level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.09299ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="59.202µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.106861ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.61µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.337096ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.101µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.671µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="73.582µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="122.243µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="85.622µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="846.094µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.803484ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.9051ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="86.273µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="179.445µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="391.731µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="188.345µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="148.784µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.988694ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="100.873µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.168.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.724984ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="19.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.644118ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.016128ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="33.571µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.9µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="64.022µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="400.032µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="7.461µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="13.541µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="303.518µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.008279ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.336648ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.25µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="26.781µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.168 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.168 ipAddr.ipv6="" k8sNodeIP=199.19.213.168 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.168" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.105" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.168" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.168} {CiliumInternalIP 10.0.0.105}] 10.0.0.0/24 [] [] 10.0.0.177 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46349" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.466019498s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="14.02µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="6.2µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="99.903µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.071µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3887 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.688727653s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=319.495187ms file-path=/var/run/cilium/state/templates/b4c89fb92019918fe66b89c5025c605439d5accdb676006c434395c7b8b75921/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3887 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 ipv4=10.0.0.177 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identityLabels="reserved:health" ipv4=10.0.0.177 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1985 identity=4 identityLabels="reserved:health" ipv4=10.0.0.177 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.181197078s file-path=/var/run/cilium/state/templates/412498a213f707e928ac2d6fe274539ca372ae4f774cb307f52e9084e0c08e83/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1985 identity=4 ipv4=10.0.0.177 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 5a47e280-0aa4-4b1c-a7bd-24cc07a0b1be default }" containerID=6f0dc303fd74cb3d489fd0e94c274239fd09bb79d373b8775cc1cc1011a7f866 datapathConfiguration="&{false false false false false }" interface=lxcd30d6f429c16 k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f0dc303fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 f0a1849f-f8fc-49dd-b3eb-37a274df142d default }" containerID=e5175d3b8df1fc6b559dbb6348f3d131ffa0e9ad88ab6357ca82bbbb08244acf datapathConfiguration="&{false false false false false }" interface=lxc01f647c6d6d7 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5175d3b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f0dc303fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e5175d3b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f0dc303fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=1413 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6f0dc303fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=1413 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e5175d3b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5175d3b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=10205 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5175d3b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=10205 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f0dc303fd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3334 identity=1413 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f0dc303fd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3334 identity=1413 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e5175d3b8d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2728 identity=10205 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5175d3b8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2728 identity=10205 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5175d3b8d endpointID=2728 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-55rzx subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=c098e3c5-d085-4ad2-adda-02c2e6434a4d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e5175d3b8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2728 identity=10205 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-55rzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 e3eedbbd-b1dd-4cb2-bc82-3760fbf83d1c default }" containerID=475d70af7649faba8debe4a53246ebc1ad1976fd267efb627980d60b29addbab datapathConfiguration="&{false false false false false }" interface=lxc96b9bd82dcef k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-75jvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=475d70af76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-75jvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=475d70af76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-75jvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=475d70af76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=25884 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-75jvw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=475d70af76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1766 identity=25884 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-75jvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=475d70af76 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1766 identity=25884 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-75jvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=475d70af76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1766 identity=25884 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-75jvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3887 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03887 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03887 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03887 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03887:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3887 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 30112ddc-1d8b-4738-a9e2-89a4bae82cc7 default }" containerID=81b0b1cbab6370b313836f2a722770c2382d4feffdfe5b841cfdfce4cc64030d datapathConfiguration="&{false false false false false }" interface=lxcf9f64fadc72f k8sPodName=kube-system/coredns-67659f764b-j5rjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81b0b1cbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-j5rjp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 c8d2d0e9-b8d7-4969-91e2-d312302ac420 default }" containerID=56c856a1011fc4d755271707082f1c79eb0605d8415bd39022943a7da9f47867 datapathConfiguration="&{false false false false false }" interface=lxcce48eae9518b k8sPodName=kube-system/coredns-67659f764b-2mmdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56c856a101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mmdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81b0b1cbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-j5rjp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=81b0b1cbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=1413 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-j5rjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81b0b1cbab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1596 identity=1413 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-j5rjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56c856a101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mmdb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=56c856a101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=1413 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mmdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56c856a101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=1413 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mmdb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81b0b1cbab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1596 identity=1413 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-j5rjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=81b0b1cbab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1596 identity=1413 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-j5rjp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56c856a101 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=417 identity=1413 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mmdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=56c856a101 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=417 identity=1413 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-2mmdb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.106 17000a02-758d-4e8b-b5db-a1aa74a2fae7 default }" containerID=56d2c535f2405d7341176446ba9a45e24419389e83bc3d8c7c274a21af47f8e4 datapathConfiguration="&{false false false false false }" interface=lxce7063c7e2fb6 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x4jnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56d2c535f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x4jnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56d2c535f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x4jnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56d2c535f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identity=12170 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x4jnl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56d2c535f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identity=12170 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x4jnl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=56d2c535f2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3505 identity=12170 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x4jnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=56d2c535f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3505 identity=12170 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x4jnl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f0dc303fd endpointID=3334 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-n2vx5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=6f0dc303fd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3334 identity=1413 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-n2vx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 d07da41b-b58c-4d3c-b37d-ef52550ebe5f default }" containerID=45e40d045cb49558ae3ed6af848996045e50ba07a73d0b516ebcb1a3df5308e8 datapathConfiguration="&{false false false false false }" interface=lxc7a18e278a390 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45e40d045c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45e40d045c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45e40d045c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45e40d045c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=40179 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45e40d045c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=40179 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 0cafb528-a651-48cd-a03a-fdca596d824b default }" containerID=aaf3d6a882170221d2f11edbaaada34c9219471c7f6b88a6c39175f35b466e3c datapathConfiguration="&{false false false false false }" interface=lxcab69dacd6071 k8sPodName=cert-manager/cert-manager-75c4c745bc-5lw4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaf3d6a882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5lw4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaf3d6a882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5lw4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaf3d6a882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=24519 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5lw4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaf3d6a882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=24519 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5lw4v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45e40d045c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2030 identity=40179 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45e40d045c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2030 identity=40179 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nq8p5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.251 a63ac6dc-f1f5-4661-a910-e426e6c574e1 default }" containerID=00b7af9e1d87068d0f81d7a8c4286594846e6fc463921ae8e4e39a84d464b6d8 datapathConfiguration="&{false false false false false }" interface=lxc9de9f5e228c6 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-p6fvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b7af9e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-p6fvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00b7af9e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-p6fvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b7af9e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 identity=19214 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-p6fvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00b7af9e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1960 identity=19214 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-p6fvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b7af9e1d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1960 identity=19214 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-p6fvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b7af9e1d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1960 identity=19214 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-p6fvf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aaf3d6a882 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1957 identity=24519 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5lw4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaf3d6a882 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1957 identity=24519 ipv4=10.0.0.156 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5lw4v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.7 fd934469-14f7-46e4-927c-5e718bd81f51 default }" containerID=d0b39d1712d7d3ecf0a2e2b0832da3aff31f5e5a55d94c90eb72c92f42b08ff4 datapathConfiguration="&{false false false false false }" interface=lxcd49df20789d0 k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0b39d1712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0b39d1712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0b39d1712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=4501 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0b39d1712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=4501 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0b39d1712 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=946 identity=4501 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0b39d1712 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=946 identity=4501 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0b39d1712 endpointID=946 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-lzmmz subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c7da88cf-9bf1-45b4-9be6-319ee85a9772 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=d0b39d1712 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=946 identity=4501 ipv4=10.0.0.7 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lzmmz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 9f2cfb45-31ad-4b39-936d-cceea6952d1d default }" containerID=f12911999c4072c509902184bd8c4881b95692be5750c4c596bbd9e045a8aa48 datapathConfiguration="&{false false false false false }" interface=lxc6c1ed53bae39 k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f12911999c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f12911999c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f12911999c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=37882 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f12911999c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=37882 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f12911999c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=440 identity=37882 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f12911999c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=440 identity=37882 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f12911999c endpointID=440 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-tmd66 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e57e06ba-015b-45ec-8124-6f935c6b7296 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=f12911999c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=440 identity=37882 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tmd66 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 977cac3f-4101-4600-a06c-a5f1cd5448d6 default }" containerID=34cd421aeb8567d6c0ee4801985d6bb6ab5f8fe388ceb2a821e7b07b56eb69a8 datapathConfiguration="&{false false false false false }" interface=lxc26750456cd03 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34cd421aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34cd421aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=34cd421aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34cd421aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=46565 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34cd421aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=46565 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34cd421aeb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1623 identity=46565 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq subsys=endpoint level=info msg="Successful endpoint creation" containerID=34cd421aeb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1623 identity=46565 ipv4=10.0.0.183 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sp2qq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 657164a9-ad90-4b24-bfc4-4eb986adb135 default }" containerID=1d73daa868bc7a888cf914c4b5a11a2a1979f364b3a0ec04fcad73fb6b12a1db datapathConfiguration="&{false false false false false }" interface=lxce9895b5fd99e k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d73daa868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d73daa868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d73daa868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 identity=39895 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d73daa868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3453 identity=39895 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d73daa868 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3453 identity=39895 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d73daa868 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3453 identity=39895 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d73daa868 endpointID=3453 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-ghnfv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=e877bb23-2cbe-41ca-8fab-ed594f2c4c83 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=1d73daa868 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3453 identity=39895 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ghnfv subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=893ceae1-b1c6-43f6-8f86-eec9ec77b95d] Description:}]" policyAddRequest=004d636d-758d-4b33-9385-fa1b354b97ea subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=004d636d-758d-4b33-9385-fa1b354b97ea policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f69025cf-d555-4d52-8181-83300cd7c08b] Description:}]" policyAddRequest=39e16af4-215b-47f7-b766-d7138ee68e92 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=39e16af4-215b-47f7-b766-d7138ee68e92 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.123 8cf8e004-acc5-4910-a92d-04a0f2604611 default }" containerID=47fb03e73101d9ad19de62d71a48ae658e6c3190de3e82bc26291a4e66efe9ad datapathConfiguration="&{false false false false false }" interface=lxc5df9502ea1e3 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5sz2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47fb03e731 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5sz2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47fb03e731 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5sz2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47fb03e731 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 identity=60808 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5sz2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47fb03e731 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1952 identity=60808 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5sz2x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=47fb03e731 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1952 identity=60808 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5sz2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=47fb03e731 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1952 identity=60808 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5sz2x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 31cb4a7a-5c4a-4f5d-915e-5062251b2b43 default }" containerID=dd693b327cc25bf691f01cb7d2f8fd2a9ae1e9c237e519e2e272c030483f2dcb datapathConfiguration="&{false false false false false }" interface=lxcd152d5a4192c k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-k2scv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd693b327c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-k2scv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd693b327c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-k2scv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd693b327c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=18499 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-k2scv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd693b327c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=18499 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-k2scv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd693b327c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=641 identity=18499 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-k2scv subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd693b327c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=641 identity=18499 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-k2scv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 a88abeca-d4bb-4167-8ec0-43e7fd8e17a4 default }" containerID=d1b110e88fdd311e61bad25b1992d61d6e2dd49515d8082df863852c28166038 datapathConfiguration="&{false false false false false }" interface=lxcad0a44df692f k8sPodName=openstack/pxc-operator-69cb5bbdb9-flm4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1b110e88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flm4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1b110e88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flm4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1b110e88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=10196 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flm4l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1b110e88f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=10196 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flm4l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d1b110e88f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=701 identity=10196 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flm4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1b110e88f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=701 identity=10196 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-flm4l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 6772f335-5134-4dcf-8e9e-a0c98553e4ee default }" containerID=1316b7bf40a61e2f531dfe626315630a40d5fabfcc6d4adf8f6a00dfd320c1fb datapathConfiguration="&{false false false false false }" interface=lxc948888497586 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1316b7bf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1316b7bf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1316b7bf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=4303 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1316b7bf40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=4303 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1316b7bf40 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2136 identity=4303 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1316b7bf40 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2136 identity=4303 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 2c58c235-aa04-4d4c-a4d6-b0994fecbed9 default }" containerID=e3a4901fc70b08106b02158e3e3c178d08a72054322d1084d087e0e2a30aebe8 datapathConfiguration="&{false false false false false }" interface=lxc91c54d5f4dc3 k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3a4901fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3a4901fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3a4901fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3a4901fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=6049 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3a4901fc7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=648 identity=6049 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3a4901fc7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=648 identity=6049 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e3a4901fc7 endpointID=648 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e3a4901fc7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=648 identity=6049 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2846ec-f111-4111-aca2-0c2e96778c48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 15c7e6c1-10fe-41e8-bc56-00dd20b1f368 default }" containerID=6d643aad170051f7492d5c5b06f6af69cbf0c1eb14dba315dbabd8d3000ffa2f datapathConfiguration="&{false false false false false }" interface=lxca1b00f407591 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d643aad17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d643aad17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d643aad17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=16128 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d643aad17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=16128 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d643aad17 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2084 identity=16128 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d643aad17 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2084 identity=16128 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007615620815128438 newInterval=7m30s subsys=map-ct level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.02194732641660016 newInterval=11m15s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=dd41ed37-ccf7-43ce-906c-7618b913612e] Description:}]" policyAddRequest=8d9d30a4-a979-4240-af8c-5ea70a10d345 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8d9d30a4-a979-4240-af8c-5ea70a10d345 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.14 061eb861-afab-4063-b439-91d0fb75b658 default }" containerID=0e571df1e57c4a638097f2296b61f65e692e20d3297fd464b11b05d775b78199 datapathConfiguration="&{false false false false false }" interface=lxcece6cab2206d k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e571df1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e571df1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e571df1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e571df1e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=6049 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e571df1e5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=608 identity=6049 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e571df1e5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=608 identity=6049 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca subsys=daemon level=info msg="Delete endpoint request" containerID=0e571df1e5 endpointID=608 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0e571df1e5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=608 identity=6049 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0af38315-b8f6-4f8d-8abd-cf66ea6e6aca subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 1ae5668e-d409-4e09-b034-29be55f46fb0 default }" containerID=13bd4977586b95ed94d8d8093ef8e6303a2d63780da3e5255db5c3b3d01e1b36 datapathConfiguration="&{false false false false false }" interface=lxc659171d97b8d k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13bd497758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13bd497758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13bd497758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 identity=18694 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13bd497758 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 identity=18694 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=13bd497758 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3016 identity=18694 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13bd497758 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3016 identity=18694 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=76d14d54-3ce4-4d4d-b9a8-9ffea2efa5cb] Description:}]" policyAddRequest=23867889-14ea-4576-906e-5fe7275d2d9a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=23867889-14ea-4576-906e-5fe7275d2d9a policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.207 f28fb497-7b10-4986-851d-946d88db9ced default }" containerID=7cac7f5609c8aa47dd090d6adf0827fe1c8ec79791bf9023a48ea681c2ea5569 datapathConfiguration="&{false false false false false }" interface=lxce48d65dc9fe7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cac7f5609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cac7f5609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cac7f5609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=5077 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cac7f5609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2146 identity=5077 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7cac7f5609 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2146 identity=5077 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cac7f5609 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2146 identity=5077 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 76506baf-d714-4891-96a0-b995a9cb52c8 default }" containerID=e9b74597f334bc2a01e66c1bfc4f106de7b8dc9e78c5807090486b275018107d datapathConfiguration="&{false false false false false }" interface=lxc1e79cb71fb91 k8sPodName=monitoring/node-feature-discovery-worker-q68zs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9b74597f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q68zs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9b74597f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q68zs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e9b74597f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=44788 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q68zs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9b74597f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=44788 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q68zs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 b1f6f597-b167-4781-b656-74c51b0db92a default }" containerID=a7d7122860ab41b8ca1351b5bcf9b0a5208a01e7d3b1634931ddb48dc536365d datapathConfiguration="&{false false false false false }" interface=lxce278924ced25 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sqhs7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7d7122860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sqhs7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7d7122860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sqhs7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.115 252be837-c0e6-4d54-af11-99f892a183a6 default }" containerID=e772edc631ab41e26c7925e2c423fe52e6c1cc46f62b1539cd49d5a9b0801e65 datapathConfiguration="&{false false false false false }" interface=lxc410e61f05034 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p7q9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e772edc631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p7q9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e772edc631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p7q9k subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7d7122860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=32685 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sqhs7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7d7122860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=32685 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sqhs7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e772edc631 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=26181 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p7q9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e772edc631 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=283 identity=26181 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p7q9k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9b74597f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=977 identity=44788 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q68zs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9b74597f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=977 identity=44788 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q68zs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a7d7122860 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=585 identity=32685 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sqhs7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7d7122860 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=585 identity=32685 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-sqhs7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e772edc631 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=283 identity=26181 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p7q9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=e772edc631 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=283 identity=26181 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p7q9k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 2935b222-9068-4a1d-9e7e-621c4586effb default }" containerID=f1ebf06e188bce6df26c823781873cbabcf5b2b25101b83689abb8b0736f7fd8 datapathConfiguration="&{false false false false false }" interface=lxcf8b77c0ffa54 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tbmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1ebf06e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tbmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1ebf06e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tbmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1ebf06e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=58165 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tbmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1ebf06e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=58165 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tbmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1ebf06e18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2008 identity=58165 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tbmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1ebf06e18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2008 identity=58165 ipv4=10.0.0.164 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tbmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3887 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03887 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03887 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03887 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03887:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3887 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 faefff65-473d-4ef2-8161-1b6dc1811ff4 default }" containerID=0d4d2dc8a304643b038a1066da73c46398fc08bf9402c2f42fdc4d87d36f2ce4 datapathConfiguration="&{false false false false false }" interface=lxc6eea8849f3b0 k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d4d2dc8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d4d2dc8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d4d2dc8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=10605 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d4d2dc8a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=10605 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0d4d2dc8a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=240 identity=10605 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d4d2dc8a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=240 identity=10605 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d4d2dc8a3 endpointID=240 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-mxwjt subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=28eb6acf-96e6-45ea-9061-715c8dc30631 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0d4d2dc8a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=240 identity=10605 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mxwjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 6b5a445a-d515-4e55-b463-8374122f8f4f default }" containerID=929799aefb873a5057e80506d6cd69ed891acd622c75e57f96d56b7f584fdf8a datapathConfiguration="&{false false false false false }" interface=lxc6433c8ef52c3 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=929799aefb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=929799aefb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=929799aefb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=929799aefb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=29391 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=929799aefb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=29391 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 ab24d9e9-b5fc-4934-a3d8-abe70efbf3ea default }" containerID=269d20aced1315023f2b5b12f9ea24edbdac309eba4644136ab3dd619f7222a4 datapathConfiguration="&{false false false false false }" interface=lxc358e0b4b257b k8sPodName=monitoring/kube-prometheus-stack-grafana-ddf67f496-l4lph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=269d20aced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-ddf67f496-l4lph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 19e5e9b5-b5eb-4b65-8e18-82269ee232e8 default }" containerID=df6a99552da6423eeeda065f23058bcc87e7fc0a5472792563b680c60221dcf8 datapathConfiguration="&{false false false false false }" interface=lxcf0cc23d88fb6 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pcqpw labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=269d20aced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-ddf67f496-l4lph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=df6a99552d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pcqpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df6a99552d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pcqpw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=269d20aced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=29699 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-ddf67f496-l4lph oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=269d20aced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=29699 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-ddf67f496-l4lph subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df6a99552d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identity=1105 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pcqpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df6a99552d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identity=1105 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pcqpw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=929799aefb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1841 identity=29391 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=929799aefb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1841 identity=29391 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-khhbb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=269d20aced datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2127 identity=29699 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-ddf67f496-l4lph subsys=endpoint level=info msg="Successful endpoint creation" containerID=269d20aced datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2127 identity=29699 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-ddf67f496-l4lph subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df6a99552d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3906 identity=1105 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pcqpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=df6a99552d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3906 identity=1105 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pcqpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 bea2bb55-dfb9-4669-b720-1287b8e0d527 default }" containerID=f1b27e70a4d877a656a8cab3710589dbbd8206f72f79d8c9b1599fa9f77aba5c datapathConfiguration="&{false false false false false }" interface=lxc1c88d4fadc05 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1b27e70a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1b27e70a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1b27e70a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=46823 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1b27e70a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=46823 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1b27e70a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=69 identity=46823 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1b27e70a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=69 identity=46823 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f1b27e70a4 endpointID=69 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-95thf subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=cc42a8c2-581b-4ca0-885d-3d9d153fb1f6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f1b27e70a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=69 identity=46823 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-95thf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 bfc9f7f4-1a48-468f-84ad-f9396ac2db40 default }" containerID=e6e951dc6a28a50340a72ed1d3cd848bcb8bb70387a3d3e6201abf59885fb071 datapathConfiguration="&{false false false false false }" interface=lxce42e2ca65859 k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6e951dc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6e951dc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6e951dc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6e951dc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=6049 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6e951dc6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=948 identity=6049 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6e951dc6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=948 identity=6049 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 240f35ab-04aa-4a84-a5cc-5b8763caa258 default }" containerID=176b09dd563e1f4cfbd45d84c75c16dd493bc36d453513258d72f2f351902d44 datapathConfiguration="&{false false false false false }" interface=lxc44fa6ecbadd0 k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=176b09dd56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=176b09dd56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=176b09dd56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=176b09dd56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1742 identity=6049 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=176b09dd56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1742 identity=6049 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=176b09dd56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1742 identity=6049 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc subsys=daemon level=info msg="Delete endpoint request" containerID=176b09dd56 endpointID=1742 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=e6e951dc6a endpointID=948 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=176b09dd56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1742 identity=6049 ipv4=10.0.0.84 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d31a3000-bd04-455b-8c14-762d38cb21bc subsys=endpoint level=info msg="Removed endpoint" containerID=e6e951dc6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=948 identity=6049 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfdd59cd-cf13-4caf-a249-66de61a5bfbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 39655c8d-363e-45a4-97e9-4769837610d9 default }" containerID=b29d2a8488f0f294456d1b39e78cd7afa0bb8438cceecbc71ac040f1dc357657 datapathConfiguration="&{false false false false false }" interface=lxc6b97873bb042 k8sPodName=monitoring/loki-gateway-cf54cb88c-jj84p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b29d2a8488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj84p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b29d2a8488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj84p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b29d2a8488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=5814 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj84p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b29d2a8488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=5814 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj84p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 e293b007-f41c-4fae-9d60-b547c32e64e6 default }" containerID=831bab549fff1bb0d6b013186e6295554cae22e2ad4119c4893b078fbd6fb7d0 datapathConfiguration="&{false false false false false }" interface=lxc1ce95dc51394 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=831bab549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 eac3c372-406e-4ae4-b4ea-2fe4d76e8d2e default }" containerID=f0230db763a5ec2ad309860344eb43d9773dd6df3559848dcb1dda22d1a1a919 datapathConfiguration="&{false false false false false }" interface=lxc3e8c869cc8ba k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0230db763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=831bab549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0230db763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=831bab549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 identity=28346 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=831bab549f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 identity=28346 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0230db763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=5788 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0230db763 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=5788 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b29d2a8488 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2801 identity=5814 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj84p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b29d2a8488 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2801 identity=5814 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj84p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=831bab549f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3130 identity=28346 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=831bab549f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3130 identity=28346 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f0230db763 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=787 identity=5788 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0230db763 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=787 identity=5788 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 3ea6329c-fea6-436d-98ee-17b9567b7be7 default }" containerID=b79aac22778e4155e1a09abbc43775907a17075f953e215c690c7773d9f12dd2 datapathConfiguration="&{false false false false false }" interface=lxcec4e9c94de81 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b79aac2277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b79aac2277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b79aac2277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=11554 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b79aac2277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=11554 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b79aac2277 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=379 identity=11554 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b79aac2277 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=379 identity=11554 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 22fccb65-48cb-4092-88d5-800f6845a1c3 default }" containerID=60441cbb551c946db3fd34fef4e551334004489d0f333a7f2e3eb9564d21efa5 datapathConfiguration="&{false false false false false }" interface=lxc918626d29def k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60441cbb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60441cbb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60441cbb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=15022 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60441cbb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=15022 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60441cbb55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3388 identity=15022 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60441cbb55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=15022 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.213 90d40efd-03af-4490-bbb5-ca3196458d45 default }" containerID=86370864f8f508315faf8fcfdc6e14e1adefe30aa933f886856e29fe2185f519 datapathConfiguration="&{false false false false false }" interface=lxcb30ee7ee08b6 k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86370864f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86370864f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86370864f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86370864f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=6049 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86370864f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=642 identity=6049 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=86370864f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=642 identity=6049 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.116 1c183aec-911a-4468-889d-2acbeeacba4e default }" containerID=75e26b89cc43ba3f1fdb3b1e9c31f223f7e038346f5c0a290b764ca923fc3ec4 datapathConfiguration="&{false false false false false }" interface=lxc445950a4a030 k8sPodName=monitoring/vector-l9ztr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75e26b89cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-l9ztr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75e26b89cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-l9ztr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75e26b89cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identity=37759 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-l9ztr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75e26b89cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1140 identity=37759 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-l9ztr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75e26b89cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1140 identity=37759 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-l9ztr subsys=endpoint level=info msg="Successful endpoint creation" containerID=75e26b89cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1140 identity=37759 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-l9ztr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86370864f8 endpointID=642 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=86370864f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=642 identity=6049 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3dbe68d4-0dda-4ec6-8ea2-a7227e2a2b9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 d301e2d0-92c7-4c0c-a616-9fa2e5881c69 default }" containerID=f43d3296caabdfef09ec0d13101072e515eee8497935fccaf4292642869783db datapathConfiguration="&{false false false false false }" interface=lxc621cb6700360 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgs24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f43d3296ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgs24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f43d3296ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgs24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f43d3296ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=25476 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgs24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f43d3296ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=25476 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgs24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f43d3296ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=674 identity=25476 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgs24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f43d3296ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=674 identity=25476 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgs24 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 c0924468-b2fb-4c0d-aea7-00cfc78018f6 default }" containerID=eff7b6de0c89b6a7dbe6b9064d9e17a6dcf5e9abd63424183ee6e9243a0a8e34 datapathConfiguration="&{false false false false false }" interface=lxce2218e4b7328 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eff7b6de0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eff7b6de0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eff7b6de0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=61661 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eff7b6de0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=61661 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eff7b6de0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=665 identity=61661 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eff7b6de0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=61661 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 f9390893-fd6e-417c-9f3c-d11430164064 default }" containerID=7ec8728876edde771789b4ff3e771dfd39039a8f9698e059179b8fb62b549e3e datapathConfiguration="&{false false false false false }" interface=lxc4c90332412d4 k8sPodName=openstack/memcached-memcached-6479589586-4p2zz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ec8728876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4p2zz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ec8728876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4p2zz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ec8728876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=53101 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4p2zz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ec8728876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=53101 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4p2zz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ec8728876 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=863 identity=53101 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4p2zz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ec8728876 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=863 identity=53101 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4p2zz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 7445d4e9-4ae6-444d-b6a6-83d644f08d5b default }" containerID=75bc11c5570bed97a8a6e8e2befff3344dc4e50879046969f3d6cbf612bf31a8 datapathConfiguration="&{false false false false false }" interface=lxc34417b36f8a5 k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75bc11c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2914 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75bc11c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2914 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75bc11c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2914 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75bc11c557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2914 identity=6049 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75bc11c557 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2914 identity=6049 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75bc11c557 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2914 identity=6049 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 subsys=daemon level=info msg="Delete endpoint request" containerID=75bc11c557 endpointID=2914 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=75bc11c557 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2914 identity=6049 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f69f4f24-5702-4bf8-906c-193a12f23b65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 844829ec-cf01-4114-8bdd-c0025c7f2fb6 default }" containerID=0199f15d3704643fb24c59b4907585ab4612becdd71ea240ce07cc561c1cfed3 datapathConfiguration="&{false false false false false }" interface=lxc8f102efec3f1 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0199f15d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0199f15d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0199f15d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 identity=37841 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0199f15d37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3021 identity=37841 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0199f15d37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3021 identity=37841 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0199f15d37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3021 identity=37841 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 2d47b0df-f612-4e0a-8ac9-1c7f8061bceb default }" containerID=b8107a4a5ca5989c4265bbcc10ebebc9e4fabab8141603976f5485ef4ed23fd6 datapathConfiguration="&{false false false false false }" interface=lxc33894a38b1a3 k8sPodName=openstack/keystone-api-657c89bb88-bvzdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8107a4a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-api-657c89bb88-bvzdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8107a4a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-api-657c89bb88-bvzdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8107a4a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=26267 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-api-657c89bb88-bvzdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8107a4a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=26267 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-api-657c89bb88-bvzdx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 4a4ee0b1-9456-4a0c-b76a-8c481aa7a76c default }" containerID=ec85e6755c855b5dd62904349217e17289a4464435b7051dcf568c86f659b4f8 datapathConfiguration="&{false false false false false }" interface=lxcc049c9048560 k8sPodName=openstack/keystone-credential-setup-x25tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec85e6755c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-x25tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec85e6755c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81975a11-f3b6-4415-a478-1565982c63c4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=81975a11-f3b6-4415-a478-1565982c63c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-x25tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=81975a11-f3b6-4415-a478-1565982c63c4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=81975a11-f3b6-4415-a478-1565982c63c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec85e6755c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=17408 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81975a11-f3b6-4415-a478-1565982c63c4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=81975a11-f3b6-4415-a478-1565982c63c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-x25tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec85e6755c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=17408 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-x25tk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8107a4a5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1164 identity=26267 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-api-657c89bb88-bvzdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8107a4a5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1164 identity=26267 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-api-657c89bb88-bvzdx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec85e6755c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=188 identity=17408 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-x25tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec85e6755c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=188 identity=17408 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-x25tk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec85e6755c endpointID=188 k8sNamespace=openstack k8sPodName=keystone-credential-setup-x25tk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=81975a11-f3b6-4415-a478-1565982c63c4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=81975a11-f3b6-4415-a478-1565982c63c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ec85e6755c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=188 identity=17408 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-x25tk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 8bf9e853-0961-4503-9f06-f059abf64575 default }" containerID=babd0b0abf5a9149e7aca7c7691ad041c91cb13548c943cadd40e1f103ad5059 datapathConfiguration="&{false false false false false }" interface=lxccfcceaf583ae k8sPodName=openstack/keystone-db-init-v7266 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=babd0b0abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-db-init-v7266 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=babd0b0abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-db-init-v7266 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=babd0b0abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=4932 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-db-init-v7266 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=babd0b0abf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=4932 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-db-init-v7266 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=babd0b0abf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=4932 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-db-init-v7266 subsys=endpoint level=info msg="Successful endpoint creation" containerID=babd0b0abf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=4932 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-db-init-v7266 subsys=daemon level=info msg="Delete endpoint request" containerID=babd0b0abf endpointID=958 k8sNamespace=openstack k8sPodName=keystone-db-init-v7266 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=78fb2c37-6526-4257-ab13-fd5a88d48afe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=babd0b0abf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=4932 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-db-init-v7266 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 f8ce8bd1-9834-4867-856a-b7ee5938f084 default }" containerID=2f067ccea5cb8248a6d7bf7325836f23ce17d33d10382b6b31b8f26251501a0b datapathConfiguration="&{false false false false false }" interface=lxce422f645aee7 k8sPodName=openstack/keystone-fernet-setup-v9b9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f067ccea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f067ccea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f067ccea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f067ccea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=15268 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f067ccea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=15268 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f067ccea5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1035 identity=15268 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f067ccea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1035 identity=15268 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f067ccea5 endpointID=1035 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-v9b9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=63de466d-6089-48c6-9e8c-691d44eec9c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2f067ccea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1035 identity=15268 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-fernet-setup-v9b9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 8ce6fdae-0770-4ffb-9fae-0b7ace7a3ff3 default }" containerID=6460c4c898bb029e6c12db4595d7e58d2b411d80d4990171a9ffdc0203640577 datapathConfiguration="&{false false false false false }" interface=lxccdc83544559d k8sPodName=openstack/keystone-db-sync-6wrpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6460c4c898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-6wrpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6460c4c898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-6wrpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6460c4c898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=16694 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-6wrpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6460c4c898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=16694 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-6wrpb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6460c4c898 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=260 identity=16694 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-6wrpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6460c4c898 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=16694 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-6wrpb subsys=daemon level=info msg="Delete endpoint request" containerID=6460c4c898 endpointID=260 k8sNamespace=openstack k8sPodName=keystone-db-sync-6wrpb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=7086cc0d-6b59-4aa8-a691-bdabdc7f3aef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6460c4c898 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=260 identity=16694 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-db-sync-6wrpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 f72c3bee-f2fc-457f-b215-10c669d5091e default }" containerID=a3a461f580da5d02dadc37ba6255a45801762884c6291e0da86a8fd8bb37af77 datapathConfiguration="&{false false false false false }" interface=lxcd08721f1b43a k8sPodName=openstack/keystone-rabbit-init-hskm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3a461f580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-hskm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3a461f580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-hskm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3a461f580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=48481 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-hskm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3a461f580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=48481 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-hskm9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3a461f580 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=658 identity=48481 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-hskm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3a461f580 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=658 identity=48481 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-hskm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a3a461f580 endpointID=658 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-hskm9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=00553b09-9ae7-4c10-bb7c-116897389cbe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a3a461f580 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=658 identity=48481 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-rabbit-init-hskm9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 04964b3c-bd9b-4c2d-853f-a99572ecdb36 default }" containerID=8d1b1402becb2a513851ebfcd0cac7a8b65dc3e2ae308dfef8a68b26004594ab datapathConfiguration="&{false false false false false }" interface=lxc2ad819aded77 k8sPodName=openstack/keystone-domain-manage-cjgr8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d1b1402be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d1b1402be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d1b1402be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d1b1402be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=17310 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d1b1402be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=17310 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d1b1402be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1425 identity=17310 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d1b1402be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1425 identity=17310 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d1b1402be endpointID=1425 k8sNamespace=openstack k8sPodName=keystone-domain-manage-cjgr8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=defc91ff-b10f-4d8c-8a9e-b8463f338871 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8d1b1402be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1425 identity=17310 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-domain-manage-cjgr8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 81a953dc-9e6b-4cbd-8cf0-f3e01b88987c default }" containerID=edf6d9614573f3ef9a6977e21329090cb52c3b15fe95c5beda8e393b7f8c8052 datapathConfiguration="&{false false false false false }" interface=lxc55f452f98cf9 k8sPodName=openstack/keystone-bootstrap-hqv66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edf6d96145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edf6d96145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=edf6d96145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edf6d96145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=7752 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edf6d96145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=7752 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edf6d96145 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3029 identity=7752 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edf6d96145 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3029 identity=7752 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edf6d96145 endpointID=3029 k8sNamespace=openstack k8sPodName=keystone-bootstrap-hqv66 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=e11bf8fa-8c0c-4037-a312-c3f7343bf4a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=edf6d96145 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3029 identity=7752 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-hqv66 subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04726960379834161 newInterval=16m53s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.18 f0fda181-30d6-4061-b4ba-5dcc6cf90671 default }" containerID=dc7fd8d8173d9931ec50dcd089a0d99f76bdb6cd35f60143361fcb2adb250873 datapathConfiguration="&{false false false false false }" interface=lxc0b1dbbfa169c k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc7fd8d817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc7fd8d817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc7fd8d817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc7fd8d817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=6049 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc7fd8d817 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=581 identity=6049 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc7fd8d817 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=581 identity=6049 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a subsys=daemon level=info msg="Delete endpoint request" containerID=dc7fd8d817 endpointID=581 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dc7fd8d817 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=581 identity=6049 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-308ccde2-e8c4-421d-8784-2aa8b308d90a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 d9886a60-1cbe-4128-be1d-5c21bccab212 default }" containerID=d01a131884c7cca0e4c57b50edf53df37edf1690ea7e3da3aceb598a60563fc6 datapathConfiguration="&{false false false false false }" interface=lxc9b2db87254ce k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d01a131884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d01a131884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d01a131884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=32986 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d01a131884 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1604 identity=32986 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d01a131884 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1604 identity=32986 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d01a131884 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1604 identity=32986 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 b101725d-c2ed-4af8-84e2-05158af9b89b default }" containerID=f74baff34bc48220b3ac1c7b99469a1c10e23b049720f91520ccdfd54e4c167a datapathConfiguration="&{false false false false false }" interface=lxc5e52560c2a52 k8sPodName=openstack/barbican-api-6b5bbb486c-svg9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f74baff34b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6b5bbb486c-svg9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f74baff34b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6b5bbb486c-svg9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f74baff34b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=20020 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6b5bbb486c-svg9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f74baff34b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=20020 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6b5bbb486c-svg9m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 508c09e9-b019-44b6-a74f-f3db25a09bb0 default }" containerID=31e5e0fa1d89cd2bf7fcdd78c92501e43d5cb1ab1756aac96d408f15ed7b284b datapathConfiguration="&{false false false false false }" interface=lxce79e347c3fda k8sPodName=openstack/barbican-db-init-4z2xf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31e5e0fa1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-4z2xf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31e5e0fa1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-4z2xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31e5e0fa1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identity=39041 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-4z2xf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31e5e0fa1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identity=39041 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-4z2xf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f74baff34b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1770 identity=20020 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6b5bbb486c-svg9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=f74baff34b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=20020 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-api-6b5bbb486c-svg9m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=31e5e0fa1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2007 identity=39041 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-4z2xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=31e5e0fa1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2007 identity=39041 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-4z2xf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31e5e0fa1d endpointID=2007 k8sNamespace=openstack k8sPodName=barbican-db-init-4z2xf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=668a2ee9-6356-468a-952f-7f09a256d2f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=31e5e0fa1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2007 identity=39041 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-4z2xf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 389a5df4-0a16-4200-b45b-5ead6bb9d6d7 default }" containerID=094ece78661a039ebfa581d21cb114d3629d413d327a735413080a625d41f238 datapathConfiguration="&{false false false false false }" interface=lxc729a0a7ad5b2 k8sPodName=openstack/barbican-db-sync-zrj57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=094ece7866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-zrj57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=094ece7866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-zrj57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=094ece7866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identity=6212 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-zrj57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=094ece7866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identity=6212 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-zrj57 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=094ece7866 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2792 identity=6212 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-zrj57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=094ece7866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2792 identity=6212 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-zrj57 subsys=daemon level=info msg="Delete endpoint request" containerID=094ece7866 endpointID=2792 k8sNamespace=openstack k8sPodName=barbican-db-sync-zrj57 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=600dca32-e0b8-4ac6-a82f-dbf05d74cffb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=094ece7866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2792 identity=6212 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-sync-zrj57 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 8bbbb13d-705d-4a76-bec0-c82d4eac3b22 default }" containerID=cd8251747ca04b1745d55435ef7fc2c61a35a33e69e157cfbc4df7a640bb6041 datapathConfiguration="&{false false false false false }" interface=lxcea32c80359b3 k8sPodName=openstack/barbican-rabbit-init-qlk87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd8251747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-qlk87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd8251747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8875668d-57ee-468b-ad48-5cab2e690110,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8875668d-57ee-468b-ad48-5cab2e690110,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-qlk87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8875668d-57ee-468b-ad48-5cab2e690110;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8875668d-57ee-468b-ad48-5cab2e690110;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd8251747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identity=2002 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8875668d-57ee-468b-ad48-5cab2e690110,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8875668d-57ee-468b-ad48-5cab2e690110,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-qlk87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd8251747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identity=2002 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-qlk87 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd8251747c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2350 identity=2002 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-qlk87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd8251747c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2350 identity=2002 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-qlk87 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd8251747c endpointID=2350 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-qlk87 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8875668d-57ee-468b-ad48-5cab2e690110 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8875668d-57ee-468b-ad48-5cab2e690110 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cd8251747c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2350 identity=2002 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/barbican-rabbit-init-qlk87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 248fb9d4-8250-41af-93aa-71e25a41c7fa default }" containerID=7049b376d533fa36693aff1fc7415e5df2e4fe0e88744c1c3a6627dfaeec4dbe datapathConfiguration="&{false false false false false }" interface=lxc47e72d764106 k8sPodName=openstack/barbican-ks-service-8shf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7049b376d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-8shf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7049b376d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-8shf2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7049b376d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=20987 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-8shf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7049b376d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=20987 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-8shf2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7049b376d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=547 identity=20987 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-8shf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7049b376d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=547 identity=20987 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-8shf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7049b376d5 endpointID=547 k8sNamespace=openstack k8sPodName=barbican-ks-service-8shf2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=4630ca68-14b2-4527-9d21-a797414ddcae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7049b376d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=547 identity=20987 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-ks-service-8shf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 d9898a60-58f3-4f4f-97ce-34b03bf2e1e1 default }" containerID=e974a10f30338423ba6ceedc80fa6e1f436fc3bad8958efb827b8b86774ad750 datapathConfiguration="&{false false false false false }" interface=lxc99f0f05a677c k8sPodName=openstack/barbican-ks-endpoints-qdw98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e974a10f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3842 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qdw98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e974a10f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3842 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0fc60875-3609-41cc-8313-e3186ae94893,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0fc60875-3609-41cc-8313-e3186ae94893,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qdw98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0fc60875-3609-41cc-8313-e3186ae94893;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0fc60875-3609-41cc-8313-e3186ae94893;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e974a10f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3842 identity=38616 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0fc60875-3609-41cc-8313-e3186ae94893,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0fc60875-3609-41cc-8313-e3186ae94893,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qdw98 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e974a10f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3842 identity=38616 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qdw98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e974a10f30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3842 identity=38616 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qdw98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e974a10f30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3842 identity=38616 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qdw98 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e974a10f30 endpointID=3842 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-qdw98 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0fc60875-3609-41cc-8313-e3186ae94893 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0fc60875-3609-41cc-8313-e3186ae94893 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e974a10f30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3842 identity=38616 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qdw98 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 7150d708-5436-40b0-a104-4f3db774ec39 default }" containerID=c2ecbcfd0ead5dcf8edb836fd707920f0e21443c26b30675c0d33ffa7b09b94d datapathConfiguration="&{false false false false false }" interface=lxcfcb2220c80c6 k8sPodName=openstack/barbican-ks-user-6plc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2ecbcfd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-user-6plc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2ecbcfd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5f6081f7-8990-4480-86b0-cee70da06013,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5f6081f7-8990-4480-86b0-cee70da06013,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-user-6plc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5f6081f7-8990-4480-86b0-cee70da06013;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=5f6081f7-8990-4480-86b0-cee70da06013;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2ecbcfd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 identity=6878 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5f6081f7-8990-4480-86b0-cee70da06013,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5f6081f7-8990-4480-86b0-cee70da06013,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-user-6plc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2ecbcfd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3930 identity=6878 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-user-6plc8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c2ecbcfd0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3930 identity=6878 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-user-6plc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2ecbcfd0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3930 identity=6878 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-user-6plc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2ecbcfd0e endpointID=3930 k8sNamespace=openstack k8sPodName=barbican-ks-user-6plc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5f6081f7-8990-4480-86b0-cee70da06013 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=5f6081f7-8990-4480-86b0-cee70da06013 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c2ecbcfd0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3930 identity=6878 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/barbican-ks-user-6plc8 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.222 aaa7ef22-f580-4e6f-8edf-5df3c3dc3cb7 default }" containerID=04af9dce37b276f3fccd4a265d33b21c646d13d1140b5468c0825e415e0922fb datapathConfiguration="&{false false false false false }" interface=lxcbbcd9dee238f k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-chzzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04af9dce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-chzzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04af9dce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-chzzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04af9dce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identity=36691 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-chzzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04af9dce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3903 identity=36691 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-chzzg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04af9dce37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3903 identity=36691 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-chzzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=04af9dce37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3903 identity=36691 ipv4=10.0.0.222 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-chzzg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 3311e374-1fa6-4100-be37-6113089fd234 default }" containerID=916e88552cfff7d98b3b9826549f2e03cf7c9ff543a0dcee49e6a62f266345e6 datapathConfiguration="&{false false false false false }" interface=lxcae7667a93099 k8sPodName=openstack/rook-ceph-detect-version-45hn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=916e88552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-45hn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=916e88552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=45915a61-d444-41b2-9c89-029851ec26be,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=45915a61-d444-41b2-9c89-029851ec26be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-45hn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=45915a61-d444-41b2-9c89-029851ec26be;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=45915a61-d444-41b2-9c89-029851ec26be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=916e88552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=8142 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=45915a61-d444-41b2-9c89-029851ec26be,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=45915a61-d444-41b2-9c89-029851ec26be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-45hn4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=916e88552c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=8142 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-45hn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=916e88552c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=828 identity=8142 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-45hn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=916e88552c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=828 identity=8142 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-45hn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=916e88552c endpointID=828 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-45hn4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=45915a61-d444-41b2-9c89-029851ec26be k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=45915a61-d444-41b2-9c89-029851ec26be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=916e88552c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=828 identity=8142 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rook-ceph-detect-version-45hn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 b37dd193-b5d9-49ce-bdb7-45ef8998039c default }" containerID=4d209cd601cfe8a45988852225aebd1304e7b591d9405a4acb1cc757725435a3 datapathConfiguration="&{false false false false false }" interface=lxc68331f6753c9 k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d209cd601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d209cd601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d209cd601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=6883 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d209cd601 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=6883 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d209cd601 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1731 identity=6883 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d209cd601 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1731 identity=6883 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d209cd601 endpointID=1731 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-4qlnz subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0a3cdd16-b586-4a13-862a-e4b091e7d6a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4d209cd601 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1731 identity=6883 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4qlnz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 6db43732-31d6-430e-9840-c9066e280ff3 default }" containerID=f50077df61cde01ec338f223270be29b0293dc9c970cd4a4e1c436fab2877df8 datapathConfiguration="&{false false false false false }" interface=lxcbd2657787fe4 k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f50077df61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f50077df61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f50077df61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f50077df61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=6049 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f50077df61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=559 identity=6049 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f50077df61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=6049 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 subsys=daemon level=info msg="Delete endpoint request" containerID=f50077df61 endpointID=559 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f50077df61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=6049 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76436ebf-8de6-4e30-8e0e-0f7a141f1688 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 c7e0c380-cf6a-4507-9ddb-87c81ee8bdf3 default }" containerID=444d62e648b2a903527d4acdca62ed4f33e05fb25753cdee3755bd54d14f167e datapathConfiguration="&{false false false false false }" interface=lxcb833cb6c5931 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=444d62e648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=444d62e648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=444d62e648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=30619 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=444d62e648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=30619 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=444d62e648 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1472 identity=30619 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=444d62e648 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=30619 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 6a98e169-81f4-4a32-95e1-9174dea5850e default }" containerID=753bcccb95357ec9a6418449279979581a692999d31ce7432563d024ff01cf70 datapathConfiguration="&{false false false false false }" interface=lxc7226c131d4f0 k8sPodName=openstack/glance-db-init-22mt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=753bcccb95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-22mt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=753bcccb95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-22mt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=753bcccb95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 identity=30949 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-22mt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=753bcccb95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 identity=30949 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-22mt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=753bcccb95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3592 identity=30949 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-22mt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=753bcccb95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3592 identity=30949 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-22mt7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 261ff038-98d6-479e-aeb0-afa4ac29ddd6 default }" containerID=eaf3e61b44deaac2b7b8aa09793f347ec6a44c1d1e91f6e7f92bac450d3ecf1e datapathConfiguration="&{false false false false false }" interface=lxc5c830a0685de k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf3e61b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf3e61b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eaf3e61b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaf3e61b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=44998 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf3e61b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=44998 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 bfaf85c1-0b07-4de9-967a-4294536e7d61 default }" containerID=ff643992ece32dcfcf9e66165ccb0d967b08b53b075f1f369ef50246efd69dbc datapathConfiguration="&{false false false false false }" interface=lxcad1cd2138cda k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-twmpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff643992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-twmpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff643992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-twmpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff643992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=16558 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-twmpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff643992ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=16558 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-twmpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaf3e61b44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=718 identity=44998 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf3e61b44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=718 identity=44998 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-c8phm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff643992ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=747 identity=16558 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-twmpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff643992ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=747 identity=16558 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-twmpv subsys=daemon level=info msg="Delete endpoint request" containerID=753bcccb95 endpointID=3592 k8sNamespace=openstack k8sPodName=glance-db-init-22mt7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=0e82e547-0e1e-400e-a13b-e791132e6bc0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=753bcccb95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3592 identity=30949 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-db-init-22mt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 ad330bd4-3f26-4fae-a1ca-b3e5e4c372d1 default }" containerID=705a345df1555e97bf8ea673eb6b575351146b45b3d114bc05966edd9e07f963 datapathConfiguration="&{false false false false false }" interface=lxcf6eda197685c k8sPodName=openstack/glance-db-sync-479n8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=705a345df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-db-sync-479n8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=705a345df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-db-sync-479n8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=705a345df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=56418 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-db-sync-479n8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=705a345df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=56418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-db-sync-479n8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=705a345df1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=56418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-db-sync-479n8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=705a345df1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=56418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-db-sync-479n8 subsys=daemon level=info msg="Delete endpoint request" containerID=705a345df1 endpointID=958 k8sNamespace=openstack k8sPodName=glance-db-sync-479n8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=67948a4a-f993-4366-a7d6-0ec7941e3853 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=705a345df1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=56418 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-db-sync-479n8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 97137c2a-c943-4222-9bf2-6faf879d81f9 default }" containerID=fcf6ddb91f6e95a75a14629563420b043c65153a909789c139cb2a6d76917acd datapathConfiguration="&{false false false false false }" interface=lxc4c51c88244c5 k8sPodName=openstack/glance-rabbit-init-wvj9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcf6ddb91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcf6ddb91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fcf6ddb91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcf6ddb91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=31030 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcf6ddb91f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=31030 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcf6ddb91f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2156 identity=31030 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcf6ddb91f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2156 identity=31030 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fcf6ddb91f endpointID=2156 k8sNamespace=openstack k8sPodName=glance-rabbit-init-wvj9x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=19c54ac2-f471-403c-b1ab-7dcffde2eae2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fcf6ddb91f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2156 identity=31030 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-rabbit-init-wvj9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 a1d8ad80-c7b5-4bd2-a985-0a1aac17b314 default }" containerID=78a8bf805f129c381762cbb9e8b987b87c7213c44fa5b508d5e1047f3bda228b datapathConfiguration="&{false false false false false }" interface=lxce457a366c1f1 k8sPodName=openstack/glance-ks-service-6kxt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78a8bf805f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78a8bf805f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=78a8bf805f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78a8bf805f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=55298 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78a8bf805f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=55298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78a8bf805f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=263 identity=55298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78a8bf805f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=263 identity=55298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78a8bf805f endpointID=263 k8sNamespace=openstack k8sPodName=glance-ks-service-6kxt8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6b5460e3-f720-4a1f-b96c-3048a8fdadbc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=78a8bf805f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=263 identity=55298 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-ks-service-6kxt8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 641c7b09-db18-4083-9d16-ba9701187948 default }" containerID=ccce203c466a8eceb859c87fead45c8f1ff323d742a365da5c998de661b1782c datapathConfiguration="&{false false false false false }" interface=lxc8e06dc9741c6 k8sPodName=openstack/glance-ks-endpoints-rvnj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccce203c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvnj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccce203c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvnj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccce203c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=29684 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvnj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccce203c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1565 identity=29684 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvnj4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccce203c46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1565 identity=29684 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvnj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccce203c46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=29684 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvnj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccce203c46 endpointID=1565 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-rvnj4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ccf027e5-7a68-4651-aafd-aafaad03be2f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ccce203c46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1565 identity=29684 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-endpoints-rvnj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 8460a0fe-4c9c-4934-9fee-ad6535e7dbde default }" containerID=5a180b36db51e9d3a78de52d33f947f1a4a0f93b1f5376c42bb66b71900aed7b datapathConfiguration="&{false false false false false }" interface=lxce98b98d66e71 k8sPodName=openstack/glance-ks-user-v6kzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a180b36db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-user-v6kzs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a180b36db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-user-v6kzs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a180b36db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=27226 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-user-v6kzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a180b36db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=27226 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-user-v6kzs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a180b36db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=380 identity=27226 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-user-v6kzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a180b36db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=380 identity=27226 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-user-v6kzs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a180b36db endpointID=380 k8sNamespace=openstack k8sPodName=glance-ks-user-v6kzs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=9fcf0e7d-48c6-40a4-b2b5-e00840b89597 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5a180b36db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=380 identity=27226 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-user-v6kzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 4d09f25d-5bcb-4ea2-929e-3128e740c62a default }" containerID=b095de36cf64f406a8dbd677acaed50886a8ac3be09a4636fd086c556af14fc6 datapathConfiguration="&{false false false false false }" interface=lxc80239ad40b92 k8sPodName=openstack/glance-metadefs-load-g999n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b095de36cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-metadefs-load-g999n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b095de36cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-metadefs-load-g999n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b095de36cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identity=21667 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-metadefs-load-g999n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b095de36cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identity=21667 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-metadefs-load-g999n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b095de36cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3440 identity=21667 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-metadefs-load-g999n subsys=endpoint level=info msg="Successful endpoint creation" containerID=b095de36cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3440 identity=21667 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-metadefs-load-g999n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b095de36cf endpointID=3440 k8sNamespace=openstack k8sPodName=glance-metadefs-load-g999n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=bcaac2e0-7259-4a4b-97b3-0cf6987b450d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b095de36cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3440 identity=21667 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-metadefs-load-g999n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 9cb6dffa-530b-4474-9a80-f800ff618cea default }" containerID=d9d5cef0b0efa08cf95fa00336280b6f28441ab2751940effc9f88e17995113c datapathConfiguration="&{false false false false false }" interface=lxc04d3bf95b754 k8sPodName=openstack/glance-storage-init-t9zm9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9d5cef0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-storage-init-t9zm9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9d5cef0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-storage-init-t9zm9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9d5cef0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 identity=15181 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-storage-init-t9zm9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9d5cef0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1660 identity=15181 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-storage-init-t9zm9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d9d5cef0b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1660 identity=15181 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-storage-init-t9zm9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9d5cef0b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1660 identity=15181 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-storage-init-t9zm9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9d5cef0b0 endpointID=1660 k8sNamespace=openstack k8sPodName=glance-storage-init-t9zm9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=1c5362aa-261a-4b7f-bb76-0f94be29a26f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d9d5cef0b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1660 identity=15181 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-storage-init-t9zm9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 2d47143b-2ed2-4559-ab3f-c5aafb0bcbbe default }" containerID=b92179a7faae9a44289cc26297ed9100cd2dfadd7edc3c09e5f18f03b02871cd datapathConfiguration="&{false false false false false }" interface=lxcbb95d37c8d0d k8sPodName=openstack/glance-api-5b66664c65-2ffv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b92179a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-api-5b66664c65-2ffv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b92179a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-api-5b66664c65-2ffv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b92179a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-api-5b66664c65-2ffv7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b92179a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identity=47308 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-api-5b66664c65-2ffv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b92179a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identity=47308 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-api-5b66664c65-2ffv7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b92179a7fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=143 identity=47308 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-api-5b66664c65-2ffv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b92179a7fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=143 identity=47308 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-api-5b66664c65-2ffv7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 5c175fdc-50fe-4b0b-a2ed-5a983b40e188 default }" containerID=3e27410718959f507f7db727597cd5c9f4e8cf056649adaad99d1e4373d5208a datapathConfiguration="&{false false false false false }" interface=lxc362be7c0c8ea k8sPodName=openstack/staffeln-conductor-f7f8fdc8c-fgm7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e27410718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-f7f8fdc8c-fgm7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e27410718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-f7f8fdc8c-fgm7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.118 064ecaf5-2309-45c6-9827-fb065a576731 default }" containerID=f3fd3bb1930e1c793ea4942eed2ca84a6ea97b80688056637c4c73bd6a1e913a datapathConfiguration="&{false false false false false }" interface=lxc7d9dc733ed89 k8sPodName=openstack/staffeln-api-5f54867748-sqmht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3fd3bb193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-5f54867748-sqmht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3fd3bb193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-5f54867748-sqmht subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=3e27410718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=12931 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-f7f8fdc8c-fgm7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e27410718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=12931 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-f7f8fdc8c-fgm7f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f3fd3bb193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-5f54867748-sqmht line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3fd3bb193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=36342 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-5f54867748-sqmht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3fd3bb193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=36342 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-5f54867748-sqmht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 ae04d776-dc49-4f8a-9593-5fbf1b76ae25 default }" containerID=b41ef2fbe3d669c81798826a0df78adf14973259001340f7434bdae320dde019 datapathConfiguration="&{false false false false false }" interface=lxc88edcc060077 k8sPodName=openstack/staffeln-db-init-z5w7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b41ef2fbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-init-z5w7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b41ef2fbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-init-z5w7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b41ef2fbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=4334 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-init-z5w7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b41ef2fbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1796 identity=4334 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-init-z5w7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e27410718 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=343 identity=12931 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-f7f8fdc8c-fgm7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e27410718 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=343 identity=12931 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-conductor-f7f8fdc8c-fgm7f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f3fd3bb193 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=36342 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-5f54867748-sqmht subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3fd3bb193 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=36342 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/staffeln-api-5f54867748-sqmht subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b41ef2fbe3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1796 identity=4334 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-init-z5w7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b41ef2fbe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1796 identity=4334 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-init-z5w7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b41ef2fbe3 endpointID=1796 k8sNamespace=openstack k8sPodName=staffeln-db-init-z5w7d subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=128f3f06-625c-444e-a74f-c5d01579d7f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b41ef2fbe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1796 identity=4334 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-init-z5w7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 e0f43e6a-3b6c-4a9b-a5ea-c9d982f58fb4 default }" containerID=fa93edc01124a7c6d48a088b39af9d1fa0ffae33b6f0362ba221d86e24d8e1b9 datapathConfiguration="&{false false false false false }" interface=lxcadaffdcf709c k8sPodName=openstack/staffeln-db-sync-l2pck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa93edc011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-l2pck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa93edc011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0caa20d4-60c3-4aa7-b055-f399f91438f2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0caa20d4-60c3-4aa7-b055-f399f91438f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-l2pck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0caa20d4-60c3-4aa7-b055-f399f91438f2;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0caa20d4-60c3-4aa7-b055-f399f91438f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa93edc011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identity=34774 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0caa20d4-60c3-4aa7-b055-f399f91438f2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0caa20d4-60c3-4aa7-b055-f399f91438f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-l2pck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa93edc011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4009 identity=34774 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-l2pck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa93edc011 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4009 identity=34774 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-l2pck subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa93edc011 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4009 identity=34774 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-l2pck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager