity=27572 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rz6cq subsys=endpoint level=info msg="Successful endpoint creation" containerID=288573f189 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1889 identity=27572 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rz6cq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=382befbee0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1316 identity=19854 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=382befbee0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1316 identity=19854 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-96q25 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e3f934c49f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1868 identity=48498 ipv4=10.0.0.158 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dppvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3f934c49f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1868 identity=48498 ipv4=10.0.0.158 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-dppvh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 536fd00c-46cd-4cc4-8016-11ce97fffe04 default }" containerID=935d83156aa6cc040aa43ea97896d5fed60be61c000cb9d2e1f79fa2aed2b691 datapathConfiguration="&{false false false false false }" interface=lxce433b88b80e2 k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=935d83156a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=935d83156a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=935d83156a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=9696 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=935d83156a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=9696 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=935d83156a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=409 identity=9696 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=935d83156a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=409 identity=9696 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=935d83156a endpointID=409 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-jfrlt subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=072193e2-1661-4c56-8ff9-d0af6e57a985 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=935d83156a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=409 identity=9696 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jfrlt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 40c2dff3-7f50-45a0-86de-a83006ae72d1 default }" containerID=9857927c663c06e06ba539e9131455248f21166c0c6f1b66555481f503570b1e datapathConfiguration="&{false false false false false }" interface=lxcdaebc327a109 k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9857927c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9857927c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9857927c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9857927c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 identity=35410 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9857927c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2070 identity=35410 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9857927c66 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2070 identity=35410 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9857927c66 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2070 identity=35410 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9857927c66 endpointID=2070 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-5zfz7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=56783a5b-c5a1-46ba-88c8-5ba9f3ee94d6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=9857927c66 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2070 identity=35410 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5zfz7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 d22cf1ec-48b5-4824-9d0f-c212b23e5a73 default }" containerID=b4320c115eb74af502c980f729874379e65c4fe84e92a9805d86c38ee3070128 datapathConfiguration="&{false false false false false }" interface=lxc5224b5724360 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lzjmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4320c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lzjmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4320c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lzjmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4320c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=57786 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lzjmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4320c115e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=57786 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lzjmm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b4320c115e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=655 identity=57786 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lzjmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4320c115e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=655 identity=57786 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-lzjmm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 ec2ea58c-e398-4a94-8475-0fc80a628510 default }" containerID=34d56086e5141ac05bb4f09968e272883256635f058684f60748a4beacf98de0 datapathConfiguration="&{false false false false false }" interface=lxcdc296b14db74 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34d56086e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 ipv4=10.0.0.38 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34d56086e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.38 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34d56086e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=1058 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.38 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34d56086e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=1058 ipv4=10.0.0.38 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34d56086e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2389 identity=1058 ipv4=10.0.0.38 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=34d56086e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2389 identity=1058 ipv4=10.0.0.38 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34d56086e5 endpointID=2389 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-4brwp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ebf07366-de4f-4cd3-b369-cec7bcc0916f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=34d56086e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2389 identity=1058 ipv4=10.0.0.38 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4brwp subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c27ba146-0e06-49c6-99e8-b61d126be539] Description:}]" policyAddRequest=c953bf6c-943f-43ed-9e92-2c451bdd8b9e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c953bf6c-943f-43ed-9e92-2c451bdd8b9e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=af8fae21-96f6-4f50-9247-4a90dc74b534] Description:}]" policyAddRequest=c0fe1a76-8785-4570-8da2-5c343cbe4924 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=c0fe1a76-8785-4570-8da2-5c343cbe4924 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 4e68296d-6108-49f4-b1f1-a11294a1f071 default }" containerID=8db8890362989e0b910661b7f4775e209b4b82ff9f51b85b76074247117091ea datapathConfiguration="&{false false false false false }" interface=lxca2acafa19293 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bjhtm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8db8890362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bjhtm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8db8890362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bjhtm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8db8890362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=701 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bjhtm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8db8890362 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=701 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bjhtm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8db8890362 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=218 identity=701 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bjhtm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8db8890362 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=218 identity=701 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-bjhtm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 f499d84a-c857-4955-84c4-9fdd80823f9a default }" containerID=a24bd0a86cb15e103c33747ccdde5f967045a3ffd1936bfc0891a6abe389ed55 datapathConfiguration="&{false false false false false }" interface=lxc97a5b21d1581 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jmkpl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a24bd0a86c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jmkpl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a24bd0a86c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jmkpl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a24bd0a86c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=45355 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jmkpl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a24bd0a86c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=45355 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jmkpl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a24bd0a86c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=98 identity=45355 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jmkpl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a24bd0a86c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=98 identity=45355 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jmkpl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 226c5bf9-788a-4089-bc3b-557051f9a68b default }" containerID=fdf71bf3dded067d948301dc24cfd19d641e785cac817ad4e1aef687f3ce0024 datapathConfiguration="&{false false false false false }" interface=lxc4e6b4bfc0118 k8sPodName=openstack/pxc-operator-69cb5bbdb9-c28kf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdf71bf3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-c28kf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdf71bf3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-c28kf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdf71bf3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=11067 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-c28kf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fdf71bf3dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=11067 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-c28kf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdf71bf3dd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=376 identity=11067 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-c28kf subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdf71bf3dd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=376 identity=11067 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-c28kf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 236a1069-de92-4b36-95c8-069827a2b024 default }" containerID=d1acddcfb686fe39516be7b753ca9e853cc24f49a115ea77cb663804d641dd66 datapathConfiguration="&{false false false false false }" interface=lxc891e1fe42e33 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1acddcfb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1acddcfb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d1acddcfb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d1acddcfb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 identity=8855 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1acddcfb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 identity=8855 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1acddcfb6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3150 identity=8855 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1acddcfb6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3150 identity=8855 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.22 d68e0152-6f1d-4267-81dc-b77e9a0ee34b default }" containerID=9558b1e5490456c8cbaf843ad3ad0a6b6f456c9fdc987aa829b4becf39b14321 datapathConfiguration="&{false false false false false }" interface=lxcee244bc3d961 k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9558b1e549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9558b1e549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9558b1e549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9558b1e549 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9558b1e549 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=310 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9558b1e549 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=310 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9558b1e549 endpointID=310 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9558b1e549 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=310 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8bafc38c-80d7-40cb-a986-83c3b8791885 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 bf3d0133-f940-478e-8eeb-3ce57940f22a default }" containerID=fe37d959554ca48901c27be057c304c440f7b3f4a2d37542d152bab3541ca3fb datapathConfiguration="&{false false false false false }" interface=lxcb8131e6189c4 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe37d95955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe37d95955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fe37d95955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe37d95955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=4475 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe37d95955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=4475 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe37d95955 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1564 identity=4475 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe37d95955 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1564 identity=4475 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=aa9e7697-e26d-4399-9207-b436a21fed4c] Description:}]" policyAddRequest=4d784821-42db-4dc9-b6ec-f51bd08e4fa8 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=4d784821-42db-4dc9-b6ec-f51bd08e4fa8 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 c7619f73-2cbf-48a5-bd23-abb4e0410512 default }" containerID=592bf1c1bf3851d49a13110b4e8b7dcc24c9505d10d62c46f55334d50d3e1cfc datapathConfiguration="&{false false false false false }" interface=lxc34ee0d4ad041 k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=592bf1c1bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=592bf1c1bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=592bf1c1bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=592bf1c1bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=62481 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=592bf1c1bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2083 identity=62481 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=592bf1c1bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2083 identity=62481 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 subsys=daemon level=info msg="Delete endpoint request" containerID=592bf1c1bf endpointID=2083 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=592bf1c1bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2083 identity=62481 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b9380d8-013a-4654-909e-05364e12f9b3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 ac7be3d4-9257-47df-9455-b9ef642863aa default }" containerID=0a84943a85fbe6defa8ca28b4b49c155ad1bcad8b32cc145c2a390d8e021d435 datapathConfiguration="&{false false false false false }" interface=lxcb2cfbb97b09d k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a84943a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a84943a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a84943a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 identity=17997 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a84943a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1507 identity=17997 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a84943a85 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1507 identity=17997 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a84943a85 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1507 identity=17997 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=0eccaad6-25fd-478a-8089-5f14a9e0bce9] Description:}]" policyAddRequest=b61c4976-3611-4cc4-b6d8-7e6f5e225fb9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b61c4976-3611-4cc4-b6d8-7e6f5e225fb9 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.41 ef82ebdc-c999-4414-be60-51a4f1e106c0 default }" containerID=49bfaeaa4c9bd1ff8ea6c2baf042d25232488904a24fccc94b25fd94dae5d0f2 datapathConfiguration="&{false false false false false }" interface=lxc860ddb1d38e9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49bfaeaa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 ipv4=10.0.0.41 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49bfaeaa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.41 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49bfaeaa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=8823 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.41 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49bfaeaa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=8823 ipv4=10.0.0.41 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49bfaeaa4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=325 identity=8823 ipv4=10.0.0.41 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49bfaeaa4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=325 identity=8823 ipv4=10.0.0.41 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007094836798463349 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.231 69860fbb-f46e-48c6-bf20-c9b8aecff962 default }" containerID=1abe326aa275fe53d789b6b7654e011d6f64f4b659b0520a37493ba32a24ef97 datapathConfiguration="&{false false false false false }" interface=lxc394a5f8ffe79 k8sPodName=monitoring/node-feature-discovery-worker-zwlsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1abe326aa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zwlsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1abe326aa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zwlsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1abe326aa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zwlsf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1abe326aa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=2948 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zwlsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1abe326aa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=2948 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zwlsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1abe326aa2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1811 identity=2948 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zwlsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1abe326aa2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1811 identity=2948 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zwlsf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 9e3dc474-a585-45bc-bd72-94d902aab41e default }" containerID=84f777871273219c6a7fcef310b45bced1f9b6291325a44dee12210303c60fbd datapathConfiguration="&{false false false false false }" interface=lxcc274abac66fe k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g49f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84f7778712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g49f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84f7778712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g49f4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.233 3ff8553f-2073-4206-b641-b8ca454dc6ee default }" containerID=a1e7890797f2d6ff96534f5e204008f293f33f8ce7831b4427ce716fe9998a8c datapathConfiguration="&{false false false false false }" interface=lxc5ce31f1d1bdd k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z9dsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1e7890797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z9dsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1e7890797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z9dsv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84f7778712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identity=18661 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g49f4 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=84f7778712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identity=18661 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g49f4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1e7890797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=31660 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z9dsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1e7890797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=31660 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z9dsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84f7778712 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2894 identity=18661 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g49f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84f7778712 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2894 identity=18661 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g49f4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a1e7890797 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1898 identity=31660 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z9dsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1e7890797 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1898 identity=31660 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-z9dsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.205 8eca4b49-ba93-4f5a-a2dc-9c5c56b0e075 default }" containerID=18bc90d382b12ae461c1f72b34947c617a8e4b5f0eb1fe695e31157aa715b363 datapathConfiguration="&{false false false false false }" interface=lxc3913260e0dee k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hpq8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18bc90d382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hpq8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18bc90d382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hpq8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18bc90d382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=11014 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hpq8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18bc90d382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=11014 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hpq8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18bc90d382 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=852 identity=11014 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hpq8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=18bc90d382 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=11014 ipv4=10.0.0.205 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hpq8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1411 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01411 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01411 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01411 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01411:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1411 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 220c1a04-90bf-4c7f-9a21-8a1366acdca1 default }" containerID=37ee5a4e5f6a9b5fde56f438459e39267a216e6ec87d5ef838b168be1d30212c datapathConfiguration="&{false false false false false }" interface=lxc60c5c419694f k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37ee5a4e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37ee5a4e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37ee5a4e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=22320 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37ee5a4e5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=309 identity=22320 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37ee5a4e5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=309 identity=22320 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=37ee5a4e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=309 identity=22320 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37ee5a4e5f endpointID=309 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-pb4tg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d93959ae-40e9-454d-8bd1-7baedc1b79ed k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=37ee5a4e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=309 identity=22320 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pb4tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 4daad3ef-f150-4998-b15b-a2117c23f64f default }" containerID=ee9074b3f378ecdb1f91e0483959d61de9441153d84ca48e9257f810f3dff571 datapathConfiguration="&{false false false false false }" interface=lxc4085484887e4 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z57wq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee9074b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z57wq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee9074b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z57wq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ee9074b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=54977 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z57wq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee9074b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=54977 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z57wq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 7e137f1d-ff5d-45b9-8011-96f01a42a068 default }" containerID=d887952d7faeeb6ae6db4e4c8a358e02883a209ff927605b245cd1d1ba76f4df datapathConfiguration="&{false false false false false }" interface=lxc50599757c5d7 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8p52r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d887952d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8p52r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d887952d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8p52r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d887952d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=23856 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8p52r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d887952d7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=23856 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8p52r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 ac094817-e5b7-45b2-b78d-25f0a008ef3e default }" containerID=33375386870ba365c2e72914da1bf5b5b53ad5da2dcfb15019f7605b33955455 datapathConfiguration="&{false false false false false }" interface=lxc2ad0ef979a49 k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7bb7c8b-lrbw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3337538687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7bb7c8b-lrbw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3337538687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7bb7c8b-lrbw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3337538687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 identity=34174 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7bb7c8b-lrbw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3337538687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 identity=34174 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7bb7c8b-lrbw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee9074b3f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=158 identity=54977 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z57wq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee9074b3f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=158 identity=54977 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z57wq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d887952d7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1580 identity=23856 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8p52r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d887952d7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1580 identity=23856 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-8p52r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3337538687 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1948 identity=34174 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7bb7c8b-lrbw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3337538687 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1948 identity=34174 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7ff7bb7c8b-lrbw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 263d3481-d54e-4b34-9d58-39c4bd37a6fe default }" containerID=305a999e6a0c635f2ac7e7fccf632e585dab34670dc4b0a528bf03ba16589d6e datapathConfiguration="&{false false false false false }" interface=lxcd4109f1cbda9 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=305a999e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=305a999e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=305a999e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=25921 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=305a999e6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=514 identity=25921 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=305a999e6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=514 identity=25921 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=305a999e6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=514 identity=25921 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=305a999e6a endpointID=514 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-f7qxq subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=01677362-1b4f-41dc-817c-bc5e954e9057 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=305a999e6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=514 identity=25921 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-f7qxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 fc6e0ef1-7464-4f43-8e84-02e8efbbf955 default }" containerID=3be6e6929d21203e564d707340a3f30dac968aad39d0dc86e18dbf948ee5b209 datapathConfiguration="&{false false false false false }" interface=lxc6dab68bb35ce k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3be6e6929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3be6e6929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3be6e6929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3be6e6929d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3be6e6929d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=601 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3be6e6929d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=601 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 49d8ed07-9ff2-4267-ad15-d3604258b248 default }" containerID=15c54eb95b53cde7016b220aa12b4ae24da348507c92497d15242245d5e6ee52 datapathConfiguration="&{false false false false false }" interface=lxc7edd9f9a7727 k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15c54eb95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15c54eb95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=15c54eb95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15c54eb95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=62481 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15c54eb95b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=706 identity=62481 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15c54eb95b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=706 identity=62481 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 subsys=daemon level=info msg="Delete endpoint request" containerID=3be6e6929d endpointID=601 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=15c54eb95b endpointID=706 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3be6e6929d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=601 identity=62481 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa7d40-e11c-4412-8c5d-82a71022e576 subsys=endpoint level=info msg="Removed endpoint" containerID=15c54eb95b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=706 identity=62481 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb5ad463-31f4-4828-afe5-e8b3fb27b6d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 9939a436-4ad7-45c6-ad18-c7599988578d default }" containerID=29ca4ba87c7c6c0b642f86778dfb763dfebe63721a2b2d08ac54778c5152ef59 datapathConfiguration="&{false false false false false }" interface=lxc3e594d05113e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29ca4ba87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29ca4ba87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29ca4ba87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=23393 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29ca4ba87c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=23393 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 ad67a0d5-bd97-4393-a3f4-5ec66d41aa05 default }" containerID=844ee009f58c16e07ab56799352ddb6e174a6ae3080b1435b4dd82ae55892d1c datapathConfiguration="&{false false false false false }" interface=lxc11b887efbb11 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=844ee009f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=844ee009f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=844ee009f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=50097 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=844ee009f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=50097 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29ca4ba87c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=250 identity=23393 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29ca4ba87c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=250 identity=23393 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 019881ab-6b5c-422a-8407-5753b98afd74 default }" containerID=26de5ed145385fed03c2f631586474951398ffb89391b1a156de6fd74de589e4 datapathConfiguration="&{false false false false false }" interface=lxc7a0a13ea80db k8sPodName=monitoring/loki-gateway-cf54cb88c-8sbpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26de5ed145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8sbpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26de5ed145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8sbpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26de5ed145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=962 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8sbpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26de5ed145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2364 identity=962 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8sbpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=844ee009f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2641 identity=50097 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=844ee009f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=50097 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 b63c3661-afab-45d0-9ee1-5ae462b46794 default }" containerID=1e8c17ff7c79da00d8f68183d57970b121959836d63e6279f4af595047a1d89e datapathConfiguration="&{false false false false false }" interface=lxc4b98aa31fa61 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e8c17ff7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e8c17ff7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e8c17ff7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=41693 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e8c17ff7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3413 identity=41693 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 36baf8da-7e1e-4c37-82e9-a1e9598b9146 default }" containerID=6864c7fe043ec3d9c8699ea22d78a93200b89335a45ceccd759caa7106646c64 datapathConfiguration="&{false false false false false }" interface=lxc3899d9db6eba k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6864c7fe04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6864c7fe04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=26de5ed145 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2364 identity=962 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8sbpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=26de5ed145 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2364 identity=962 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-8sbpq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1e8c17ff7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3413 identity=41693 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e8c17ff7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3413 identity=41693 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6864c7fe04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=11272 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6864c7fe04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=11272 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6864c7fe04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2200 identity=11272 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6864c7fe04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2200 identity=11272 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 517a2db6-1d6a-44cc-9c72-204b0a732741 default }" containerID=efd7d941ca0a26a441db7e51061ba5dc189d98404f4e26e75907b2853ae9a236 datapathConfiguration="&{false false false false false }" interface=lxc5f55c5ce5491 k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efd7d941ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efd7d941ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efd7d941ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efd7d941ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=62481 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efd7d941ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1216 identity=62481 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efd7d941ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1216 identity=62481 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 98c8a238-0f3f-46a0-b3e6-eda63f1db3e4 default }" containerID=29868d3419ad618bb1d47739fdabac3ad2ca7a71160f75d8c5b3543e67ba043f datapathConfiguration="&{false false false false false }" interface=lxcdca141bb0ea5 k8sPodName=monitoring/vector-c5knt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29868d3419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/vector-c5knt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29868d3419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/vector-c5knt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=29868d3419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/vector-c5knt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29868d3419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=9785 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/vector-c5knt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29868d3419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=9785 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/vector-c5knt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29868d3419 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=414 identity=9785 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/vector-c5knt subsys=endpoint level=info msg="Successful endpoint creation" containerID=29868d3419 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=9785 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/vector-c5knt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=efd7d941ca endpointID=1216 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=efd7d941ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1216 identity=62481 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-772e27ae-a22f-45d5-9b85-3ae5e09618e3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 748c0b3c-cda4-422d-8d4b-e1e51794d01d default }" containerID=310e204d44658e5953c75c9c900bc76d078259aad0f6b255a3411cbc723b4965 datapathConfiguration="&{false false false false false }" interface=lxc6b21f2be6a0e k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=310e204d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=310e204d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=310e204d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identity=11802 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=310e204d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identity=11802 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=310e204d44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2895 identity=11802 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=310e204d44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2895 identity=11802 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 5d30ec26-bf92-4f7d-8ef9-fbd41444c6df default }" containerID=da09a1ff8ae5cd4b2ecc2d366c4134c3b7992223306c358a24768327b4514811 datapathConfiguration="&{false false false false false }" interface=lxca894ac1b4cd9 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqlkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da09a1ff8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqlkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da09a1ff8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqlkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da09a1ff8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=55646 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqlkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da09a1ff8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=55646 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqlkf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da09a1ff8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=780 identity=55646 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqlkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=da09a1ff8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=780 identity=55646 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqlkf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 56024e33-2217-4c61-8d75-5ea63339d5cc default }" containerID=64e32937aef6041854718b1209fdf78a1801e736f8fcfcac80728b5174f0d444 datapathConfiguration="&{false false false false false }" interface=lxc00ea121e4df2 k8sPodName=openstack/memcached-memcached-6479589586-6sdtp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64e32937ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6sdtp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64e32937ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6sdtp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=64e32937ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=43615 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6sdtp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64e32937ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=43615 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6sdtp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64e32937ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=499 identity=43615 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6sdtp subsys=endpoint level=info msg="Successful endpoint creation" containerID=64e32937ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=499 identity=43615 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6sdtp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 96087686-06b5-4e2d-b00e-c54485f575ca default }" containerID=6cad0e093af9bd0f3ddeee769ac0b3d2cafff248372b3ff455f4cd22dec845d1 datapathConfiguration="&{false false false false false }" interface=lxc78b934b36f08 k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cad0e093a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cad0e093a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cad0e093a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cad0e093a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 identity=62481 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cad0e093a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3065 identity=62481 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cad0e093a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3065 identity=62481 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 subsys=daemon level=info msg="Delete endpoint request" containerID=6cad0e093a endpointID=3065 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6cad0e093a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3065 identity=62481 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62ff3d2-6e54-42b9-bedc-f4f2d13f8054 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 0f795596-7e26-462c-9f78-17b438aee3a1 default }" containerID=0938d648047f3eff01fae9dc6a024b342ee842d11e5c89710a17d7c797c41e47 datapathConfiguration="&{false false false false false }" interface=lxc7b6f2acaa09e k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0938d64804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0938d64804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0938d64804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=42288 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0938d64804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=42288 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0938d64804 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3703 identity=42288 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0938d64804 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3703 identity=42288 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 a4791006-deed-47d9-bdac-f61caae82fb5 default }" containerID=d6fb7c91cb5b53ae604fed308fe392da60924fee1ae9890686746ce3c170bedd datapathConfiguration="&{false false false false false }" interface=lxcc14fdb657969 k8sPodName=openstack/keystone-api-dd99b5bb7-brqbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6fb7c91cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-api-dd99b5bb7-brqbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6fb7c91cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-api-dd99b5bb7-brqbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d6fb7c91cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=36993 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-api-dd99b5bb7-brqbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6fb7c91cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=36993 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-api-dd99b5bb7-brqbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 bf8cffca-fe7a-46de-85ac-9dbe20bb9894 default }" containerID=3f96a9f4c8b96775195bbd9d4a6bb619d25a59fcf0dd0810f87e501b2b37bd09 datapathConfiguration="&{false false false false false }" interface=lxca394eeac67fc k8sPodName=openstack/keystone-credential-setup-q9s4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f96a9f4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-credential-setup-q9s4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f96a9f4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=621317ed-1f22-4527-b7de-045bf1926d29,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=621317ed-1f22-4527-b7de-045bf1926d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-credential-setup-q9s4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=621317ed-1f22-4527-b7de-045bf1926d29;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=621317ed-1f22-4527-b7de-045bf1926d29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f96a9f4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=12568 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=621317ed-1f22-4527-b7de-045bf1926d29,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=621317ed-1f22-4527-b7de-045bf1926d29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-credential-setup-q9s4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f96a9f4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=12568 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-credential-setup-q9s4f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6fb7c91cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=826 identity=36993 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-api-dd99b5bb7-brqbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6fb7c91cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=826 identity=36993 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-api-dd99b5bb7-brqbn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3f96a9f4c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1496 identity=12568 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-credential-setup-q9s4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f96a9f4c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1496 identity=12568 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-credential-setup-q9s4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f96a9f4c8 endpointID=1496 k8sNamespace=openstack k8sPodName=keystone-credential-setup-q9s4f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=621317ed-1f22-4527-b7de-045bf1926d29 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=621317ed-1f22-4527-b7de-045bf1926d29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3f96a9f4c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1496 identity=12568 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-credential-setup-q9s4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 e986c52b-5d93-4e7a-be48-66f8073302b7 default }" containerID=3f9b8e158549adf7761397f93baf830837a3bacf00f7a40a200a911d06d539e8 datapathConfiguration="&{false false false false false }" interface=lxcceb0506baf2f k8sPodName=openstack/keystone-db-init-8c6rf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f9b8e1585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8c6rf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f9b8e1585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8c6rf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f9b8e1585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=20901 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8c6rf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f9b8e1585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=20901 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8c6rf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3f9b8e1585 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=929 identity=20901 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8c6rf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f9b8e1585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=929 identity=20901 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8c6rf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f9b8e1585 endpointID=929 k8sNamespace=openstack k8sPodName=keystone-db-init-8c6rf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=3988d15f-23ce-4323-8355-e6de9f99d4c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3f9b8e1585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=929 identity=20901 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-init-8c6rf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 fad85321-9271-4f97-9e3d-7e6a4634312e default }" containerID=6c8cc9142711a40260c8aa34ffed69d7002d4a53eebd9a6eedd7c8925d90ca32 datapathConfiguration="&{false false false false false }" interface=lxc5ca92d2b79aa k8sPodName=openstack/keystone-fernet-setup-wkw7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c8cc91427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkw7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c8cc91427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkw7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c8cc91427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=24164 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkw7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c8cc91427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=24164 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkw7z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6c8cc91427 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3896 identity=24164 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkw7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c8cc91427 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=24164 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkw7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c8cc91427 endpointID=3896 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-wkw7z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=033382d2-43e8-4423-abdc-6d4fc2395367 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6c8cc91427 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3896 identity=24164 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-wkw7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 06c920a3-564f-4de6-aa57-3f02136920bf default }" containerID=fdddbd7c861194b1672cf66afa1c76b5333c4dc988147cd75c32c2c178376675 datapathConfiguration="&{false false false false false }" interface=lxc6ef041fc1546 k8sPodName=openstack/keystone-db-sync-m6tbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdddbd7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdddbd7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fdddbd7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdddbd7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=41811 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdddbd7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=41811 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdddbd7c86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3583 identity=41811 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdddbd7c86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3583 identity=41811 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdddbd7c86 endpointID=3583 k8sNamespace=openstack k8sPodName=keystone-db-sync-m6tbv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=16b565c5-d62f-4c4e-b836-6a1d017ee7e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fdddbd7c86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3583 identity=41811 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-sync-m6tbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 4312e641-68f1-464d-8e73-251ee9888350 default }" containerID=03042b6cb276321d4420d7c282e15cba21e6293acf4787065bd9e472be527cc3 datapathConfiguration="&{false false false false false }" interface=lxcf34296e1eeeb k8sPodName=openstack/keystone-rabbit-init-lsv9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03042b6cb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-rabbit-init-lsv9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03042b6cb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-rabbit-init-lsv9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03042b6cb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=10959 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-rabbit-init-lsv9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03042b6cb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=10959 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-rabbit-init-lsv9b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03042b6cb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=650 identity=10959 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-rabbit-init-lsv9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=03042b6cb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=650 identity=10959 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-rabbit-init-lsv9b subsys=daemon level=info msg="Delete endpoint request" containerID=03042b6cb2 endpointID=650 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-lsv9b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4d5b8744-34ec-4eab-a0c0-087839bf932a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=03042b6cb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=650 identity=10959 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-rabbit-init-lsv9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 3a2652a3-8d71-4135-997a-38262395522d default }" containerID=738504cfdb2673d73f11e3377ef1c89ed6026336da5e107bf90d613a0ba64c17 datapathConfiguration="&{false false false false false }" interface=lxc1c225656c877 k8sPodName=openstack/keystone-domain-manage-hqh5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=738504cfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=738504cfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=738504cfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=738504cfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 identity=39939 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=738504cfdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1504 identity=39939 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=738504cfdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1504 identity=39939 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=738504cfdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1504 identity=39939 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03371569250747359 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=738504cfdb endpointID=1504 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hqh5l subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=06fb9b3e-4ae6-4345-9350-5835759c031e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=738504cfdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1504 identity=39939 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-domain-manage-hqh5l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 80623cb9-4854-474a-b616-21b39d86001d default }" containerID=fb58a170a5f890e3581c900ad1f0835d6e55dbdbb993435ab6c34b50e0d7b0c3 datapathConfiguration="&{false false false false false }" interface=lxcf3eb95b2cc7e k8sPodName=openstack/keystone-bootstrap-lgqwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb58a170a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-bootstrap-lgqwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb58a170a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=371734c9-100b-4642-b12d-c4e5175f4420,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=371734c9-100b-4642-b12d-c4e5175f4420,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-bootstrap-lgqwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=371734c9-100b-4642-b12d-c4e5175f4420;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=371734c9-100b-4642-b12d-c4e5175f4420;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb58a170a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=45593 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=371734c9-100b-4642-b12d-c4e5175f4420,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=371734c9-100b-4642-b12d-c4e5175f4420,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-bootstrap-lgqwq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb58a170a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=45593 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-bootstrap-lgqwq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb58a170a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2757 identity=45593 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-bootstrap-lgqwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb58a170a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2757 identity=45593 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-bootstrap-lgqwq subsys=daemon level=info msg="Delete endpoint request" containerID=fb58a170a5 endpointID=2757 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lgqwq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=371734c9-100b-4642-b12d-c4e5175f4420 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=371734c9-100b-4642-b12d-c4e5175f4420 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fb58a170a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2757 identity=45593 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/keystone-bootstrap-lgqwq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 1c297558-3070-42c7-beb4-517911449844 default }" containerID=41d0b6eb567ca725b31b567bc82119efb7457960c2b66ee3227a5297eb1e5db9 datapathConfiguration="&{false false false false false }" interface=lxc9a8a90de0994 k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41d0b6eb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41d0b6eb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41d0b6eb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41d0b6eb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=62481 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41d0b6eb56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1097 identity=62481 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f subsys=endpoint level=info msg="Successful endpoint creation" containerID=41d0b6eb56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1097 identity=62481 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f subsys=daemon level=info msg="Delete endpoint request" containerID=41d0b6eb56 endpointID=1097 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=41d0b6eb56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1097 identity=62481 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a24ec45e-d4ee-4b0d-9b2a-e4d9337de69f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 b63a1cf3-d8f4-48d8-9551-b954770b5d39 default }" containerID=81c3a67be9b804c4249cba9cff752ed3fdbf47a8a26b9afa2f2fc78e95383b02 datapathConfiguration="&{false false false false false }" interface=lxc45f762e615fe k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81c3a67be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81c3a67be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=81c3a67be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=81c3a67be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=56953 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81c3a67be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=56953 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81c3a67be9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3976 identity=56953 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81c3a67be9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3976 identity=56953 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 7bf4c869-c684-41af-a5fa-5b33dfada858 default }" containerID=9961b428487cefc800a1f713f2232915be4f76bf5bf583a17661db08e0973ecd datapathConfiguration="&{false false false false false }" interface=lxc4911ccd2686e k8sPodName=openstack/barbican-api-585bf6c544-dbq92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9961b42848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-api-585bf6c544-dbq92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9961b42848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-api-585bf6c544-dbq92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9961b42848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-api-585bf6c544-dbq92 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9961b42848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=26911 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-api-585bf6c544-dbq92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9961b42848 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=26911 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-api-585bf6c544-dbq92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 7b0ad68e-e28c-491a-b83a-449aac5419fe default }" containerID=eae44612614a82d3b82b05a504a45203b32a077f94592a1c159755f5caf1f8e3 datapathConfiguration="&{false false false false false }" interface=lxc4ef5f6835d9d k8sPodName=openstack/barbican-db-init-ksjds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eae4461261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-ksjds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eae4461261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-ksjds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eae4461261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=9877 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-ksjds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eae4461261 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1655 identity=9877 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-ksjds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9961b42848 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1625 identity=26911 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-api-585bf6c544-dbq92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9961b42848 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=26911 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/barbican-api-585bf6c544-dbq92 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eae4461261 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1655 identity=9877 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-ksjds subsys=endpoint level=info msg="Successful endpoint creation" containerID=eae4461261 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1655 identity=9877 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-ksjds subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eae4461261 endpointID=1655 k8sNamespace=openstack k8sPodName=barbican-db-init-ksjds subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9fa02222-1d9d-4bfc-ad71-f3f45c4f0746 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eae4461261 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1655 identity=9877 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-ksjds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 704f3572-4592-439c-be4c-6d006c38ff84 default }" containerID=cc1bc6da545e843ec44bfbe3b34c966f53d0ce1f2b2d5ef25bf765a92c892082 datapathConfiguration="&{false false false false false }" interface=lxc7f5feacf33ed k8sPodName=openstack/barbican-db-sync-b46xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc1bc6da54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-sync-b46xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc1bc6da54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-sync-b46xr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc1bc6da54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=51576 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-sync-b46xr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cc1bc6da54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=51576 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-sync-b46xr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc1bc6da54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=741 identity=51576 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-sync-b46xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc1bc6da54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=51576 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-sync-b46xr subsys=daemon level=info msg="Delete endpoint request" containerID=cc1bc6da54 endpointID=741 k8sNamespace=openstack k8sPodName=barbican-db-sync-b46xr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a1fbf501-2ea2-40fa-8648-57e3481e2091 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cc1bc6da54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=51576 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-sync-b46xr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 4fc4f92d-2370-47a4-ade4-d2762e74e48b default }" containerID=f3fc0e53c88f299058041aa149e0b8d98334fea077603a914c2f8bda36f85ca3 datapathConfiguration="&{false false false false false }" interface=lxcb975aa7d6ef5 k8sPodName=openstack/barbican-rabbit-init-g59zg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3fc0e53c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-rabbit-init-g59zg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3fc0e53c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-rabbit-init-g59zg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3fc0e53c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=13243 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-rabbit-init-g59zg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f3fc0e53c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=13243 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-rabbit-init-g59zg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3fc0e53c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1912 identity=13243 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-rabbit-init-g59zg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3fc0e53c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=13243 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-rabbit-init-g59zg subsys=daemon level=info msg="Delete endpoint request" containerID=f3fc0e53c8 endpointID=1912 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-g59zg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=89cba16e-ba8d-4092-abb7-528cd397b9ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f3fc0e53c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1912 identity=13243 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-rabbit-init-g59zg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 e9a76699-71d6-4902-af0d-93b095d17a19 default }" containerID=84f09ab84b1e2b4bb78e6c718aa9b93299a1b24bf7389c0b194e78e5fcdc4462 datapathConfiguration="&{false false false false false }" interface=lxccf521c9e8289 k8sPodName=openstack/barbican-ks-service-5sgwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84f09ab84b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84f09ab84b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=84f09ab84b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84f09ab84b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 identity=53209 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84f09ab84b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2217 identity=53209 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84f09ab84b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2217 identity=53209 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=84f09ab84b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2217 identity=53209 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84f09ab84b endpointID=2217 k8sNamespace=openstack k8sPodName=barbican-ks-service-5sgwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a875798f-ea67-4a97-99f7-0465b45f7aa2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=84f09ab84b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2217 identity=53209 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-service-5sgwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 b1b72ce5-aa3a-4d74-b7fc-1e4616776862 default }" containerID=c8a509cb21a0b6b2f0cf846f7ef2bb793fe17af2cc9eb118f1eb1af9b161fe79 datapathConfiguration="&{false false false false false }" interface=lxc1fcb8fe68918 k8sPodName=openstack/barbican-ks-endpoints-gbf2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8a509cb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbf2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8a509cb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbf2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8a509cb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=29794 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbf2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8a509cb21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=29794 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbf2w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c8a509cb21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=736 identity=29794 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbf2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8a509cb21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=736 identity=29794 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbf2w subsys=daemon level=info msg="Delete endpoint request" containerID=c8a509cb21 endpointID=736 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-gbf2w subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b3288ba5-cc34-4ced-ac6e-e2cbb3636ba5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c8a509cb21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=736 identity=29794 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gbf2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 d1bfab2a-f54c-4fc3-8b00-b69a826f0bbd default }" containerID=ef3c69794f685d064a2a5cb811341a022c4e41a9f0cd1ddd1e766c688efafe54 datapathConfiguration="&{false false false false false }" interface=lxce2668520efc0 k8sPodName=openstack/barbican-ks-user-npkml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef3c69794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef3c69794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ef3c69794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef3c69794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=8980 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef3c69794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=8980 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef3c69794f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=935 identity=8980 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef3c69794f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=935 identity=8980 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef3c69794f endpointID=935 k8sNamespace=openstack k8sPodName=barbican-ks-user-npkml subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a7632ec2-c454-41f7-ab28-b0d8027b387c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ef3c69794f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=935 identity=8980 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-ks-user-npkml subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.254 8b5bf565-6a48-4328-819d-5da7ef88ef60 default }" containerID=6a3253319c2bf4c5e77202be91f31c35d68d447a2a961d9eb8e70226d8697957 datapathConfiguration="&{false false false false false }" interface=lxc49228337b6b2 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jfw72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a3253319c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jfw72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a3253319c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jfw72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a3253319c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=1931 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jfw72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a3253319c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=1931 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jfw72 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6a3253319c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=538 identity=1931 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jfw72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a3253319c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=538 identity=1931 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-jfw72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 de975beb-4615-4508-8703-544d6e9994ab default }" containerID=65b7d6a60e69c64e61c3497026804e2db410919e1d97f13a527cb7326811d338 datapathConfiguration="&{false false false false false }" interface=lxcee3a000678c2 k8sPodName=openstack/rook-ceph-detect-version-wzlb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65b7d6a60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzlb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65b7d6a60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzlb5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=65b7d6a60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identity=45639 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzlb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65b7d6a60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identity=45639 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzlb5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65b7d6a60e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2230 identity=45639 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzlb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65b7d6a60e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2230 identity=45639 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzlb5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65b7d6a60e endpointID=2230 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wzlb5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=717ae0b7-c677-4dc4-bb9a-ca478f801a29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=65b7d6a60e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2230 identity=45639 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzlb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 936042b4-02e2-4204-8c9d-94b83890e4f8 default }" containerID=13b2f1095df7a53ae9398202ddcc06f03b30612cf9195bdb70a6eb2298dbe6c3 datapathConfiguration="&{false false false false false }" interface=lxcf9d76bf24ec2 k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13b2f1095d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13b2f1095d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13b2f1095d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identity=62481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13b2f1095d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identity=62481 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13b2f1095d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2902 identity=62481 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13b2f1095d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2902 identity=62481 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 54ee602c-6f73-4a61-abda-dee6120df126 default }" containerID=63703a388945409e9d0fece191fdd0b43d129ac6de2f27d9ba6cb5e7eb88a725 datapathConfiguration="&{false false false false false }" interface=lxcfe88877da296 k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63703a3889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63703a3889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a75499af-7182-43f3-94c1-1675cf9af379,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a75499af-7182-43f3-94c1-1675cf9af379,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a75499af-7182-43f3-94c1-1675cf9af379;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a75499af-7182-43f3-94c1-1675cf9af379;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=63703a3889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=62338 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a75499af-7182-43f3-94c1-1675cf9af379,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a75499af-7182-43f3-94c1-1675cf9af379,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63703a3889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=62338 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63703a3889 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=545 identity=62338 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk subsys=endpoint level=info msg="Successful endpoint creation" containerID=63703a3889 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=62338 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13b2f1095d endpointID=2902 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=13b2f1095d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2902 identity=62481 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cd59e98b-7702-4be6-bf54-05a37a075383 subsys=endpoint level=info msg="Delete endpoint request" containerID=63703a3889 endpointID=545 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-4g9bk subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a75499af-7182-43f3-94c1-1675cf9af379 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a75499af-7182-43f3-94c1-1675cf9af379 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=63703a3889 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=62338 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4g9bk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 83e69b44-9d93-40a5-b474-a773be75e3be default }" containerID=46905b8ac8825bbd6b0212883548195f1f5884ef194d1f319bff076923368adc datapathConfiguration="&{false false false false false }" interface=lxca73c7e2848cc k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46905b8ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46905b8ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46905b8ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46905b8ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=55499 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46905b8ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=55499 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46905b8ac8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=509 identity=55499 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46905b8ac8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=509 identity=55499 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 74d80ae6-b299-4855-b019-6ecdab8387a0 default }" containerID=e4bcbaa9e4ba077d0be996b2179b5b84cf3bbc10c7a989dccf44840efb468843 datapathConfiguration="&{false false false false false }" interface=lxc29955b8e6932 k8sPodName=openstack/glance-db-init-ls4dz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4bcbaa9e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-init-ls4dz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4bcbaa9e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-init-ls4dz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e4bcbaa9e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=47311 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-init-ls4dz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4bcbaa9e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=47311 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-init-ls4dz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4bcbaa9e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=385 identity=47311 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-init-ls4dz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4bcbaa9e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=385 identity=47311 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-init-ls4dz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4bcbaa9e4 endpointID=385 k8sNamespace=openstack k8sPodName=glance-db-init-ls4dz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=47e9dd2b-6944-4cfa-9b06-5bc426a996ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e4bcbaa9e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=385 identity=47311 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-db-init-ls4dz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 c61cfa15-b5d2-4915-9600-f3ee84afa21c default }" containerID=e22087aba622d2521afcb1ab72df2252b1640cd094fa749b11f5704d3a61317a datapathConfiguration="&{false false false false false }" interface=lxca16cac1148d5 k8sPodName=openstack/glance-db-sync-4vzc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e22087aba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-4vzc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e22087aba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=33c340da-80d7-4688-baed-8a50208b05ff,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=33c340da-80d7-4688-baed-8a50208b05ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-4vzc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=33c340da-80d7-4688-baed-8a50208b05ff;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=33c340da-80d7-4688-baed-8a50208b05ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e22087aba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=65430 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=33c340da-80d7-4688-baed-8a50208b05ff,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=33c340da-80d7-4688-baed-8a50208b05ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-4vzc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e22087aba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=65430 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-4vzc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e22087aba6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2211 identity=65430 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-4vzc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e22087aba6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2211 identity=65430 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-4vzc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 333d5b5f-3b09-49e5-a235-a6c667acba2c default }" containerID=00386ad9790d207649b345b8fb7a0d3ba1879c313118dba91bd902857848dd8d datapathConfiguration="&{false false false false false }" interface=lxca1b244533bf0 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00386ad979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00386ad979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00386ad979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00386ad979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=31921 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00386ad979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=31921 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 5f501993-80e2-407d-9bbe-57a84d91e81c default }" containerID=18bc29c2d6bd5a03068c0ea48b0432ebf388b32ed5ca077937912fe5cad11326 datapathConfiguration="&{false false false false false }" interface=lxc16fd74032734 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bxds4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18bc29c2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bxds4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18bc29c2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bxds4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18bc29c2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=61668 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bxds4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18bc29c2d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=61668 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bxds4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00386ad979 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1496 identity=31921 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00386ad979 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1496 identity=31921 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-k7jx9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=18bc29c2d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=61668 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bxds4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18bc29c2d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=61668 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bxds4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e22087aba6 endpointID=2211 k8sNamespace=openstack k8sPodName=glance-db-sync-4vzc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=33c340da-80d7-4688-baed-8a50208b05ff k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=33c340da-80d7-4688-baed-8a50208b05ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e22087aba6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2211 identity=65430 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-4vzc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 98304351-c97d-46a9-825b-80bea67451da default }" containerID=a04c0f9b5f769bc8d9247c5c39142310644ff1fce361ab5338996d214e645157 datapathConfiguration="&{false false false false false }" interface=lxcecc3a8493ff7 k8sPodName=openstack/glance-rabbit-init-k6c9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a04c0f9b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-rabbit-init-k6c9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a04c0f9b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-rabbit-init-k6c9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a04c0f9b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=17926 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-rabbit-init-k6c9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a04c0f9b5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=17926 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-rabbit-init-k6c9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a04c0f9b5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=466 identity=17926 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-rabbit-init-k6c9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=a04c0f9b5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=466 identity=17926 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-rabbit-init-k6c9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a04c0f9b5f endpointID=466 k8sNamespace=openstack k8sPodName=glance-rabbit-init-k6c9m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=41153c00-642b-4a24-b857-cd8baa8ee238 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a04c0f9b5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=466 identity=17926 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-rabbit-init-k6c9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 bbcc8056-1964-4509-bfa6-0ab45499a35e default }" containerID=ae38af5121120c139908b06de94a9491560de65cb2df58927adb3f91fce42266 datapathConfiguration="&{false false false false false }" interface=lxc585f6c26422d k8sPodName=openstack/glance-ks-service-pzqqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae38af5121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-ks-service-pzqqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae38af5121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-ks-service-pzqqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ae38af5121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=25037 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-ks-service-pzqqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae38af5121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=25037 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-ks-service-pzqqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae38af5121 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3338 identity=25037 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-ks-service-pzqqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae38af5121 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=25037 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-ks-service-pzqqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae38af5121 endpointID=3338 k8sNamespace=openstack k8sPodName=glance-ks-service-pzqqr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=75f3a66b-02d2-40f4-a994-2916aa5ff202 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ae38af5121 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=25037 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-ks-service-pzqqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 df98bfa1-b642-4751-b117-898e1e02d9d1 default }" containerID=df621f2fbd7d9009fb4d06937ab535870a7ab27d8d9fd3ecf29aa419d64afc98 datapathConfiguration="&{false false false false false }" interface=lxcc7e3a84dcf5c k8sPodName=openstack/glance-ks-endpoints-jqrzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df621f2fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df621f2fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6474081-62b8-44e0-988f-796ac95d573b,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f6474081-62b8-44e0-988f-796ac95d573b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f6474081-62b8-44e0-988f-796ac95d573b;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f6474081-62b8-44e0-988f-796ac95d573b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=df621f2fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=df621f2fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=16168 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6474081-62b8-44e0-988f-796ac95d573b,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f6474081-62b8-44e0-988f-796ac95d573b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df621f2fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=16168 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df621f2fbd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=861 identity=16168 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=df621f2fbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=16168 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df621f2fbd endpointID=861 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jqrzj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f6474081-62b8-44e0-988f-796ac95d573b k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f6474081-62b8-44e0-988f-796ac95d573b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=df621f2fbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=16168 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-endpoints-jqrzj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 021b6c5e-b9e9-4e31-8199-8e346230a20b default }" containerID=f1b9a3c0711a894dd9647c98942fc93b7984586db767286142bd307e49b3c848 datapathConfiguration="&{false false false false false }" interface=lxc16e3e7a939cf k8sPodName=openstack/glance-ks-user-62j4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1b9a3c071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-62j4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1b9a3c071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-62j4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1b9a3c071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=2178 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-62j4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1b9a3c071 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=2178 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-62j4d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f1b9a3c071 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1649 identity=2178 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-62j4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1b9a3c071 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1649 identity=2178 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-62j4d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1b9a3c071 endpointID=1649 k8sNamespace=openstack k8sPodName=glance-ks-user-62j4d subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3d335ebb-4ba6-43f2-ae2a-6e7f2609a5d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f1b9a3c071 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1649 identity=2178 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-user-62j4d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 1ee9cf51-142b-469e-ba10-20743b51e15f default }" containerID=ca7907a8a0c12131247ad27760bf818a20e80d61178b9878241619c09d7504b9 datapathConfiguration="&{false false false false false }" interface=lxc3deb05273d1b k8sPodName=openstack/glance-metadefs-load-7p4bm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca7907a8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca7907a8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=31578209-a660-4f0f-9895-e344dec1b542,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=31578209-a660-4f0f-9895-e344dec1b542,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ca7907a8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=31578209-a660-4f0f-9895-e344dec1b542;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=31578209-a660-4f0f-9895-e344dec1b542;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca7907a8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=6969 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=31578209-a660-4f0f-9895-e344dec1b542,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=31578209-a660-4f0f-9895-e344dec1b542,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca7907a8a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=6969 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca7907a8a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=6969 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca7907a8a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=6969 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca7907a8a0 endpointID=526 k8sNamespace=openstack k8sPodName=glance-metadefs-load-7p4bm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=31578209-a660-4f0f-9895-e344dec1b542 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=31578209-a660-4f0f-9895-e344dec1b542 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca7907a8a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=6969 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-metadefs-load-7p4bm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 44f38f45-eeb9-4e95-a812-67903323153b default }" containerID=140888a5b4fc1cb0b1a4b8e691c56e97e677dd6e3081202381c64d8229d48f6e datapathConfiguration="&{false false false false false }" interface=lxc4657e3044f56 k8sPodName=openstack/glance-storage-init-zhgdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=140888a5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-storage-init-zhgdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=140888a5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=341a3934-dcc5-497d-a691-a6568178610d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=341a3934-dcc5-497d-a691-a6568178610d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-storage-init-zhgdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=341a3934-dcc5-497d-a691-a6568178610d;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=341a3934-dcc5-497d-a691-a6568178610d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=140888a5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=24499 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=341a3934-dcc5-497d-a691-a6568178610d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=341a3934-dcc5-497d-a691-a6568178610d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-storage-init-zhgdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=140888a5b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=24499 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-storage-init-zhgdx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=140888a5b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=936 identity=24499 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-storage-init-zhgdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=140888a5b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=936 identity=24499 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-storage-init-zhgdx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=140888a5b4 endpointID=936 k8sNamespace=openstack k8sPodName=glance-storage-init-zhgdx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=341a3934-dcc5-497d-a691-a6568178610d k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=341a3934-dcc5-497d-a691-a6568178610d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=140888a5b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=936 identity=24499 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-storage-init-zhgdx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 1a3a7011-3f16-488d-b551-a2db2dedc6c6 default }" containerID=4ae1c29acdc710ab1b4122e0067a5be42df9f9075cf6e234937df91651aebe86 datapathConfiguration="&{false false false false false }" interface=lxc732c3ae85557 k8sPodName=openstack/glance-api-64d59d79d-bj4vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ae1c29acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-api-64d59d79d-bj4vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ae1c29acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-api-64d59d79d-bj4vw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4ae1c29acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=62271 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-api-64d59d79d-bj4vw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ae1c29acd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=62271 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-api-64d59d79d-bj4vw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ae1c29acd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=632 identity=62271 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-api-64d59d79d-bj4vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ae1c29acd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=632 identity=62271 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-api-64d59d79d-bj4vw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 8e9d8c38-20ed-46cd-8d9a-fa4f8106291c default }" containerID=44b786f5ca7e08d4b3272c929f68ee5b9b5f4aa446d0a641364148976a53e570 datapathConfiguration="&{false false false false false }" interface=lxc8d76f8865ac3 k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44b786f5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44b786f5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44b786f5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44b786f5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identity=53804 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44b786f5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identity=53804 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 0c0e1906-8e93-4842-9b95-1e0a59a53efc default }" containerID=af032d739be5e4b6dc044cd51d5eb150aea95276d476dd4ad0d49891b6ad2a79 datapathConfiguration="&{false false false false false }" interface=lxc5826ac246f78 k8sPodName=openstack/staffeln-api-796d5f9db5-k6cqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af032d739b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-796d5f9db5-k6cqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af032d739b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-796d5f9db5-k6cqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af032d739b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=33132 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-796d5f9db5-k6cqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af032d739b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=33132 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-796d5f9db5-k6cqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 ba009bb6-053c-46df-bd19-39d9320ae204 default }" containerID=7e9ab1439befe15f2a80f779bd377238325a101b34841e29b2b8a6467e6d8d89 datapathConfiguration="&{false false false false false }" interface=lxc76bdb2d75080 k8sPodName=openstack/staffeln-db-init-mn2qz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e9ab1439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-init-mn2qz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e9ab1439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-init-mn2qz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e9ab1439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=26124 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-init-mn2qz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e9ab1439b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=26124 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-init-mn2qz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44b786f5ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2144 identity=53804 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r subsys=endpoint level=info msg="Successful endpoint creation" containerID=44b786f5ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2144 identity=53804 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-conductor-5b9c6c46b-2n26r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=af032d739b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1366 identity=33132 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-796d5f9db5-k6cqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=af032d739b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1366 identity=33132 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-796d5f9db5-k6cqj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7e9ab1439b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=704 identity=26124 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-init-mn2qz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e9ab1439b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=26124 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-init-mn2qz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e9ab1439b endpointID=704 k8sNamespace=openstack k8sPodName=staffeln-db-init-mn2qz subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=34e697cb-bd22-4661-b4ff-8cb991977d9a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7e9ab1439b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=26124 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-init-mn2qz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 73672f17-2b49-4bc2-a03e-d8c226632d7b default }" containerID=e7d0602e2ed2416081eedd766b449104fc5417f0a8850ae8e0967d16a32e92da datapathConfiguration="&{false false false false false }" interface=lxc90daf988301e k8sPodName=openstack/staffeln-db-sync-hgdbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d0602e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-sync-hgdbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d0602e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5ae4a980-8bae-4b95-9638-6220841fbbd4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5ae4a980-8bae-4b95-9638-6220841fbbd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-sync-hgdbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5ae4a980-8bae-4b95-9638-6220841fbbd4;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=5ae4a980-8bae-4b95-9638-6220841fbbd4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7d0602e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=10114 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5ae4a980-8bae-4b95-9638-6220841fbbd4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5ae4a980-8bae-4b95-9638-6220841fbbd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-sync-hgdbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d0602e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=10114 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-sync-hgdbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d0602e2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=859 identity=10114 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-sync-hgdbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d0602e2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=10114 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-sync-hgdbm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager