level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.307567ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="91.752µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.174374ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.551µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.976786ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.25µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.79µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="79.392µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.093µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="79.782µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="768.901µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.27µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.156739ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.547276ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="198.295µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="86.573µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="266.508µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="141.684µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="106.844µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.772255ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="102.593µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="76.932µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.62.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.529508ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="14.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.727199ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.888563ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="7.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="32.851µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.681µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="64.652µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="289.468µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.6µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="215.406µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="804.192µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.051781ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.19µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="30.79µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.62 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.62 ipAddr.ipv6="" k8sNodeIP=162.253.55.62 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.62" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.133" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.62" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.62} {CiliumInternalIP 10.0.0.133}] 10.0.0.0/24 [] [] 10.0.0.233 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38287" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.449983289s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="16.071µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="8.65µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="28.321µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.64µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.535239671s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 e1ec7085-8cfe-4323-9295-28713cbefcb4 default }" containerID=38056816a9a38f345c42f54fcf23f649b91cb18e7c27b43022c0821c70505d70 datapathConfiguration="&{false false false false false }" interface=lxcfb4685b8f8b6 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38056816a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38056816a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.39 d459ad55-37de-4cd5-8c1e-7025c9b4333b default }" containerID=4cbdc7a03a76704d47a732e1eaea0feca6de26130e60c42d2254ff3f7e09aad4 datapathConfiguration="&{false false false false false }" interface=lxcdf5808c3d94a k8sPodName=kube-system/coredns-7c96b6546b-r9fwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cbdc7a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cbdc7a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=38056816a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=9488 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=4cbdc7a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38056816a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=9488 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cbdc7a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=34656 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cbdc7a03a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=34656 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=349.502186ms file-path=/var/run/cilium/state/templates/061d616271677fdf2981b3c1ec46430cae3b6fecd757a6e72cece25310c37ab6/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1137 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3558 ipv4=10.0.0.233 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3558 identityLabels="reserved:health" ipv4=10.0.0.233 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3558 identity=4 identityLabels="reserved:health" ipv4=10.0.0.233 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.138215351s file-path=/var/run/cilium/state/templates/2412360420be20b89fa293e8e59243a088110ef7eb150c85fd0ad9f7ad191e3e/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3558 identity=4 ipv4=10.0.0.233 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38056816a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1565 identity=9488 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cbdc7a03a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2814 identity=34656 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=38056816a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1565 identity=9488 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 subsys=daemon level=info msg="Successful endpoint creation" containerID=4cbdc7a03a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2814 identity=34656 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38056816a9 endpointID=1565 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-bm8q9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=70ccbf9b-5f32-4844-8fd3-c3991afa3f8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=38056816a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1565 identity=9488 ipv4=10.0.0.72 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bm8q9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 22d0e831-66cd-41a0-a7a2-0ffe08b26f83 default }" containerID=a285e21141ce4e16c6fec45dd92b329778f5afffe5aeea9af473716343df1548 datapathConfiguration="&{false false false false false }" interface=lxc43f721c21331 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-twvp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a285e21141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 ipv4=10.0.0.127 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-twvp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a285e21141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.127 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-twvp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a285e21141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 identity=45875 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.127 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-twvp6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a285e21141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3869 identity=45875 ipv4=10.0.0.127 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-twvp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a285e21141 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3869 identity=45875 ipv4=10.0.0.127 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-twvp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a285e21141 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3869 identity=45875 ipv4=10.0.0.127 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-twvp6 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1137 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01137 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01137 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01137 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01137:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1137 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 f7906276-a2bb-4ceb-a989-2f4f4647e142 default }" containerID=a8d90ca30c8c8fb402b843fc7fd39ffbf1ea159d34c2fc13d9e55bbe7b448e27 datapathConfiguration="&{false false false false false }" interface=lxc983b05d10046 k8sPodName=kube-system/coredns-67659f764b-f9hvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8d90ca30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9hvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8d90ca30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9hvz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a8d90ca30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=34656 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9hvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8d90ca30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=34656 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9hvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 2ae83e99-949c-4111-a5fa-a167661d749c default }" containerID=22faaf12644b0ea5ed31fafc95e205316b3d4d9e66e9cff8b7833fc7a01f7755 datapathConfiguration="&{false false false false false }" interface=lxc6c17f112ed24 k8sPodName=kube-system/coredns-67659f764b-7nzks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22faaf1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-7nzks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22faaf1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-7nzks subsys=endpoint level=info msg="Identity of endpoint changed" containerID=22faaf1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=34656 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-7nzks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22faaf1264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=34656 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-7nzks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8d90ca30c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=423 identity=34656 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9hvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8d90ca30c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=423 identity=34656 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-67659f764b-f9hvz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=22faaf1264 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1672 identity=34656 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-7nzks subsys=endpoint level=info msg="Successful endpoint creation" containerID=22faaf1264 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1672 identity=34656 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-7nzks subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 401214fd-6c28-4bf4-98ab-d58513a955cd default }" containerID=caf96b9fde61beb082add114756a2cf44e16e21ca0661b5e67ac730f4e4f5436 datapathConfiguration="&{false false false false false }" interface=lxcb9f70d61cad3 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qbwww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caf96b9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qbwww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caf96b9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qbwww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caf96b9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 identity=22284 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qbwww oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=caf96b9fde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 identity=22284 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qbwww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caf96b9fde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4069 identity=22284 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qbwww subsys=endpoint level=info msg="Successful endpoint creation" containerID=caf96b9fde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4069 identity=22284 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qbwww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4cbdc7a03a endpointID=2814 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-r9fwn subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=4cbdc7a03a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2814 identity=34656 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r9fwn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 c7b7a6ce-e3b4-4cc3-9d9d-214ca02a5ab3 default }" containerID=834ec451f5cab015052db0c8f9f9d8148f8686b4a282cbfe8dad3aa7aa01490a datapathConfiguration="&{false false false false false }" interface=lxcb8cc59c6f542 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=834ec451f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=834ec451f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=834ec451f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=834ec451f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=6891 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=834ec451f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=6891 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 7ad08379-af39-4dc3-9e57-9118fe739b27 default }" containerID=18716bd575c2ea04973f800f67eb75281cfe2b0498f8a6d51234345aca8b4868 datapathConfiguration="&{false false false false false }" interface=lxc635f18ec55d1 k8sPodName=cert-manager/cert-manager-75c4c745bc-4cvbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18716bd575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4cvbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18716bd575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4cvbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18716bd575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=52644 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4cvbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18716bd575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=52644 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4cvbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=834ec451f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2269 identity=6891 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=834ec451f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2269 identity=6891 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-994c7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=18716bd575 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1859 identity=52644 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4cvbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=18716bd575 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1859 identity=52644 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4cvbt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.213 e7a4a589-0289-4a6e-9e90-37ed145b1bf6 default }" containerID=ca7e3e391001d30e46e35b59f6837ccaac39a080f401d1f08cc30f002ae5e993 datapathConfiguration="&{false false false false false }" interface=lxc5f3912cbfc52 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9795s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca7e3e3910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9795s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca7e3e3910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9795s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca7e3e3910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=45843 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9795s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca7e3e3910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=45843 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9795s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca7e3e3910 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2658 identity=45843 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9795s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca7e3e3910 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2658 identity=45843 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9795s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 3284fc82-4a0a-4bc2-b0cd-937ae6c3acee default }" containerID=449971c20cdf976b4da581cd435afb5c58732888dd9a4fc956397a0bac9514d8 datapathConfiguration="&{false false false false false }" interface=lxce9ec0369ae49 k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=449971c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=449971c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=449971c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=3476 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=449971c20c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=980 identity=3476 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=449971c20c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=980 identity=3476 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=449971c20c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=980 identity=3476 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=449971c20c endpointID=980 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-h2fkg subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=5bd0e8d1-aa29-4342-a27a-449f76a2fe31 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=449971c20c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=980 identity=3476 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 8beab3ca-dc0f-40b3-82f9-a7f8284eb849 default }" containerID=15892e2b8c6070d8ffc9eaea723db6763cf124a8b5d479ba45b7cbbe9c87c056 datapathConfiguration="&{false false false false false }" interface=lxc7051bd2cbb10 k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15892e2b8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15892e2b8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15892e2b8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=21089 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=15892e2b8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=21089 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15892e2b8c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3550 identity=21089 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=15892e2b8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3550 identity=21089 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15892e2b8c endpointID=3550 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7ph5w subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=8afc8fd2-b93b-46d7-8ccc-a07ea5e11023 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=15892e2b8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3550 identity=21089 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ph5w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 46179c94-1d91-4abd-a2c6-85a2323c5cb9 default }" containerID=f0f35c00e8ff6a9cb5a6f2a6c0b518ac59db163457a626282834577423aa242c datapathConfiguration="&{false false false false false }" interface=lxcc0a11d5f303a k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qjm45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0f35c00e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qjm45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0f35c00e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qjm45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0f35c00e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=24051 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qjm45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0f35c00e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=24051 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qjm45 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0f35c00e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=513 identity=24051 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qjm45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0f35c00e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=513 identity=24051 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qjm45 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.197 1f93403e-268e-4931-9b3b-a8b8838b2a9d default }" containerID=35dc61479af8942aab4a71fc7250f7169452b2280bbea13a7a45ac32a688ca35 datapathConfiguration="&{false false false false false }" interface=lxc73df9c819e0f k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35dc61479a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35dc61479a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35dc61479a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=12181 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35dc61479a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=12181 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35dc61479a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=658 identity=12181 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj subsys=endpoint level=info msg="Successful endpoint creation" containerID=35dc61479a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=658 identity=12181 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35dc61479a endpointID=658 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-8s5rj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=300b886a-cb03-4f57-869b-81f65b65db5a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=35dc61479a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=658 identity=12181 ipv4=10.0.0.197 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8s5rj subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=de05a10e-17c6-491f-a1b0-a67ff6430023] Description:}]" policyAddRequest=8487b9ca-b12a-4109-9335-23e5018e64ce subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8487b9ca-b12a-4109-9335-23e5018e64ce policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7195e6d8-7834-4a9f-9454-a893fd61fc74] Description:}]" policyAddRequest=d76f1fc2-3d65-4374-bea7-872861b3f6fe subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d76f1fc2-3d65-4374-bea7-872861b3f6fe policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.184 efd224a2-5544-47fa-9a8d-1ae4bed5fdc4 default }" containerID=37f673f89e77f5c9f126b867fb1edd0cc98e0a534cf67b67da6d8713366c6210 datapathConfiguration="&{false false false false false }" interface=lxcea451ea01108 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-sqkqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37f673f89e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-sqkqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37f673f89e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-sqkqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37f673f89e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=7232 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-sqkqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37f673f89e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=7232 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-sqkqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37f673f89e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2456 identity=7232 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-sqkqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=37f673f89e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2456 identity=7232 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-sqkqk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 b564d0f2-5915-4129-b9c8-23cdda9fd052 default }" containerID=8728e3177af8875c18c8e5a28333a911b2bb5b25a379038054095d66af109065 datapathConfiguration="&{false false false false false }" interface=lxc878f49367938 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-w47jw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8728e3177a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-w47jw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8728e3177a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-w47jw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8728e3177a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=8365 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-w47jw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8728e3177a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=8365 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-w47jw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8728e3177a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=198 identity=8365 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-w47jw subsys=endpoint level=info msg="Successful endpoint creation" containerID=8728e3177a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=198 identity=8365 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-w47jw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 289ccbdd-7526-49f9-96db-0d18a1f9f8ca default }" containerID=379748cb58d7b68bc948fe50a1e795b23a03f8f8bb5c92b65be6820b0d8d5dc5 datapathConfiguration="&{false false false false false }" interface=lxc6ff6d73db40d k8sPodName=openstack/pxc-operator-69cb5bbdb9-7b2xn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=379748cb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7b2xn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=379748cb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7b2xn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=379748cb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 identity=52489 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7b2xn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=379748cb58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3068 identity=52489 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7b2xn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=379748cb58 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3068 identity=52489 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7b2xn subsys=endpoint level=info msg="Successful endpoint creation" containerID=379748cb58 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3068 identity=52489 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7b2xn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.91 a3b67036-1c01-41ce-a749-8afcfeebb46d default }" containerID=a052fb4ff30d6fd5df9a1e5941fa1fc402133338e3f4a6d41da66608a3e38791 datapathConfiguration="&{false false false false false }" interface=lxca42c28c75689 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a052fb4ff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a052fb4ff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a052fb4ff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=64027 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a052fb4ff3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=64027 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a052fb4ff3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=34 identity=64027 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a052fb4ff3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=34 identity=64027 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.4 fec6f326-4a49-4254-89be-cb2436604497 default }" containerID=9d815a7e78229a20dc69a97d457d541a122229bda8e6e1cc1ccbda118aa9d60d datapathConfiguration="&{false false false false false }" interface=lxcdd31b514b8b4 k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d815a7e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d815a7e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d815a7e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d815a7e78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=24901 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d815a7e78 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1111 identity=24901 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d815a7e78 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1111 identity=24901 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d815a7e78 endpointID=1111 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9d815a7e78 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1111 identity=24901 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c8d3a9fb-d7e7-4246-b222-ee7658770eb1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 b68ec07f-a9ed-44c0-8d27-6db950ced56c default }" containerID=5237147234844b698b97ea904a61d20e08f50cf790664c949ef04aba9dad3d11 datapathConfiguration="&{false false false false false }" interface=lxc61322c29fec4 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5237147234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5237147234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5237147234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=57094 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5237147234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=57094 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5237147234 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=14 identity=57094 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5237147234 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=14 identity=57094 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f3234f78-d3f4-491b-8f33-aa5e4c73d40c] Description:}]" policyAddRequest=458fef88-1b72-4352-ae5f-7ccd35847d5d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=458fef88-1b72-4352-ae5f-7ccd35847d5d policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.227 e9c83a9b-20fd-4b66-83a2-a105de865cf4 default }" containerID=e550af8d59bc859d22dc18af732f8a68d6d706d067be852c274d594062cd8e98 datapathConfiguration="&{false false false false false }" interface=lxc20717e632ce4 k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e550af8d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e550af8d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e550af8d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e550af8d59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2328 identity=24901 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e550af8d59 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2328 identity=24901 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad subsys=endpoint level=info msg="Successful endpoint creation" containerID=e550af8d59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2328 identity=24901 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad subsys=daemon level=info msg="Delete endpoint request" containerID=e550af8d59 endpointID=2328 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e550af8d59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2328 identity=24901 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dfb7888e-7330-40c6-b6e9-39c739e693ad subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 d11b257f-3b7f-425b-bf39-431b5c5aab8c default }" containerID=8243f5990d75acadfd8cf4666929ec57701e7c25bcc3580ae98c7a723b0491ab datapathConfiguration="&{false false false false false }" interface=lxc44ec807ced1c k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8243f5990d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8243f5990d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8243f5990d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8243f5990d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=28875 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8243f5990d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=28875 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8243f5990d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=604 identity=28875 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8243f5990d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=604 identity=28875 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=777bdbf8-a765-4abb-bbbd-5974e89f3db7] Description:}]" policyAddRequest=d5e3d1fd-09f9-4265-85dd-1c0faa68d532 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d5e3d1fd-09f9-4265-85dd-1c0faa68d532 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.24 917d01af-0e9b-45e9-a959-1f70fc4d952e default }" containerID=b90d05504e10a2e5b227ea29baa2c6a590700b69734c9a85729699ea1eddfe4a datapathConfiguration="&{false false false false false }" interface=lxcd3ad7df20226 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b90d05504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b90d05504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b90d05504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=36283 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b90d05504e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=36283 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b90d05504e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=36283 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b90d05504e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=36283 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009793444884818809 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.124 17eb9b52-e37f-4b3f-944c-c111dadc6b46 default }" containerID=4eda265699dc192a35dfc3f55255455df45f75637aa2032a36ac5ade23de87a5 datapathConfiguration="&{false false false false false }" interface=lxc8a669998857e k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6wdr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eda265699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6wdr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eda265699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6wdr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eda265699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=16510 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6wdr4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4eda265699 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=16510 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6wdr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 ff328897-ab71-4f84-ad93-b5bef694a5cf default }" containerID=8546fa4eaee8881a497aaa2d6807a6b0c78ca03a56c3aabbefb7b48a52b82324 datapathConfiguration="&{false false false false false }" interface=lxce67d341ecdfa k8sPodName=monitoring/node-feature-discovery-worker-nlbqc labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.41 fac01efb-dae3-4ace-abc6-c2108f79396f default }" containerID=3a2529d3cfe3cc68e95a86cea55822751776023f2737bc2eb430226badd7f22f datapathConfiguration="&{false false false false false }" interface=lxceff094c65743 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9pbdn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8546fa4eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nlbqc subsys=endpoint level=info msg="New endpoint" containerID=3a2529d3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9pbdn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a2529d3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9pbdn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8546fa4eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nlbqc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a2529d3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=12283 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9pbdn oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=3a2529d3cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=12283 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9pbdn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8546fa4eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 identity=2899 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nlbqc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8546fa4eae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2099 identity=2899 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nlbqc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eda265699 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2395 identity=16510 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6wdr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eda265699 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2395 identity=16510 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6wdr4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a2529d3cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=470 identity=12283 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9pbdn subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a2529d3cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=12283 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9pbdn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8546fa4eae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2099 identity=2899 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nlbqc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8546fa4eae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2099 identity=2899 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nlbqc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 47747dbc-9b33-4f96-83aa-7df43184f6f6 default }" containerID=5a41f6b1fd017da3c17a640fd288618120b14c947eca8ecf72b13a64bac3a447 datapathConfiguration="&{false false false false false }" interface=lxc575e34f2ecc2 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7ssjb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a41f6b1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7ssjb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a41f6b1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7ssjb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a41f6b1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=1044 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7ssjb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a41f6b1fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=1044 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7ssjb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a41f6b1fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2150 identity=1044 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7ssjb subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a41f6b1fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2150 identity=1044 ipv4=10.0.0.165 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7ssjb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01137 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01137 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01137 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01137:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 796410cc-8521-4796-a768-dbbe13b9a7fa default }" containerID=8cd081b8d851ea9fb9d5008898c44a8f01d4a4dd649efb1db3722f2224d8c405 datapathConfiguration="&{false false false false false }" interface=lxc92f60e772537 k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cd081b8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cd081b8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cd081b8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=56219 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cd081b8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2922 identity=56219 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8cd081b8d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2922 identity=56219 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cd081b8d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2922 identity=56219 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz subsys=daemon level=info msg="Delete endpoint request" containerID=8cd081b8d8 endpointID=2922 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-t2bnz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=89e54897-f157-4c26-a4d8-a46fa0fe463a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8cd081b8d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2922 identity=56219 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t2bnz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 e416507c-b4ed-4fbd-abdc-c4897d256802 default }" containerID=22112b8bb66c1d66c4c361dd4b56e2e77dee62b09c7c2cbb1488ac80d4b705fd datapathConfiguration="&{false false false false false }" interface=lxcb743fe2dd25b k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nsgdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22112b8bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nsgdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22112b8bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nsgdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22112b8bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identity=3231 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nsgdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22112b8bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2354 identity=3231 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nsgdk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 12f1215f-7966-48b8-b15c-7ed22718eca6 default }" containerID=70ad6ddd5cd186faa6881aca53dc34bbb95ecc87180c2eacdde3e41185f81031 datapathConfiguration="&{false false false false false }" interface=lxc8faf2e0a43b6 k8sPodName=monitoring/kube-prometheus-stack-grafana-58d64cccb9-4xggn labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.61 16f700bb-0b05-4386-b575-92cfc2582a6c default }" containerID=237a8eb404f7f49154fee16b5d19229c46f6673074dd6ca6ba3918e583937aed datapathConfiguration="&{false false false false false }" interface=lxc8b0dec6eeb2a k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvc5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70ad6ddd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58d64cccb9-4xggn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70ad6ddd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58d64cccb9-4xggn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=237a8eb404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvc5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=237a8eb404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvc5j subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=70ad6ddd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=26162 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58d64cccb9-4xggn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70ad6ddd5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=26162 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58d64cccb9-4xggn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=237a8eb404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=3138 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvc5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=237a8eb404 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2754 identity=3138 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvc5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22112b8bb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2354 identity=3231 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nsgdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=22112b8bb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2354 identity=3231 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-nsgdk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=70ad6ddd5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1586 identity=26162 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58d64cccb9-4xggn subsys=endpoint level=info msg="Successful endpoint creation" containerID=70ad6ddd5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1586 identity=26162 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58d64cccb9-4xggn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=237a8eb404 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2754 identity=3138 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvc5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=237a8eb404 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2754 identity=3138 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dvc5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 1a6a7efa-8b22-4392-860d-dee24aa4a1da default }" containerID=eee7b0b8e8c464b3ebd6e1397f07ba990cd5d96e8b5d69971c9e684d43bdce8f datapathConfiguration="&{false false false false false }" interface=lxc51ace5930aa9 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eee7b0b8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eee7b0b8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eee7b0b8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=56033 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eee7b0b8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=56033 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eee7b0b8e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=56033 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm subsys=endpoint level=info msg="Successful endpoint creation" containerID=eee7b0b8e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=56033 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eee7b0b8e8 endpointID=776 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-b79cm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f4b20bda-46a1-4943-beac-b8ea5df9d340 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=eee7b0b8e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=56033 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b79cm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 dbb7b37c-006d-4f70-b27b-ee5dec1d1396 default }" containerID=a56e906a7e627c81d028a2a3ff6786b2fe2f89e38f9aa1fb5616fbc890496e90 datapathConfiguration="&{false false false false false }" interface=lxc602a60952394 k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a56e906a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a56e906a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a56e906a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a56e906a7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=24901 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a56e906a7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2095 identity=24901 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e subsys=endpoint level=info msg="Successful endpoint creation" containerID=a56e906a7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2095 identity=24901 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.79 3ba9bdbe-9365-4d74-9c6d-2e51c5260d0e default }" containerID=f642ddafec70455d615a5257434478352c87b24c255f6eafe45def16b3be8719 datapathConfiguration="&{false false false false false }" interface=lxcff4002cb518e k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f642ddafec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f642ddafec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f642ddafec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f642ddafec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f642ddafec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=836 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e subsys=endpoint level=info msg="Successful endpoint creation" containerID=f642ddafec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=836 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e subsys=daemon level=info msg="Delete endpoint request" containerID=a56e906a7e endpointID=2095 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a56e906a7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2095 identity=24901 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de42e6a3-5dcc-42b6-9374-03d53269c29e subsys=endpoint level=info msg="Delete endpoint request" containerID=f642ddafec endpointID=836 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f642ddafec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=836 identity=24901 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76459362-e5a3-45db-8830-3f4e449b872e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 0981e7e5-e07e-45b1-aca4-9125f361bedc default }" containerID=9b1d3bf6c384462b7ff6f899a3f922df439230cc8dc6e74f37af636b99df2d22 datapathConfiguration="&{false false false false false }" interface=lxcf3897207a61c k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b1d3bf6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b1d3bf6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b1d3bf6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b1d3bf6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=58750 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b1d3bf6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=58750 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 12d5a119-d093-4f9f-80f3-aa5a7e115de8 default }" containerID=3b996fd13d1bf98606827b61064d1f002bb9860cbe5888cbae150ce1d4bbb397 datapathConfiguration="&{false false false false false }" interface=lxca89340783cd3 k8sPodName=monitoring/loki-gateway-cf54cb88c-r2r89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b996fd13d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r2r89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b996fd13d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r2r89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b996fd13d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identity=18867 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r2r89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b996fd13d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identity=18867 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r2r89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b1d3bf6c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=191 identity=58750 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b1d3bf6c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=58750 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 c4e02442-6a97-4bd1-acf9-b7640cb5a37f default }" containerID=70fbfe6bb616648305a7560bc25163591f8422cde480c7b1de0884e4643d562e datapathConfiguration="&{false false false false false }" interface=lxc51f26b90d977 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70fbfe6bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70fbfe6bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70fbfe6bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identity=18856 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70fbfe6bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identity=18856 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b996fd13d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3977 identity=18867 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r2r89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b996fd13d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3977 identity=18867 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-r2r89 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=70fbfe6bb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2432 identity=18856 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70fbfe6bb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2432 identity=18856 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 79bb66f1-1c5c-4b74-901c-821edf9f913b default }" containerID=9c833b5bdcf6b1ba30c8c3266511e8285d0584ed98da39f365d2301769087edf datapathConfiguration="&{false false false false false }" interface=lxcea44118c2e5e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c833b5bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c833b5bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c833b5bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=61578 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c833b5bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=61578 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9c833b5bdc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1109 identity=61578 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c833b5bdc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=61578 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 eb5c4820-da2b-435d-ab0c-75c2891a5a7b default }" containerID=7e80044e7c11306a94e7772d1375aae513dff29564515ed8a558f40e3276898b datapathConfiguration="&{false false false false false }" interface=lxce63e7b820d07 k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e80044e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e80044e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e80044e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e80044e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4074 identity=24901 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e80044e7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4074 identity=24901 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e80044e7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4074 identity=24901 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 c16fdcf9-7f29-4f49-810a-0c942bfccaca default }" containerID=b0b61bacac0682f33cf033a8995c32ecd083af3da93d4781fad578464785bdba datapathConfiguration="&{false false false false false }" interface=lxc1c68a183b6a1 k8sPodName=monitoring/vector-48qq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0b61bacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-48qq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0b61bacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-48qq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0b61bacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=10051 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-48qq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0b61bacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=10051 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-48qq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0b61bacac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=608 identity=10051 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-48qq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0b61bacac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=608 identity=10051 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-48qq8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 dcb2589d-ce09-40f8-983e-a27dee193f3e default }" containerID=c30a0289e346f869f174ebb7629207513f726aee3e08c7cd61cf0bce86a88b2f datapathConfiguration="&{false false false false false }" interface=lxc7ea17adb674f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c30a0289e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c30a0289e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c30a0289e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identity=22283 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c30a0289e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2647 identity=22283 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c30a0289e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2647 identity=22283 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c30a0289e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2647 identity=22283 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e80044e7c endpointID=4074 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7e80044e7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4074 identity=24901 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c114c96f-ccca-4d29-b5ec-043a69295086 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 10847315-c7df-4661-b0a9-9dc773994699 default }" containerID=bfa00a99ae3931fcab6b0a79ce70d8bae40d0aa1ea446dd1a3d16f3cce86d913 datapathConfiguration="&{false false false false false }" interface=lxce2376a8c70db k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfa00a99ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfa00a99ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfa00a99ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=56801 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfa00a99ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=56801 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 c4b03e9d-9627-42cf-aa80-f852ce61ceb2 default }" containerID=1ab013f6ca2c1ba55c73512cd62f21b338d1c39562520c17e9ab08f675b2ac82 datapathConfiguration="&{false false false false false }" interface=lxcc164492876a2 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c8qj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab013f6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c8qj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ab013f6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c8qj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ab013f6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=24832 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c8qj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ab013f6ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3262 identity=24832 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c8qj8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfa00a99ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1909 identity=56801 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfa00a99ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1909 identity=56801 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ab013f6ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3262 identity=24832 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c8qj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab013f6ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3262 identity=24832 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c8qj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 e8bd13f2-7bf3-473f-ba77-f1768f69e972 default }" containerID=8fbd709bc3aaef3a5fa371867512fad273086103f077899d344f6a0ae25aff33 datapathConfiguration="&{false false false false false }" interface=lxcd6abbc14e992 k8sPodName=openstack/memcached-memcached-6479589586-bq9wt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fbd709bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bq9wt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fbd709bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bq9wt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8fbd709bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=27550 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bq9wt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fbd709bc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=27550 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bq9wt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fbd709bc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=420 identity=27550 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bq9wt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fbd709bc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=27550 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bq9wt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 8392a9db-f9c2-48cc-afa0-4b52e7795e51 default }" containerID=7916085523755f529368ffdf03496f0ba5358d2658fd37faec6d03af258f3e03 datapathConfiguration="&{false false false false false }" interface=lxcc6501f2f519f k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7916085523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7916085523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7916085523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7916085523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=24901 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7916085523 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=24901 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7916085523 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=24901 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 subsys=daemon level=info msg="Delete endpoint request" containerID=7916085523 endpointID=678 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7916085523 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=24901 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7f5bd5f-c634-46c4-9ab5-57994e42efc3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 db45b464-b9fc-4a75-8f5e-8decde3086fe default }" containerID=0ccf105220b3c67f8198f2fe2e024b6bf7d083053ae8b693a8e3f3a851f70e74 datapathConfiguration="&{false false false false false }" interface=lxc1beccae13797 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ccf105220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ccf105220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ccf105220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ccf105220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 identity=62576 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ccf105220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 identity=62576 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ccf105220 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2114 identity=62576 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ccf105220 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2114 identity=62576 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 e4f6f0be-a239-4471-bd31-96f076c6af93 default }" containerID=025bc11869370f1784d749ec571d0d900de6fe45aefbd3a912acb94a281bae27 datapathConfiguration="&{false false false false false }" interface=lxc50d90f89dedf k8sPodName=openstack/keystone-api-6f89654d-clgpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=025bc11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-api-6f89654d-clgpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=025bc11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-api-6f89654d-clgpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=025bc11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=40866 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-api-6f89654d-clgpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=025bc11869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=40866 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-api-6f89654d-clgpw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 f599e0a9-428a-4e33-8754-ab52411622fc default }" containerID=414795141cbfa26a27d68206207ce3aa88729e28ce80b0ebfb3ade313a2fd82e datapathConfiguration="&{false false false false false }" interface=lxc87bc513f944b k8sPodName=openstack/keystone-credential-setup-6k8dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=414795141c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-credential-setup-6k8dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=414795141c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-credential-setup-6k8dx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=414795141c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=6652 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-credential-setup-6k8dx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=414795141c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=6652 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-credential-setup-6k8dx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=025bc11869 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=571 identity=40866 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-api-6f89654d-clgpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=025bc11869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=40866 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-api-6f89654d-clgpw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=414795141c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1505 identity=6652 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-credential-setup-6k8dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=414795141c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1505 identity=6652 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-credential-setup-6k8dx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=414795141c endpointID=1505 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6k8dx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f71e2c11-c9d4-4ab4-968a-ae35ee9e3caf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=414795141c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1505 identity=6652 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-credential-setup-6k8dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 edf75844-818a-49be-8e5d-de76cef60506 default }" containerID=e389fa848f7cbd5df0050eebb00737d4446655ee627fbc565be3e6da097b32a0 datapathConfiguration="&{false false false false false }" interface=lxcc311766ae13f k8sPodName=openstack/keystone-db-init-vngmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e389fa848f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e389fa848f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e389fa848f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e389fa848f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=14681 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e389fa848f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=14681 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e389fa848f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2136 identity=14681 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e389fa848f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2136 identity=14681 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e389fa848f endpointID=2136 k8sNamespace=openstack k8sPodName=keystone-db-init-vngmg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b1893e1b-bb33-4d8f-9038-7037620f4f8e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e389fa848f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2136 identity=14681 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-init-vngmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 26564a9a-96d3-40bd-8e85-2e6b2703208a default }" containerID=7486d4483f9209caba93aeea0d8a59b213260811047cc17c1ba7fdbb5be5d42e datapathConfiguration="&{false false false false false }" interface=lxcd1969e395a7c k8sPodName=openstack/keystone-fernet-setup-9dxp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7486d4483f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7486d4483f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7486d4483f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7486d4483f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=15602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7486d4483f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=15602 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7486d4483f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3719 identity=15602 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7486d4483f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3719 identity=15602 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7486d4483f endpointID=3719 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-9dxp4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=bb9f4125-5fac-46cb-8657-4a2a9fb69975 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7486d4483f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3719 identity=15602 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dxp4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 fa4c29c9-b94f-404b-855a-2315d46bf823 default }" containerID=a01ee05706fab3b28c87f848d1ec4e6accbdbf48fab6fe72e932636aeed78172 datapathConfiguration="&{false false false false false }" interface=lxcdd5d839cd301 k8sPodName=openstack/keystone-db-sync-lzt6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a01ee05706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-lzt6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a01ee05706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-lzt6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a01ee05706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identity=55303 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-lzt6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a01ee05706 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identity=55303 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-lzt6v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a01ee05706 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3579 identity=55303 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-lzt6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=a01ee05706 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3579 identity=55303 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-lzt6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a01ee05706 endpointID=3579 k8sNamespace=openstack k8sPodName=keystone-db-sync-lzt6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=08cdd158-6e1d-434f-8c2a-20b041d4f1c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a01ee05706 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3579 identity=55303 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/keystone-db-sync-lzt6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 2089bbc6-b06b-4028-96fa-b32046f0b22e default }" containerID=d31bb149326a957ee0a5004552c9f1f47d2bc011e3402261dbf033756d25504f datapathConfiguration="&{false false false false false }" interface=lxc3faae4074883 k8sPodName=openstack/keystone-rabbit-init-bcdzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d31bb14932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d31bb14932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=de240df4-de12-4f4d-b615-14510f293e07,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=de240df4-de12-4f4d-b615-14510f293e07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=de240df4-de12-4f4d-b615-14510f293e07;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=de240df4-de12-4f4d-b615-14510f293e07;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d31bb14932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d31bb14932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=14511 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=de240df4-de12-4f4d-b615-14510f293e07,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=de240df4-de12-4f4d-b615-14510f293e07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d31bb14932 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=14511 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d31bb14932 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2105 identity=14511 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d31bb14932 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2105 identity=14511 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d31bb14932 endpointID=2105 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-bcdzz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=de240df4-de12-4f4d-b615-14510f293e07 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=de240df4-de12-4f4d-b615-14510f293e07 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d31bb14932 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2105 identity=14511 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-rabbit-init-bcdzz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 85eca730-2e30-46e9-aaeb-6992c3e2e68a default }" containerID=f2054d654a8b76144ee27d7537cc94a570a9fdf5bd92899cca27a1389ef0cb32 datapathConfiguration="&{false false false false false }" interface=lxc64afa8e30f0c k8sPodName=openstack/keystone-domain-manage-hmscl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2054d654a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-hmscl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2054d654a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-hmscl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2054d654a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identity=49467 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-hmscl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2054d654a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identity=49467 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-hmscl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f2054d654a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3852 identity=49467 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-hmscl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2054d654a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3852 identity=49467 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-hmscl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2054d654a endpointID=3852 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hmscl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=eb50d509-9f38-4495-a957-4eb8809cbedd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f2054d654a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3852 identity=49467 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-hmscl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 f990beba-483b-4c9f-bc6d-5adb44b23f32 default }" containerID=46621b1e70149641b005677aac701f45d6b6eddfa45e15b7dd6d2ba43f90b9ba datapathConfiguration="&{false false false false false }" interface=lxceb29558cd535 k8sPodName=openstack/keystone-bootstrap-n5mn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46621b1e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-bootstrap-n5mn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46621b1e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2606c9f-9582-4516-8d63-717c03a98426,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e2606c9f-9582-4516-8d63-717c03a98426,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-bootstrap-n5mn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e2606c9f-9582-4516-8d63-717c03a98426;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e2606c9f-9582-4516-8d63-717c03a98426;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=46621b1e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=18461 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2606c9f-9582-4516-8d63-717c03a98426,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e2606c9f-9582-4516-8d63-717c03a98426,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-bootstrap-n5mn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46621b1e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=18461 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-bootstrap-n5mn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46621b1e70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=867 identity=18461 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-bootstrap-n5mn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46621b1e70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=867 identity=18461 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-bootstrap-n5mn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46621b1e70 endpointID=867 k8sNamespace=openstack k8sPodName=keystone-bootstrap-n5mn5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e2606c9f-9582-4516-8d63-717c03a98426 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=e2606c9f-9582-4516-8d63-717c03a98426 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=46621b1e70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=867 identity=18461 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-bootstrap-n5mn5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 0c277aaf-e5de-48c3-bf47-7af8a58c78a6 default }" containerID=9c42d358f1b8b7ce01ea1b656d7385fa57656b1e3a895cc0c3a633b51f2008f9 datapathConfiguration="&{false false false false false }" interface=lxc519e964c231b k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c42d358f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c42d358f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c42d358f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c42d358f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=24901 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c42d358f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=122 identity=24901 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c42d358f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=122 identity=24901 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c subsys=daemon level=info msg="Delete endpoint request" containerID=9c42d358f1 endpointID=122 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9c42d358f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=122 identity=24901 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a5bc121d-03cf-4604-a5f1-bdcf4399504c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 69512dc5-57de-45be-a53d-658c82d9311d default }" containerID=a1a97c0f72031fe8cdd26f95b42beb585f391a95359a6591d341458b023ba04d datapathConfiguration="&{false false false false false }" interface=lxcb82b49d944ba k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1a97c0f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1a97c0f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1a97c0f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1a97c0f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=43869 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1a97c0f72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=43869 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1a97c0f72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=541 identity=43869 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1a97c0f72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=541 identity=43869 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 1fbb38d8-23e9-43b5-9bec-7e2473473999 default }" containerID=7c77ac91e1c29e06d44a4fd01cd77f787c707c131b7f867ed0974eb7f59824ec datapathConfiguration="&{false false false false false }" interface=lxc3e0ef3b8b250 k8sPodName=openstack/barbican-api-85b5f47d54-wt7t8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c77ac91e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-api-85b5f47d54-wt7t8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c77ac91e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-api-85b5f47d54-wt7t8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c77ac91e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=61331 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-api-85b5f47d54-wt7t8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c77ac91e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=61331 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-api-85b5f47d54-wt7t8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 9069810e-1a2a-43ea-b7d1-972ee6f0bdc8 default }" containerID=f9859c5c6c84fff239e951c8c78b6d44449ffe0f0759c8cb06e917c7224c9f66 datapathConfiguration="&{false false false false false }" interface=lxc1482899a32ad k8sPodName=openstack/barbican-db-init-sns7p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9859c5c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-sns7p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9859c5c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-sns7p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9859c5c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=6446 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-sns7p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9859c5c6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=6446 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-sns7p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c77ac91e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2448 identity=61331 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-api-85b5f47d54-wt7t8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c77ac91e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2448 identity=61331 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-api-85b5f47d54-wt7t8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f9859c5c6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=257 identity=6446 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-sns7p subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9859c5c6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=257 identity=6446 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-sns7p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9859c5c6c endpointID=257 k8sNamespace=openstack k8sPodName=barbican-db-init-sns7p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b8932ce7-bbf5-4cd9-90ce-3260d2369b2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f9859c5c6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=257 identity=6446 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-db-init-sns7p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 834d8fd3-80a4-4730-9ae1-7d3078bcedb3 default }" containerID=2f84fc3bad36011d4e5e61eb8e015da0dfe0e6203120b596fdd91f72b179d22f datapathConfiguration="&{false false false false false }" interface=lxceeb42dc1c5d1 k8sPodName=openstack/barbican-db-sync-g8kpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f84fc3bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f84fc3bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=27675c8e-3c58-4242-b990-dbce3863885d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=27675c8e-3c58-4242-b990-dbce3863885d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f84fc3bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=27675c8e-3c58-4242-b990-dbce3863885d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=27675c8e-3c58-4242-b990-dbce3863885d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f84fc3bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=479 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=27675c8e-3c58-4242-b990-dbce3863885d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=27675c8e-3c58-4242-b990-dbce3863885d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f84fc3bad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=479 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f84fc3bad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3293 identity=479 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f84fc3bad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3293 identity=479 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0358055920029218 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=2f84fc3bad endpointID=3293 k8sNamespace=openstack k8sPodName=barbican-db-sync-g8kpq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=27675c8e-3c58-4242-b990-dbce3863885d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=27675c8e-3c58-4242-b990-dbce3863885d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2f84fc3bad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3293 identity=479 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-db-sync-g8kpq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 39883891-5074-4ade-ab6b-580899f5e0c1 default }" containerID=8d53419a9767af8197b2cee382b648164885df7e4bd5d18100a85d2e913b8ceb datapathConfiguration="&{false false false false false }" interface=lxcd035db5412ce k8sPodName=openstack/barbican-rabbit-init-4bbwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d53419a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-rabbit-init-4bbwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d53419a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-rabbit-init-4bbwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d53419a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=25884 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-rabbit-init-4bbwm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8d53419a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=25884 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-rabbit-init-4bbwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d53419a97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2731 identity=25884 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-rabbit-init-4bbwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d53419a97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2731 identity=25884 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-rabbit-init-4bbwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d53419a97 endpointID=2731 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-4bbwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3a37bdac-01cd-4ee8-a9c4-656b15bafdd6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8d53419a97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2731 identity=25884 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-rabbit-init-4bbwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 22497b5c-90e1-4826-93a5-ebfb6e43dffc default }" containerID=c3fb4a216cb3a52357851ff6144a5341d0e9c43d8bb6f50dd6e80a288ea133e3 datapathConfiguration="&{false false false false false }" interface=lxc9d000d49032e k8sPodName=openstack/barbican-ks-service-fcwlj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3fb4a216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-service-fcwlj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3fb4a216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-service-fcwlj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3fb4a216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=34785 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-service-fcwlj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c3fb4a216c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=34785 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-service-fcwlj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3fb4a216c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=794 identity=34785 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-service-fcwlj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3fb4a216c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=34785 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-service-fcwlj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3fb4a216c endpointID=794 k8sNamespace=openstack k8sPodName=barbican-ks-service-fcwlj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=846155cc-fa71-419c-a03e-7b68094c5a42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c3fb4a216c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=34785 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-service-fcwlj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 ffd777f7-ed04-4410-8dee-5ea8dedc75f6 default }" containerID=b389c7355ebb8387a256351958a04f34fdf40af17491396af51f3cd526bfe76c datapathConfiguration="&{false false false false false }" interface=lxca5405b07e43a k8sPodName=openstack/barbican-ks-endpoints-2fvrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b389c7355e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2fvrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b389c7355e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2fvrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b389c7355e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=35001 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2fvrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b389c7355e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=35001 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2fvrr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b389c7355e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=35001 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2fvrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b389c7355e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=35001 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2fvrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b389c7355e endpointID=57 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-2fvrr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=68525c44-6f06-45ed-be7f-ada256c4d0a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b389c7355e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=35001 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2fvrr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 e1fb8c1f-2b52-45f7-a8e1-74f534b5c52c default }" containerID=7a75a736f01a4b4e2c93e2ce7b94bdb59f6acbd354de869d257680a1f88c7dea datapathConfiguration="&{false false false false false }" interface=lxcdc6618cdf8c2 k8sPodName=openstack/barbican-ks-user-prm6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a75a736f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-user-prm6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a75a736f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-user-prm6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a75a736f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=14298 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-user-prm6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a75a736f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2122 identity=14298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-user-prm6z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7a75a736f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2122 identity=14298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-user-prm6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a75a736f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2122 identity=14298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-user-prm6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a75a736f0 endpointID=2122 k8sNamespace=openstack k8sPodName=barbican-ks-user-prm6z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=537ef3fc-17d6-42ae-9207-6e63426d81e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7a75a736f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2122 identity=14298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-user-prm6z subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.25 f6e0ee61-7d3e-4615-bb0d-f2df6068de4d default }" containerID=ab1a94b040bad42f44532b034691b37b8d33dac65bf035b4349b7c516385e60d datapathConfiguration="&{false false false false false }" interface=lxc79f33edc2388 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab1a94b040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 ipv4=10.0.0.25 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab1a94b040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.25 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ab1a94b040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab1a94b040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=36586 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.25 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab1a94b040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=36586 ipv4=10.0.0.25 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab1a94b040 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1696 identity=36586 ipv4=10.0.0.25 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab1a94b040 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1696 identity=36586 ipv4=10.0.0.25 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-555w9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 c4df0ee1-52fe-4583-bf57-c67407022b59 default }" containerID=1ffb5c47de55e6128fe38c301a646a0339f571ffa0bec0a3a1a999cc9b5dd777 datapathConfiguration="&{false false false false false }" interface=lxc113034a40892 k8sPodName=openstack/rook-ceph-detect-version-w7tt9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ffb5c47de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w7tt9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ffb5c47de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w7tt9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ffb5c47de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=36194 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w7tt9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1ffb5c47de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=36194 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w7tt9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ffb5c47de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1019 identity=36194 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w7tt9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ffb5c47de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1019 identity=36194 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w7tt9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ffb5c47de endpointID=1019 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-w7tt9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=26c02c62-8ab7-414c-bfbc-600a99de3380 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1ffb5c47de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1019 identity=36194 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-w7tt9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 7c4df691-e6f9-4eb8-a061-bc8a3f036d43 default }" containerID=2ea2d08977e7e9498b90891ae2988594871dc06f54e6bebc18b352ef82937c2e datapathConfiguration="&{false false false false false }" interface=lxcc053f2c28f76 k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ea2d08977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ea2d08977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=699446ad-8af8-495a-baa9-d057dca1c807,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=699446ad-8af8-495a-baa9-d057dca1c807,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=699446ad-8af8-495a-baa9-d057dca1c807;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=699446ad-8af8-495a-baa9-d057dca1c807;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ea2d08977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=19485 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=699446ad-8af8-495a-baa9-d057dca1c807,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=699446ad-8af8-495a-baa9-d057dca1c807,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2ea2d08977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=19485 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ea2d08977 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=8 identity=19485 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ea2d08977 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=19485 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ea2d08977 endpointID=8 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kqg49 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=699446ad-8af8-495a-baa9-d057dca1c807 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=699446ad-8af8-495a-baa9-d057dca1c807 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2ea2d08977 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=19485 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kqg49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 c72cf260-876e-4147-9611-c751aa9e0b51 default }" containerID=67aeac333a04f602718424a915004956d921b27ef6b8704c4b600888c6b6a539 datapathConfiguration="&{false false false false false }" interface=lxc1f7831de7ab3 k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67aeac333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67aeac333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67aeac333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=24901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67aeac333a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=24901 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67aeac333a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1671 identity=24901 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a subsys=endpoint level=info msg="Successful endpoint creation" containerID=67aeac333a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=24901 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a subsys=daemon level=info msg="Delete endpoint request" containerID=67aeac333a endpointID=1671 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=67aeac333a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=24901 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6e025a2c-897f-4b67-8d2f-c4b1bb99650a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 cd6fa074-5ade-4975-a0ea-c7f72a3449b1 default }" containerID=0059d41388a00d6bbc28e2a22c05bcb4c78d0ad4e0c6502cc1642e19e1a08dad datapathConfiguration="&{false false false false false }" interface=lxcbeb5d61374ba k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0059d41388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0059d41388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0059d41388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0059d41388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=32377 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0059d41388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=607 identity=32377 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0059d41388 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=607 identity=32377 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0059d41388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=607 identity=32377 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 f76b1802-29e5-4a6a-936b-2a82b9ce750b default }" containerID=e286dd6b70d08b008c6b3bafb11cf30b77303d5359f1f8874de281d8feb887bd datapathConfiguration="&{false false false false false }" interface=lxcc6f9c894d319 k8sPodName=openstack/glance-db-init-jnkwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e286dd6b70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/glance-db-init-jnkwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e286dd6b70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/glance-db-init-jnkwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e286dd6b70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identity=42727 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/glance-db-init-jnkwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e286dd6b70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3841 identity=42727 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/glance-db-init-jnkwf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e286dd6b70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3841 identity=42727 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/glance-db-init-jnkwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e286dd6b70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3841 identity=42727 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/glance-db-init-jnkwf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e286dd6b70 endpointID=3841 k8sNamespace=openstack k8sPodName=glance-db-init-jnkwf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=8aeb2f0e-a593-4474-bda6-d9e7997ac60c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e286dd6b70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3841 identity=42727 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/glance-db-init-jnkwf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 2b466cd5-93a6-475c-8a6f-c48cf62cfa3e default }" containerID=25a2cdbfcafb8ca97922ca7a8bd5d2e8dd744f816507b10758f214fce104fec3 datapathConfiguration="&{false false false false false }" interface=lxcbb97f3f7538a k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-snr6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25a2cdbfca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2172 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-snr6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25a2cdbfca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2172 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-snr6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=25a2cdbfca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2172 identity=11757 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-snr6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25a2cdbfca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2172 identity=11757 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-snr6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 893099b4-ef59-4d44-bf70-cb2f607df15d default }" containerID=d678b936a6ea602efe6d927b9838173483e3fbfd91de86e49cf960d361181ed5 datapathConfiguration="&{false false false false false }" interface=lxc733b54ce135c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-npkf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d678b936a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-npkf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d678b936a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-npkf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d678b936a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identity=1833 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-npkf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d678b936a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identity=1833 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-npkf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25a2cdbfca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2172 identity=11757 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-snr6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=25a2cdbfca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2172 identity=11757 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-snr6k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d678b936a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=657 identity=1833 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-npkf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d678b936a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=657 identity=1833 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-npkf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 dfd8c377-a487-474f-b080-30c80f0de2ec default }" containerID=b5a886e6126e85d4f9cc75e89f4b2844ce06b3fe12413b4f61ecdc98b5cdd0f9 datapathConfiguration="&{false false false false false }" interface=lxc470043f0efb8 k8sPodName=openstack/glance-db-sync-2sbvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5a886e612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-2sbvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5a886e612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-2sbvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5a886e612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 identity=24354 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-2sbvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5a886e612 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3937 identity=24354 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-2sbvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5a886e612 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3937 identity=24354 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-2sbvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5a886e612 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3937 identity=24354 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-2sbvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b5a886e612 endpointID=3937 k8sNamespace=openstack k8sPodName=glance-db-sync-2sbvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=52bab188-e417-43f1-8a5d-9acc0ad47921 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b5a886e612 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3937 identity=24354 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-db-sync-2sbvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 d6eb324e-1623-4dbd-9e65-a6f084808cf2 default }" containerID=ac564389991bd3b3661ce8da467168385e79d82a21a5b281c586fa3906449b76 datapathConfiguration="&{false false false false false }" interface=lxc7d4f29dc527c k8sPodName=openstack/glance-rabbit-init-sv9c9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac56438999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac56438999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ac56438999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac56438999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=1500 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac56438999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=1500 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac56438999 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2010 identity=1500 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac56438999 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2010 identity=1500 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac56438999 endpointID=2010 k8sNamespace=openstack k8sPodName=glance-rabbit-init-sv9c9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4336049f-6f3b-4ca1-ac96-914ae5992df5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ac56438999 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2010 identity=1500 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/glance-rabbit-init-sv9c9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 ff944211-eb31-46a1-a055-d090a1d3fab6 default }" containerID=45db7eae4451f73e1c464252a182f3d239d7da37a8816572fd12203e53068798 datapathConfiguration="&{false false false false false }" interface=lxcef14197e2e5f k8sPodName=openstack/glance-ks-service-5kgng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45db7eae44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45db7eae44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=99b84990-46cc-452a-9127-94d51f14d435,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=99b84990-46cc-452a-9127-94d51f14d435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45db7eae44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=99b84990-46cc-452a-9127-94d51f14d435;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=99b84990-46cc-452a-9127-94d51f14d435;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45db7eae44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identity=1388 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=99b84990-46cc-452a-9127-94d51f14d435,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=99b84990-46cc-452a-9127-94d51f14d435,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45db7eae44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1250 identity=1388 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45db7eae44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1250 identity=1388 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng subsys=endpoint level=info msg="Successful endpoint creation" containerID=45db7eae44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1250 identity=1388 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45db7eae44 endpointID=1250 k8sNamespace=openstack k8sPodName=glance-ks-service-5kgng subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=99b84990-46cc-452a-9127-94d51f14d435 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=99b84990-46cc-452a-9127-94d51f14d435 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=45db7eae44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1250 identity=1388 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-service-5kgng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 4632e530-a395-4ea7-9586-e1ca3da7c187 default }" containerID=375fe03669892b764e7b0bfc7104dcefe2b89062b6282b0133477aa884a55003 datapathConfiguration="&{false false false false false }" interface=lxcc82224963302 k8sPodName=openstack/glance-ks-endpoints-t4tcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=375fe03669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-ks-endpoints-t4tcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=375fe03669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-ks-endpoints-t4tcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=375fe03669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=3793 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-ks-endpoints-t4tcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=375fe03669 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=3793 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-ks-endpoints-t4tcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=375fe03669 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=698 identity=3793 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-ks-endpoints-t4tcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=375fe03669 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=698 identity=3793 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-ks-endpoints-t4tcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=375fe03669 endpointID=698 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-t4tcs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7f24127e-a1e0-40e2-9dda-7bc063148dbc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=375fe03669 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=698 identity=3793 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-ks-endpoints-t4tcs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 348768c2-d022-4f1f-9e73-404d58bff7da default }" containerID=45533e252584749970f8fbb3e5c476a1cc17be51b87e75f03680a373f9a1dec0 datapathConfiguration="&{false false false false false }" interface=lxc9a4b77a99890 k8sPodName=openstack/glance-ks-user-s7tj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45533e2525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-user-s7tj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45533e2525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-user-s7tj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45533e2525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=12880 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-user-s7tj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45533e2525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=12880 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-user-s7tj6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=45533e2525 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=104 identity=12880 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-user-s7tj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45533e2525 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=12880 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-user-s7tj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45533e2525 endpointID=104 k8sNamespace=openstack k8sPodName=glance-ks-user-s7tj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=769d20bd-9cf3-4cba-aa0b-67b0a7f785e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=45533e2525 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=104 identity=12880 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-ks-user-s7tj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 9840e058-d80f-4841-9a93-84a37332337a default }" containerID=b731154d79dcb83400874e63db35e4580461c18caa2a445ddbfcba95f2fb7a0f datapathConfiguration="&{false false false false false }" interface=lxc89c89cecf354 k8sPodName=openstack/glance-metadefs-load-rtvf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b731154d79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-rtvf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b731154d79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-rtvf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b731154d79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identity=15294 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-rtvf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b731154d79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identity=15294 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-rtvf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b731154d79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1311 identity=15294 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-rtvf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b731154d79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1311 identity=15294 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-rtvf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b731154d79 endpointID=1311 k8sNamespace=openstack k8sPodName=glance-metadefs-load-rtvf4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b35e9d00-57cf-405b-8ac1-6be6fd287fa9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b731154d79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1311 identity=15294 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-metadefs-load-rtvf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 21921aa6-b572-4ef0-a005-4a515e7eb19c default }" containerID=a28db5abda8707d72455f5945eab6ae68769312001fbdc4c754be9aba3752982 datapathConfiguration="&{false false false false false }" interface=lxcfaef298912e2 k8sPodName=openstack/glance-storage-init-zcr8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a28db5abda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-storage-init-zcr8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a28db5abda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-storage-init-zcr8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a28db5abda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=16679 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-storage-init-zcr8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a28db5abda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=16679 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-storage-init-zcr8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a28db5abda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1699 identity=16679 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-storage-init-zcr8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=a28db5abda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1699 identity=16679 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-storage-init-zcr8h subsys=daemon level=info msg="Delete endpoint request" containerID=a28db5abda endpointID=1699 k8sNamespace=openstack k8sPodName=glance-storage-init-zcr8h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=1429b3f5-bc6f-42b4-840c-d5bdcd0c8a42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a28db5abda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1699 identity=16679 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-storage-init-zcr8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 a68aa679-e21c-40d0-97fb-445218df4631 default }" containerID=b0b487dc694ffdcbee5b72585a22d146e893bfc5a9e6131d52cb67d1ffa70cef datapathConfiguration="&{false false false false false }" interface=lxc5a5cb3d6009b k8sPodName=openstack/glance-api-7dff86b6f9-zpbgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0b487dc69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3885 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-api-7dff86b6f9-zpbgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0b487dc69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3885 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-api-7dff86b6f9-zpbgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0b487dc69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3885 identity=42622 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-api-7dff86b6f9-zpbgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0b487dc69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3885 identity=42622 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-api-7dff86b6f9-zpbgt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b0b487dc69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3885 identity=42622 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-api-7dff86b6f9-zpbgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0b487dc69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3885 identity=42622 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-api-7dff86b6f9-zpbgt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 c8b6a044-5f98-4273-8e58-e8925ec179ac default }" containerID=f17bc1cfacdbd54355ee67178e5a1e69cca69ea0b621383d8b6b8c46f52730fd datapathConfiguration="&{false false false false false }" interface=lxc9c2c9834919b k8sPodName=openstack/staffeln-conductor-d5fdd4594-w897t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f17bc1cfac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-d5fdd4594-w897t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f17bc1cfac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-d5fdd4594-w897t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f17bc1cfac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 identity=1843 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-d5fdd4594-w897t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f17bc1cfac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 identity=1843 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-d5fdd4594-w897t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 38abd5d0-3386-4ba3-8762-87f48e2a7bd2 default }" containerID=15cf0d6a6ee9223e2de186e26b489a506c3c57787b120958ccb6837358083b47 datapathConfiguration="&{false false false false false }" interface=lxcb0683a9cca16 k8sPodName=openstack/staffeln-db-init-kjvsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15cf0d6a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-init-kjvsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15cf0d6a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-init-kjvsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.95 2b042b69-3dfa-42bd-9ad3-9bbfef115bcd default }" containerID=c2026903b2c134890b88e4261595e7f5f8758a60a75a811a97e5f61a731353a6 datapathConfiguration="&{false false false false false }" interface=lxc77a419c776b1 k8sPodName=openstack/staffeln-api-7c8bf6b4fc-6722r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2026903b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7c8bf6b4fc-6722r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2026903b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7c8bf6b4fc-6722r subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15cf0d6a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identity=4389 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-init-kjvsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15cf0d6a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1954 identity=4389 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-init-kjvsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2026903b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=17661 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7c8bf6b4fc-6722r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2026903b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=17661 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7c8bf6b4fc-6722r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f17bc1cfac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3316 identity=1843 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-d5fdd4594-w897t subsys=endpoint level=info msg="Successful endpoint creation" containerID=f17bc1cfac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3316 identity=1843 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/staffeln-conductor-d5fdd4594-w897t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15cf0d6a6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1954 identity=4389 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-init-kjvsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=15cf0d6a6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1954 identity=4389 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-init-kjvsd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2026903b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1108 identity=17661 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7c8bf6b4fc-6722r subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2026903b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1108 identity=17661 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/staffeln-api-7c8bf6b4fc-6722r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15cf0d6a6e endpointID=1954 k8sNamespace=openstack k8sPodName=staffeln-db-init-kjvsd subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=b3960e14-b0bd-4b30-b3e6-561985addafa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=15cf0d6a6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1954 identity=4389 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-init-kjvsd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 e93f6178-0ac5-4a99-9a9c-ea325e098a36 default }" containerID=227d5b29c0ce4a97715d832bcc05e76765a273f39b0b74b174c804f52e784ff9 datapathConfiguration="&{false false false false false }" interface=lxc3877f38b07f0 k8sPodName=openstack/staffeln-db-sync-ll66q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=227d5b29c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-sync-ll66q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=227d5b29c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=42e02fcd-1d1f-45e5-97ad-e03ca4eb08e1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=42e02fcd-1d1f-45e5-97ad-e03ca4eb08e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-sync-ll66q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=42e02fcd-1d1f-45e5-97ad-e03ca4eb08e1;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=42e02fcd-1d1f-45e5-97ad-e03ca4eb08e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=227d5b29c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=17679 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=42e02fcd-1d1f-45e5-97ad-e03ca4eb08e1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=42e02fcd-1d1f-45e5-97ad-e03ca4eb08e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-sync-ll66q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=227d5b29c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=17679 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-sync-ll66q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=227d5b29c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=17679 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-sync-ll66q subsys=endpoint level=info msg="Successful endpoint creation" containerID=227d5b29c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=17679 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-db-sync-ll66q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager